This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: 3BrkPwu9nX39jlclV6HmTiAduyZbVLT6tzsQ0ls4SUY=
Subject key identifier: 81:1C:A3:50:BB:25:D1:D1:65:0A:ED:83:AE:71:92:FF:0B:6A:E9:D3
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 019C438FD6337620A61D575BCC6131F7241E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 10C3
Signing time: Mon 09 Feb 2026 18:00:25 +0000
Manifest this update: Mon 09 Feb 2026 18:00:25 +0000
Manifest next update: Tue 10 Feb 2026 18:00:25 +0000
Files and hashes: 1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: SdnvQzvb6Dqr1xro8TBi0IHBlrz3GC/4wf9ufbNmPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d6:33:76:20:a6:1d:57:5b:cc:61:31:f7:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Feb 9 18:00:25 2026 GMT
Not After : Feb 10 18:00:25 2026 GMT
Subject: CN=811ca350bb25d1d1650aed83ae7192ff0b6ae9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:c8:1f:13:56:30:dc:02:a4:f7:05:3f:83:
14:56:fd:a1:aa:09:c6:9b:ac:77:9f:b7:80:4b:e9:
92:b9:f5:a8:9d:12:c7:c7:d7:63:29:2b:86:f9:0c:
04:4b:91:fd:5a:4e:1b:94:3e:42:81:29:77:05:7c:
81:78:4e:8d:d5:65:3b:63:cf:eb:98:00:bb:36:7c:
a5:08:1c:42:2d:1c:e3:4f:ce:aa:82:93:83:0a:53:
67:c3:16:b1:72:b6:5d:9a:0f:c5:5a:b0:7c:4d:49:
b9:c2:f9:6f:4e:60:8f:0f:70:7e:16:6b:39:d2:ad:
f1:5c:30:a8:b5:a2:34:8f:5f:3e:77:bf:1c:4f:9c:
03:25:a5:fa:47:bb:92:9b:49:73:80:6a:e1:0b:3c:
1c:4b:dc:85:da:ca:3d:54:78:b7:9d:06:57:8b:1f:
de:ee:40:a7:a5:f7:6a:93:6f:d0:5c:7e:56:bb:b9:
a8:50:00:ab:8e:9c:02:5b:bc:76:6f:0a:5b:9a:bc:
ec:39:85:e0:17:08:71:95:f5:45:a7:ae:8d:bd:d0:
98:1c:9d:7c:af:cf:e9:06:0e:94:92:5d:2f:75:20:
e4:48:e3:d3:71:52:3b:54:9a:4f:f5:8d:a2:8d:62:
f2:b2:16:8f:57:ff:0c:8a:1b:ba:ba:d5:29:53:a7:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1C:A3:50:BB:25:D1:D1:65:0A:ED:83:AE:71:92:FF:0B:6A:E9:D3
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3d:bf:a3:d2:4a:85:63:2d:2d:98:91:8f:aa:96:35:05:30:
bd:61:33:99:fb:fc:d8:a8:0f:3a:97:c2:24:eb:86:94:3a:84:
ea:48:ac:43:8b:e3:88:2b:b5:e9:5b:40:ac:c5:1e:4e:85:a0:
b4:86:67:df:10:be:c8:c6:35:68:1e:a2:68:9c:5f:ed:5d:c5:
67:68:45:00:8e:e7:f8:8a:90:c3:f9:63:7b:aa:df:90:25:ec:
18:36:f6:09:92:50:c9:13:a7:b6:ea:9f:c6:50:60:3b:d2:25:
8c:69:91:f1:12:0c:fd:12:ea:7e:45:4a:67:96:51:e0:86:05:
b3:7f:6d:22:81:eb:c5:9d:2a:c5:f3:81:56:6e:db:8d:1b:5b:
b7:9f:1a:d1:85:92:36:33:d4:8f:23:5f:cd:95:83:9d:d7:99:
45:e7:a1:c0:d2:06:36:65:12:11:15:58:d9:9d:fa:09:8e:50:
d9:d3:c2:09:04:a2:c2:3c:81:30:c2:d0:43:fe:e1:d3:bb:54:
9c:6b:2a:e7:f3:6f:bc:e7:3d:36:04:f7:08:ba:00:15:cf:c8:
f4:7b:bb:48:7d:f1:98:d0:00:b4:56:8a:fb:60:a4:b0:2d:da:
63:33:51:c0:76:11:0d:5d:4f:63:2c:b5:2f:e5:d2:79:1c:09:
a1:72:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:26 2026 by rpki-client