This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: YapUm6EtUGX3HKWUsopYoKhI8VR6M7KIETA/f1BoDG8=
Subject key identifier: B4:B7:51:D4:40:59:56:EB:92:49:27:F1:A0:94:37:C2:A9:20:EA:5F
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019C420FBE626570FDEB268F406935D4BDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 1272
Signing time: Mon 09 Feb 2026 11:00:53 +0000
Manifest this update: Mon 09 Feb 2026 11:00:53 +0000
Manifest next update: Tue 10 Feb 2026 11:00:53 +0000
Files and hashes: 1: 1-PeFhmqOuGLWhYL6e4WamiqcSm8.roa (hash: D5OapCvUQLtel5Rjh+LrTfB4vqxFkS0kdGHkxYpTPSk=)
2: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: WjSoWvXNPtkygCyLxFvxDBR7phj644eka4UlX/afKfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:be:62:65:70:fd:eb:26:8f:40:69:35:d4:bd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Feb 9 11:00:53 2026 GMT
Not After : Feb 10 11:00:53 2026 GMT
Subject: CN=b4b751d4405956eb924927f1a09437c2a920ea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:c0:4e:9f:9b:25:b5:46:e3:4a:f1:01:db:
0f:38:79:73:34:4b:e1:9c:48:3d:ad:16:15:d3:af:
6a:53:90:37:a7:f9:fe:0b:b7:5e:88:9d:83:e2:a2:
f4:81:41:f2:e6:50:fb:12:e6:05:a2:ba:6c:4a:5d:
0f:cd:75:d6:18:32:1b:af:55:15:11:d2:79:01:e4:
82:03:ab:7b:7d:de:20:fe:58:b4:b6:b0:5f:a4:1e:
c6:28:ba:f9:9c:6c:21:93:00:73:fe:d3:85:88:cc:
0d:48:36:22:f4:4b:f6:ba:22:ac:b3:df:02:b3:11:
bb:16:2c:c9:f0:05:a0:63:6e:6a:2a:07:f4:e8:17:
bd:68:22:26:9a:0e:f6:33:c4:2e:6a:d1:01:98:42:
9f:9a:b3:70:02:31:1f:7d:b7:e8:fd:04:d8:70:4b:
27:ac:b2:82:96:7b:d4:cd:97:7a:09:3f:ca:ef:bb:
87:22:96:62:41:13:b3:81:b9:d2:1c:3c:c2:d8:6f:
56:1f:0b:13:83:91:6d:ae:cd:64:4b:9f:76:b8:43:
23:c8:07:85:39:8f:ab:9c:91:80:a0:5e:61:30:d4:
ac:74:6c:e4:dd:56:73:fa:2f:b7:15:ce:0c:ad:cd:
24:00:be:63:8d:5e:31:4f:bc:77:b5:de:98:58:a7:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:51:D4:40:59:56:EB:92:49:27:F1:A0:94:37:C2:A9:20:EA:5F
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4f:62:2c:e2:1d:17:86:7f:ff:28:52:9f:8d:fe:99:1a:ba:
79:11:a9:77:a5:ba:5e:3d:3f:fa:0c:0a:36:7a:7f:41:85:25:
de:fd:ff:21:fc:67:e3:1f:86:52:5d:92:f7:6c:f9:95:ac:75:
d8:71:38:f1:34:6e:93:e4:9f:1e:42:f5:22:77:78:8d:ab:aa:
47:99:b4:3b:0d:8c:4a:5f:05:12:72:eb:cd:df:b5:20:49:12:
79:0e:bf:a4:e7:94:7f:c6:f2:ce:0f:eb:85:58:fc:49:98:13:
b4:6e:6e:27:f6:e4:02:40:7e:d3:62:67:cd:75:f1:20:91:31:
3c:26:6e:21:c6:a9:29:82:6c:06:ee:e8:b4:97:62:ec:36:4d:
f2:6e:43:f3:e2:69:2a:5e:6c:33:0e:8c:0d:21:59:74:a4:01:
7c:3f:82:7a:bc:51:19:a6:7a:55:b5:1a:38:c2:c3:c8:a8:12:
67:94:33:c8:09:b4:92:c9:5c:de:9d:80:c3:ae:a1:41:fa:8c:
3f:68:9c:70:56:bd:24:e9:42:b1:c5:57:7d:53:97:20:f8:35:
5b:b4:73:4d:84:9d:12:f2:71:d3:46:cd:79:33:04:9e:7c:cc:
39:8b:a4:35:ad:b3:1e:ac:bd:48:61:78:32:87:86:f4:d8:8e:
3d:f6:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:43 2026 by rpki-client