This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: 2ZhE7GeR2uzYRJR5Aq6bdf63Bmn6j2fh7rwz6/w+4Lw=
Subject key identifier: F2:B0:49:3F:0B:4E:F6:9D:47:7D:D7:E7:08:FA:0B:3A:DA:E3:5B:D0
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019C43C73DDDF29E4C882065C477473C0BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 19:00:56 +0000
Manifest this update: Mon 09 Feb 2026 19:00:56 +0000
Manifest next update: Tue 10 Feb 2026 19:00:56 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: JpvUyIjZ0DZe8KP8glieecMT/0O/lx1RBbmEcxzKRmU=)
2: r8PbpDzHXgfJiNwt0p1njiTGzqA.roa (hash: +SJYxb1bGepByhIB3drzHoM1u1Z/gMv0EMWpc82/7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:3d:dd:f2:9e:4c:88:20:65:c4:77:47:3c:0b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Feb 9 19:00:56 2026 GMT
Not After : Feb 10 19:00:56 2026 GMT
Subject: CN=f2b0493f0b4ef69d477dd7e708fa0b3adae35bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:d2:e8:2d:51:a1:8a:e2:8f:86:5d:55:b5:
ea:d4:ae:72:e8:12:aa:5f:ef:2e:da:ca:a2:41:74:
63:5e:f7:bd:a8:40:f7:1a:cb:0e:df:c1:f9:cd:dd:
ec:78:d3:44:f2:23:74:92:1e:59:50:a8:df:f6:7d:
be:68:f4:a0:fd:30:4c:f6:91:59:ac:36:23:68:ae:
a7:68:77:47:d5:e6:2b:95:04:1f:86:e7:0c:36:61:
10:cc:66:7d:0a:5c:a0:7e:7e:b3:98:91:40:3e:c4:
b2:40:f4:34:39:32:b9:9c:a0:ee:11:59:31:b9:f9:
a3:c3:2d:2e:21:b9:a7:7d:d4:14:82:6a:77:a3:3c:
de:f5:b6:2e:27:e5:e5:ca:13:b7:b8:89:94:92:b4:
93:c1:86:15:05:48:26:5a:aa:c5:34:2a:1a:21:71:
11:87:e7:60:22:a9:e0:cf:7b:66:62:c9:e6:3c:a4:
21:2a:ea:18:d0:9c:d6:89:db:a0:bd:2e:b2:26:27:
b6:1d:a0:6f:2a:47:d4:e0:a0:2a:19:d0:15:9d:2d:
1c:09:53:0b:c2:d7:20:e5:12:7a:e8:4b:69:58:41:
d9:b3:bf:69:8b:e5:40:59:e5:83:02:04:6e:f5:54:
e5:9c:e5:ac:e1:27:ca:2d:68:80:88:4d:64:6a:df:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:49:3F:0B:4E:F6:9D:47:7D:D7:E7:08:FA:0B:3A:DA:E3:5B:D0
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:be:86:ec:30:e0:07:45:55:ed:24:67:7c:d9:59:6c:80:
04:57:d8:70:ea:fb:72:b0:4d:f9:02:6d:44:e2:5f:31:e3:fc:
1e:c0:09:78:f4:20:29:5f:17:02:51:b0:16:4f:b6:9a:77:ae:
ac:53:ac:16:e9:e7:4a:57:7d:2d:2e:2a:cb:da:1b:3c:f2:8b:
0b:9f:2f:57:ef:23:a2:5a:a5:6c:e5:54:45:c8:d0:f5:09:3e:
05:f5:84:e5:46:af:80:26:70:13:57:90:30:9a:9b:7c:8c:61:
0e:f1:de:31:12:e9:b1:20:c9:c0:aa:a9:18:2b:bf:68:ba:a9:
75:3c:6f:4a:4c:54:d5:7a:64:cb:98:1d:59:c3:75:58:17:67:
91:b6:77:16:06:4c:62:22:87:80:d1:64:c4:45:1b:80:9d:6d:
1e:7c:65:4d:69:e8:8a:08:49:6b:cb:cd:39:f6:3b:59:8c:00:
b2:0c:bf:d1:1a:15:6a:26:64:4a:9e:13:65:cc:7f:ce:95:bd:
98:9e:ed:4b:0e:c2:66:8f:9e:6a:65:99:47:05:da:90:4e:b2:
ba:3b:80:89:7c:61:d9:f9:0e:72:be:b4:4a:36:3d:7e:78:9e:
ec:cf:2a:c5:49:c3:bf:9d:cb:df:de:9a:60:75:a8:30:09:64:
44:95:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:03 2026 by rpki-client