This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: BUyFLGp9j27cp5N3NoS7S1UVKGmarx5SFLxu2SG35fk=
Subject key identifier: C1:4F:FC:D4:28:43:19:02:CE:0B:D4:2E:12:5E:31:84:13:E1:10:AA
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 019C41344CF02A46DC08B3218DF73EFE551E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 179E
Signing time: Mon 09 Feb 2026 07:01:12 +0000
Manifest this update: Mon 09 Feb 2026 07:01:12 +0000
Manifest next update: Tue 10 Feb 2026 07:01:12 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: K5yqkdfeagBGVP/iNvT3WEshcZJpoKosS5OWu46uzXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:4c:f0:2a:46:dc:08:b3:21:8d:f7:3e:fe:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Feb 9 07:01:12 2026 GMT
Not After : Feb 10 07:01:12 2026 GMT
Subject: CN=c14ffcd428431902ce0bd42e125e318413e110aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:31:e5:66:89:98:12:c3:a9:fa:f8:f5:ff:
bc:6e:68:c8:5e:8b:30:1d:01:0b:32:0d:e0:fd:40:
07:4f:ef:b3:5a:80:f1:28:19:2c:16:3f:22:a6:c9:
4c:e8:ec:15:50:b6:3e:88:5d:08:f5:fa:f1:f6:73:
b1:6e:7e:92:46:4a:88:13:f2:8f:f9:78:ea:8c:86:
70:2f:4e:10:58:ae:c5:26:90:c9:7a:9b:df:ba:08:
78:7f:b5:8b:e3:91:4c:c7:a3:47:fb:f7:d3:61:c1:
ca:2c:5c:b9:ce:3f:b9:23:c4:0e:7e:d4:6c:75:af:
1f:40:5a:59:93:6d:2a:fe:fe:fe:ff:c1:87:92:a1:
34:d6:dc:de:2e:0b:c2:dd:ee:83:03:b8:3f:bc:47:
ad:95:8c:01:d7:99:95:51:7c:59:22:a8:5b:a0:bd:
be:e1:d9:38:90:cb:51:6a:b7:7d:14:7e:c9:5e:d4:
ae:03:c3:2c:c4:d0:70:cd:d3:7b:4f:b4:51:6c:b6:
8c:29:99:f1:fc:5e:8e:0e:54:59:57:d3:c8:f8:44:
80:6c:12:6b:49:15:41:78:c1:89:d1:fe:a5:b6:90:
ae:c7:ac:26:25:ac:58:e1:2c:2b:6f:8a:80:46:a7:
b2:d6:04:65:e6:bd:dc:62:db:e2:f9:a5:9e:9b:bb:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:FC:D4:28:43:19:02:CE:0B:D4:2E:12:5E:31:84:13:E1:10:AA
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:10:ab:d4:6c:70:08:2e:95:0b:2c:72:c2:17:ea:94:8d:d5:
1c:e7:d1:a3:4c:b1:8b:4e:82:fe:73:6c:a3:41:f8:65:cb:56:
03:8b:63:b2:8f:2b:8d:8c:c0:b8:24:60:cc:f8:d4:b6:6a:58:
6b:96:95:0b:c7:64:fb:b9:4b:b7:82:b4:69:ff:a2:f4:62:d9:
40:de:b8:dd:9a:a1:4d:27:fe:02:6e:70:16:77:86:ff:58:ab:
08:d8:3a:22:75:b2:78:c6:89:2d:a5:9f:b7:05:eb:b5:99:43:
65:c3:25:f5:84:fb:5f:22:6e:49:76:d4:61:41:7a:ba:93:ef:
06:f0:f5:79:fc:80:f7:c0:ba:43:3a:0a:d4:23:44:27:92:3b:
76:89:7e:50:32:b4:68:e9:ca:1b:6b:f4:7d:6c:84:7f:90:6d:
86:8b:8b:2f:7f:07:de:a4:9b:20:b7:e2:ed:42:d8:d0:57:00:
e3:8f:75:ae:6c:da:7c:63:1d:58:00:b2:8d:c4:66:48:25:26:
82:0f:a7:fb:d9:0e:cc:d1:67:2a:77:28:20:8d:bc:d3:11:db:
c8:04:0b:86:14:43:90:b0:21:49:37:c5:93:24:01:eb:1d:96:
7e:fa:7b:65:43:1c:2b:e2:ba:30:9c:9d:e4:7d:bd:67:83:3b:
6a:a4:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:22 2026 by rpki-client