This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: K78bOjAeMxprZDwAkf2XULvvF2+wPxTBkpjLmV11z+o=
Subject key identifier: 09:CB:3A:2F:5C:16:14:A0:E9:97:09:99:91:9E:A1:68:6F:68:35:E9
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 019C2AE390AB3FB10882286454056E7F8D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 0636
Signing time: Wed 04 Feb 2026 23:01:22 +0000
Manifest this update: Wed 04 Feb 2026 23:01:22 +0000
Manifest next update: Thu 05 Feb 2026 23:01:22 +0000
Files and hashes: 1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: oZN9YYpu/saCsucPjmhX+CNRvHoDjxeEsm1x0FuFPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:e3:90:ab:3f:b1:08:82:28:64:54:05:6e:7f:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Feb 4 23:01:22 2026 GMT
Not After : Feb 5 23:01:22 2026 GMT
Subject: CN=09cb3a2f5c1614a0e9970999919ea1686f6835e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:e8:fc:d7:dc:c3:b8:13:e2:81:81:38:e3:
87:2d:30:c8:c9:09:12:cb:c9:70:9a:6b:16:7c:82:
e0:4c:29:23:09:76:65:95:1f:b0:03:50:9f:4e:fe:
1c:05:6e:9d:58:01:83:d0:73:50:cb:ab:67:52:8c:
67:d3:d7:dd:29:6f:cf:db:cc:84:4a:55:ae:e6:2f:
78:16:c0:fb:b3:62:54:36:b5:d7:3b:6e:df:a7:ac:
63:7c:60:85:3b:32:d9:43:e9:02:fc:cf:42:3a:93:
21:40:af:43:37:ff:4b:6a:f5:4a:fe:c6:75:33:80:
3f:c0:fc:b6:86:fd:17:c8:76:ed:54:78:b5:d7:16:
ce:74:a0:67:51:79:d1:31:c1:ff:21:46:46:97:5d:
b8:dd:3d:63:77:b1:4a:c1:0f:ba:86:22:92:6d:8c:
67:09:27:26:c3:b6:5c:74:13:bc:eb:ac:f3:55:74:
e8:57:a7:08:fd:d2:c6:ce:d1:c8:9b:03:cf:1a:0f:
aa:2a:d1:23:02:a3:44:f1:49:cf:b3:50:e9:59:c8:
76:9e:46:8a:40:78:65:9a:5a:c4:c8:f6:d9:01:47:
c8:68:73:cb:e6:25:e3:4c:14:e9:aa:38:41:95:79:
be:0f:9f:86:59:55:df:45:03:d0:f9:02:cf:4b:50:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:3A:2F:5C:16:14:A0:E9:97:09:99:91:9E:A1:68:6F:68:35:E9
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:62:ab:b0:e8:ab:d2:24:3f:da:1a:59:a3:41:4f:7d:83:
26:ff:26:10:d8:39:8d:94:fe:76:9a:8f:9d:ea:ca:e3:e4:c4:
b3:3f:a3:07:06:bc:bf:07:50:e6:77:6c:1c:af:5d:d6:65:d6:
9b:56:44:b3:7d:94:3e:cb:7c:0d:6e:ba:c7:68:3f:b1:e1:cb:
1c:9d:e9:c3:bd:20:04:5d:9d:ed:7d:3c:da:31:ba:3c:59:10:
a9:fe:42:ba:35:5f:a7:5a:b2:17:77:b7:3a:e0:6b:c1:96:8d:
8a:fb:6b:4a:66:69:e2:bd:d2:c5:b2:dd:c6:e3:28:1d:c8:49:
85:fd:0f:0a:ea:ca:a6:28:0f:b3:e5:67:33:9a:e2:7a:7f:0b:
ca:0b:32:31:24:6d:03:c0:b2:12:c6:3d:48:09:d6:6b:c6:97:
ad:f2:2d:dd:73:d3:03:9b:e8:0c:b2:47:51:6f:3d:cd:ae:d3:
f3:9f:a3:91:d9:a6:ce:00:bb:17:74:6a:82:a7:bd:5b:57:38:
b3:3f:83:b7:80:cc:bf:45:74:7f:81:83:cf:09:55:b3:27:57:
e8:80:ad:45:31:6b:ba:6d:7b:79:c2:40:c7:40:5a:12:91:1c:
06:ed:3b:65:97:7f:fb:44:e1:55:fa:df:cc:a7:b4:36:19:c7:
d3:35:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:27:56 2026 by rpki-client