This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: TadtA5o3tNtvp3urKZSxDauev/XeuVH6Kj1zU39hKE8=
Subject key identifier: 24:9C:28:EC:8A:24:6C:12:46:38:20:11:5B:5E:BC:EF:3C:8C:06:FA
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019C42467061B78B2D59AB01BD810C0AF294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 1391
Signing time: Mon 09 Feb 2026 12:00:38 +0000
Manifest this update: Mon 09 Feb 2026 12:00:38 +0000
Manifest next update: Tue 10 Feb 2026 12:00:38 +0000
Files and hashes: 1: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: uB5tZbmgi6FTOMChQPbA0CVVAuR/GFMoUC+qBnmmTRQ=)
2: bKdz8rFHyrzAIFA57TIT19mDKGc.roa (hash: 22Fu9At8wBjrLfQsilSYa4ZG0swleKB41MAi2nrwzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:70:61:b7:8b:2d:59:ab:01:bd:81:0c:0a:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Feb 9 12:00:38 2026 GMT
Not After : Feb 10 12:00:38 2026 GMT
Subject: CN=249c28ec8a246c12463820115b5ebcef3c8c06fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:a7:bf:0f:35:05:b6:2a:82:20:10:6c:30:
7f:fd:a0:1b:59:98:22:62:23:94:ea:88:76:96:e3:
67:08:bd:bc:9d:eb:b4:de:6a:15:a5:73:17:90:6f:
bb:75:8d:9c:61:c3:47:4e:a8:8f:eb:c8:4e:25:4f:
7e:f3:94:5b:57:80:ff:8c:a6:c6:69:1d:ab:bd:b4:
d1:e0:97:a8:59:5e:ae:10:9d:99:5c:51:40:f3:03:
40:7b:72:0d:a3:55:b6:71:fd:f2:e2:b4:40:7b:30:
ea:db:14:96:1d:3c:70:c0:eb:48:1a:31:63:5e:45:
3b:23:7b:f0:28:52:8d:91:53:76:ab:70:a2:19:5c:
6b:ed:8d:89:9b:77:fd:f5:42:26:51:74:70:7d:8e:
d1:5c:36:7a:25:62:90:27:49:ef:c4:82:7a:f2:80:
92:03:93:cf:fa:14:3c:eb:7e:ba:5a:c6:ba:38:06:
cf:40:dc:dd:c8:39:81:89:2c:7c:27:1e:91:3f:c1:
81:70:25:66:57:71:a2:da:76:c7:b4:53:62:bd:d0:
a0:00:b5:31:37:fb:67:88:3e:44:e4:fe:f0:99:45:
a7:d0:37:8b:09:78:c8:5e:7f:8c:78:5e:ac:3d:ae:
c6:30:5f:47:44:9f:56:bf:9b:2e:d1:89:2f:df:04:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:28:EC:8A:24:6C:12:46:38:20:11:5B:5E:BC:EF:3C:8C:06:FA
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b4:2f:d4:4f:2b:b5:db:7a:7b:f9:01:86:76:ed:73:94:0d:
13:4b:4f:cf:3f:cf:33:bc:b1:11:4f:d2:b5:55:94:e7:5d:bf:
11:21:e2:f9:55:f1:41:2a:c3:59:fb:1e:05:af:85:9b:9f:e3:
1d:d4:40:22:c5:ac:c9:8f:3c:11:cb:4f:33:31:08:be:7d:3c:
16:6c:1f:71:ff:ac:b5:32:3f:06:28:09:28:bf:5a:fe:a7:1f:
73:20:69:4c:6f:19:f6:e8:a7:d7:2f:27:d2:d3:d5:46:07:f1:
bd:87:6d:b1:25:92:a2:48:f5:3d:3b:5d:7b:d7:0d:3e:27:2d:
ff:b5:c3:51:6f:b5:f3:3e:da:18:72:e0:3b:93:f5:c2:3a:b2:
f5:a1:e1:8a:35:ca:83:2a:d4:0a:21:66:e4:aa:04:27:3c:08:
bc:db:e5:e0:77:51:8b:b6:9e:c8:36:1b:7e:80:a0:0d:ae:1e:
45:c7:5f:7a:17:c4:10:a5:85:74:29:b9:9d:3b:57:9f:08:d2:
4c:1f:85:c7:45:38:2c:01:32:ec:56:e4:3f:ed:44:a2:4e:b9:
33:29:b4:5b:0c:e1:aa:99:15:f5:95:eb:e6:22:88:d5:e6:45:
b9:47:f8:75:73:58:ad:e7:1b:7d:d1:fa:f7:d1:ee:b9:92:d2:
be:61:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:02 2026 by rpki-client