This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: mmEg/GeGVJoUo/5hIw1I6f3XLiE2eV3xIKCgsGZ0ah4=
Subject key identifier: 26:8C:38:56:87:28:0C:84:BD:B8:35:FB:82:F0:7F:11:34:67:4A:F9
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 019C44A2847DE8FFF82A332BC5AFE8341479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 02C5
Signing time: Mon 09 Feb 2026 23:00:27 +0000
Manifest this update: Mon 09 Feb 2026 23:00:27 +0000
Manifest next update: Tue 10 Feb 2026 23:00:27 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: 7hBrTYNAoK54VeG7+ptrOvs51AW4ZzZJqAt6+n7m1vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:84:7d:e8:ff:f8:2a:33:2b:c5:af:e8:34:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Feb 9 23:00:27 2026 GMT
Not After : Feb 10 23:00:27 2026 GMT
Subject: CN=268c385687280c84bdb835fb82f07f1134674af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:ad:50:f3:e0:f1:fc:f9:3c:e8:7c:70:80:
49:36:2f:48:8e:4d:f4:72:07:fe:ea:63:8e:ef:9e:
f0:a0:79:bf:cb:fa:71:83:c5:dd:dc:6d:62:c6:65:
ce:51:5e:53:e5:d7:ff:46:e7:a5:71:b3:5a:d9:65:
96:bd:4a:66:ee:b5:4e:e5:c5:e6:86:24:47:4a:bf:
f9:4e:4c:aa:e9:5e:6e:08:cf:62:9f:77:6a:1f:cf:
48:ce:7e:f3:ef:9b:c8:3f:45:8e:f2:20:21:fd:f7:
62:09:a4:27:68:1f:0c:9f:7c:0a:f6:c0:c9:0e:03:
7c:be:48:e0:03:36:58:59:6e:0d:68:30:d3:6b:0e:
55:76:bd:4d:1e:4c:1a:d4:d5:cc:88:77:d0:e0:4f:
0f:7d:0e:12:b8:39:8e:73:d5:b5:3d:29:12:81:52:
3c:e3:ba:8c:fc:3a:56:4f:fc:ec:e0:93:fe:a9:19:
c1:0c:d5:f5:57:1b:e5:d4:0c:07:d6:39:ff:04:c3:
b3:e9:0f:6c:0a:aa:33:cc:73:bb:57:49:07:e6:d1:
19:ee:0e:96:b4:8e:e5:80:d0:3d:fd:0e:ba:31:1d:
c9:85:48:dc:7c:fa:7c:e0:b7:69:10:d0:7c:c6:7e:
d7:c5:80:82:db:e4:55:a3:86:78:3e:03:0a:a1:1f:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:38:56:87:28:0C:84:BD:B8:35:FB:82:F0:7F:11:34:67:4A:F9
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:e4:85:d8:a4:45:ae:7c:2d:e2:17:ba:77:38:11:70:f4:
ae:e1:ec:84:b0:84:dd:c8:8d:40:1a:a5:32:45:36:21:c5:e2:
fc:46:8d:e2:64:bc:a8:00:70:cd:e3:19:8b:1a:65:d1:3b:e0:
95:69:06:95:9b:f8:06:c7:d3:d5:60:f6:58:fc:b7:61:2c:e5:
76:ca:13:8f:28:3d:47:cf:dc:7b:e8:27:47:f7:98:e9:e7:0a:
17:a3:21:20:68:7d:ef:d3:90:ad:77:80:bc:ee:79:03:09:3e:
44:22:11:d2:c0:75:10:62:c5:97:86:17:cd:0b:cc:8b:c0:45:
cf:b4:38:73:ab:16:14:4e:04:e6:4a:be:94:3a:50:9a:1a:f0:
99:42:fe:08:45:55:fd:7a:7e:b7:d5:f9:83:ce:f6:ee:b9:cc:
ed:07:2e:e9:ac:27:3d:4e:c0:45:a2:e5:1b:3b:5f:c4:80:63:
f1:78:93:9f:07:0f:db:40:e6:e7:45:cf:a2:fd:03:46:6a:eb:
44:89:7e:74:42:da:7e:28:ad:d3:1a:00:28:12:1f:3e:a7:5e:
9c:81:46:f0:8d:f6:75:2d:15:2c:00:e9:8c:ad:74:e1:eb:31:
e0:07:de:ba:fe:0c:7e:18:04:37:ad:f1:fd:8a:c1:49:5d:21:
2c:32:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:19 2026 by rpki-client