This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: KMI0sfcEJN8CQGYo16kWG4KCBXtw70RCtKZ50zwihnY=
Subject key identifier: 21:E8:C0:BE:46:E9:58:50:0E:46:D6:5B:29:7F:00:B9:3F:49:55:3E
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019C42B40CF4DABC97898B89765107174798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 14:00:21 +0000
Manifest this update: Mon 09 Feb 2026 14:00:21 +0000
Manifest next update: Tue 10 Feb 2026 14:00:21 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: cNSOPJSUOtWnZoti45kO4zNz4PVb0Y7yPEJoFl8kT2o=)
2: JmBNmBKIgqKO_ZhjRd9uDlu62G4.roa (hash: BFiumCe31FgvogRmYhZXe4XUH4NFOPl+f+uzimA8KGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:0c:f4:da:bc:97:89:8b:89:76:51:07:17:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Feb 9 14:00:21 2026 GMT
Not After : Feb 10 14:00:21 2026 GMT
Subject: CN=21e8c0be46e958500e46d65b297f00b93f49553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:46:ea:98:14:ab:01:cf:54:d8:94:6a:46:
ad:eb:1a:6d:74:e5:8c:bd:11:9f:b8:fc:be:ce:c0:
4d:eb:4a:74:f0:18:e4:27:5f:e8:44:ef:f2:5a:79:
e7:7b:ee:ad:16:c7:c1:23:01:ca:0e:c3:c1:65:9f:
bf:ca:a4:ae:71:08:d3:1b:07:c4:4a:f2:53:3b:ec:
16:3a:25:c4:50:fb:5a:40:1f:f6:77:88:e7:40:d6:
89:b8:7c:0c:e9:fd:a0:d6:61:51:2a:89:f5:21:77:
ad:6c:e1:89:30:99:27:c8:e6:a8:6b:5c:c5:bf:56:
b6:f4:34:99:c6:54:37:67:63:70:2f:13:8b:a5:a6:
63:4e:3e:fe:e3:42:5a:7b:ec:66:30:35:17:98:c3:
5e:f0:ea:ac:cb:66:54:52:18:39:5a:30:ce:18:27:
ce:7b:95:57:49:34:29:f1:a1:bc:35:2b:a9:3a:2e:
9f:15:de:06:db:2d:6a:c2:51:2f:ba:fa:35:cf:77:
e7:98:fe:1c:82:8f:98:ff:d5:5d:8e:5c:80:79:b8:
83:ab:cd:0b:f9:61:ad:5d:1b:56:7f:c1:32:23:36:
ca:f9:e3:d5:57:44:2a:2b:56:07:6e:9b:49:e3:8e:
b4:2a:44:37:f8:31:93:ea:39:10:c9:a6:70:cd:de:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:C0:BE:46:E9:58:50:0E:46:D6:5B:29:7F:00:B9:3F:49:55:3E
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:cc:0f:80:7b:31:24:8d:ec:24:d8:24:91:50:81:28:d5:
34:39:9a:ad:b9:80:60:a3:52:8f:bf:01:b7:87:1d:e6:bf:ac:
5b:56:15:82:74:95:f9:96:9a:70:83:0f:cf:e3:28:33:0e:77:
17:f1:ab:fc:a4:62:3c:9f:b6:2b:ba:46:c1:b9:aa:13:cc:60:
4a:78:c9:bd:28:2d:90:60:1b:32:35:f0:bc:19:c6:f8:a9:69:
8e:a4:85:20:3f:3c:a0:08:7a:31:02:80:b0:5a:af:42:bd:5b:
e7:b2:43:3e:76:b5:31:29:50:1c:5a:a2:c5:1f:9c:27:f2:eb:
a5:52:2f:cc:c4:ef:5c:e6:9e:94:82:64:a9:ba:b4:00:79:89:
9b:a2:47:8c:c9:54:ca:d6:85:35:ba:f3:9c:d1:48:1d:73:b6:
00:c6:19:82:7c:69:4e:71:07:59:f3:03:1c:a5:93:ff:f5:29:
8c:0a:89:c8:ce:2b:1b:eb:71:f8:ea:44:bd:7e:09:8a:f9:cb:
f1:19:18:ba:00:d1:c2:3f:9f:a7:d2:ef:b2:7e:f0:51:a0:d9:
08:43:ec:1c:65:2c:81:f3:9c:cd:90:b9:1e:d2:04:78:64:28:
00:b3:cf:de:22:d4:a2:92:cd:0f:6e:02:2d:5b:e5:6d:5a:1c:
7f:9e:6b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtAz02ryXiYuJdlEHF0eYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjYwMjA5MTQwMDIxWhcNMjYwMjEwMTQwMDIxWjAzMTEwLwYDVQQD
EygyMWU4YzBiZTQ2ZTk1ODUwMGU0NmQ2NWIyOTdmMDBiOTNmNDk1NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6lG6pgUqwHPVNiUakat6xptdOWM
vRGfuPy+zsBN60p08BjkJ1/oRO/yWnnne+6tFsfBIwHKDsPBZZ+/yqSucQjTGwfE
SvJTO+wWOiXEUPtaQB/2d4jnQNaJuHwM6f2g1mFRKon1IXetbOGJMJknyOaoa1zF
v1a29DSZxlQ3Z2NwLxOLpaZjTj7+40Jae+xmMDUXmMNe8Oqsy2ZUUhg5WjDOGCfO
e5VXSTQp8aG8NSupOi6fFd4G2y1qwlEvuvo1z3fnmP4cgo+Y/9VdjlyAebiDq80L
+WGtXRtWf8EyIzbK+ePVV0QqK1YHbptJ4460KkQ3+DGT6jkQyaZwzd6iuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHowL5G6VhQDkbWWyl/ALk/SVU+MB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZTMD4B7
MSSN7CTYJJFQgSjVNDmarbmAYKNSj78Bt4cd5r+sW1YVgnSV+ZaacIMPz+MoMw53
F/Gr/KRiPJ+2K7pGwbmqE8xgSnjJvSgtkGAbMjXwvBnG+KlpjqSFID88oAh6MQKA
sFqvQr1b57JDPna1MSlQHFqixR+cJ/LrpVIvzMTvXOaelIJkqbq0AHmJm6JHjMlU
ytaFNbrznNFIHXO2AMYZgnxpTnEHWfMDHKWT//UpjAqJyM4rG+tx+OpEvX4JivnL
8RkYugDRwj+fp9Lvsn7wUaDZCEPsHGUsgfOczZC5HtIEeGQoALPP3iLUopLND24C
LVvlbVocf55rug==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:30 2026 by rpki-client