This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: gfqEsPwy3mMOBYyUYxYMVZhfPcdmmaG1pHM0AgwDxpk=
Subject key identifier: 53:E4:FB:A7:6B:9E:83:BC:31:63:97:06:A9:17:8B:26:D4:2D:45:60
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 019C43222500822AED35D281F11EF9E42C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 118E
Signing time: Mon 09 Feb 2026 16:00:37 +0000
Manifest this update: Mon 09 Feb 2026 16:00:37 +0000
Manifest next update: Tue 10 Feb 2026 16:00:37 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: XJNzfgM9gNqQiED8UmiId09o9/B0aTJ0y2SNiv97XHU=)
2: ZHym1jgmQNO1769mOXVyUNOVMEc.roa (hash: 6HGTh8JhgEJnDcdwwWSa7+oUj2V8bxazwsUi6gBiFdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:25:00:82:2a:ed:35:d2:81:f1:1e:f9:e4:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Feb 9 16:00:37 2026 GMT
Not After : Feb 10 16:00:37 2026 GMT
Subject: CN=53e4fba76b9e83bc31639706a9178b26d42d4560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:53:27:ee:0a:2e:ac:7c:ab:5f:87:cb:1e:
2e:4c:15:7c:17:61:76:d7:d4:f8:7b:35:34:93:5c:
dc:f0:f2:e3:f7:81:2c:77:96:ff:4e:08:76:b0:27:
44:72:7b:d4:25:42:6f:e8:73:96:bc:a4:e0:04:84:
9a:99:d4:25:4e:bc:10:a2:88:40:5e:ad:f6:6c:ee:
3e:c0:fe:aa:3f:6a:aa:42:41:bb:f2:d0:da:59:05:
a3:83:cf:e2:52:60:dc:6a:bf:b4:1e:95:45:c6:f2:
62:e4:53:37:c2:91:65:fe:15:82:be:1c:f3:aa:75:
f1:d9:f4:7d:76:d5:f1:56:40:7e:07:61:d3:61:9b:
82:e0:e2:80:0e:f5:25:2f:18:6e:37:85:6f:af:46:
eb:df:3e:8b:4a:57:73:1d:1f:16:d2:f8:fb:9b:fc:
5f:d6:55:ca:a3:6d:d7:ee:df:da:a9:63:7f:86:c6:
0c:35:b5:98:1b:6f:46:66:84:4f:96:85:0c:48:02:
bd:ce:0d:3d:4a:b9:00:d5:25:f9:ab:4b:c2:7e:b6:
fd:4d:20:ad:8d:c8:b2:eb:c6:73:75:78:29:3e:3f:
01:fb:26:79:6e:48:87:82:b6:0c:b7:14:b5:36:30:
59:7b:b5:95:01:f6:4b:1e:80:64:74:16:73:be:4d:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E4:FB:A7:6B:9E:83:BC:31:63:97:06:A9:17:8B:26:D4:2D:45:60
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f4:88:3a:fe:58:14:27:80:aa:b8:a0:03:bd:aa:0d:1c:6e:
c0:58:12:8e:9d:dc:07:38:6e:49:f3:e0:cb:34:ec:42:7f:b0:
48:fe:53:7a:47:8f:67:d7:e7:b8:8e:47:aa:68:1f:45:31:f3:
af:42:aa:f6:67:7e:c6:be:2a:c8:6f:18:0c:09:e6:e0:68:16:
ed:90:02:8c:3b:9a:b2:7e:cc:2e:af:13:cc:89:35:73:a2:ec:
d9:c2:fa:5e:51:70:7d:c1:ad:b3:f4:a5:25:97:31:50:04:f5:
e5:ff:58:36:34:52:ee:60:73:b0:77:77:62:d3:e0:22:6d:9d:
0c:f7:3c:62:f7:e5:61:aa:4f:7e:07:aa:ab:4d:2a:19:26:11:
85:d8:54:ef:18:34:1d:a6:dd:8a:07:9a:57:a1:65:8c:93:15:
41:05:16:71:03:03:88:f9:d2:76:78:94:78:15:88:7f:fa:5d:
a3:72:23:71:7d:ea:26:bd:5c:12:c1:26:c8:e8:23:bc:a2:b2:
b1:b4:c3:39:b3:48:75:52:17:5a:a1:20:fc:a0:95:25:c8:91:
09:35:b2:cb:9b:35:23:99:67:7f:39:91:01:02:ea:a1:83:2d:
5e:61:7a:42:19:39:8f:42:50:95:b6:ac:da:33:f9:53:c0:88:
8a:37:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:44 2026 by rpki-client