This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: J5AHq2xPucguIhgdx/KO+hwc/piNhHrBVMIjQ60hBMc=
Subject key identifier: 5C:00:6B:5E:A5:57:EA:70:6A:E5:A9:6C:0B:DE:09:DF:6B:8E:FA:AD
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019C42EAEE921AF4EA92FAAB767B712BC9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 15:00:18 +0000
Manifest this update: Mon 09 Feb 2026 15:00:18 +0000
Manifest next update: Tue 10 Feb 2026 15:00:18 +0000
Files and hashes: 1: KrMG047MsDkcwkxBcUD2n7II2ek.roa (hash: 6Sar3x354qtl7kCtCHhcg2W3/WLEoHt036CjyIz1o2g=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: Cwsv3L3P+qwkUFDQOPsTsdbgGR4JlCFPxVNhBHqftUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:ee:92:1a:f4:ea:92:fa:ab:76:7b:71:2b:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Feb 9 15:00:18 2026 GMT
Not After : Feb 10 15:00:18 2026 GMT
Subject: CN=5c006b5ea557ea706ae5a96c0bde09df6b8efaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:11:ae:43:a7:1b:cd:b1:98:c7:55:69:fa:
22:c3:00:39:af:4d:7f:9f:8a:bc:2c:d7:9e:3d:a1:
e5:7d:c8:39:9d:51:e6:61:1c:71:cd:e9:1a:00:20:
de:b1:37:5e:65:a1:b7:9d:d4:c7:d2:65:6e:ca:f2:
05:ff:29:b7:f0:8b:ba:18:1f:0f:c4:ab:fb:db:15:
be:3b:19:a0:ad:bb:46:64:97:33:35:03:3a:78:85:
33:d0:85:de:14:8c:bd:ba:02:39:d1:90:18:bf:9b:
b8:8c:b2:6e:43:9d:ae:68:00:9a:32:45:3d:77:fd:
78:9b:a9:4c:ff:5e:24:a4:6e:7b:d3:73:37:c2:82:
ba:2f:67:18:4c:65:a6:45:42:00:12:06:b4:58:4f:
76:a4:6a:96:b9:9a:81:68:f3:64:cf:72:0c:12:63:
f9:3f:6d:85:35:e0:4b:f4:3f:c1:43:0c:fa:57:6e:
8b:d8:05:f3:6d:62:a8:23:27:8b:64:6f:42:cf:4b:
da:ff:29:ea:5a:0d:c2:30:c4:6b:97:a0:0d:59:a6:
ce:98:c6:a4:26:31:a0:b6:08:4b:72:b7:31:ee:25:
06:c5:c1:8c:1f:33:9c:dd:1a:16:ed:ab:ca:c7:dc:
95:55:f9:cc:13:1b:66:eb:b2:f5:a2:9f:75:f9:29:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:6B:5E:A5:57:EA:70:6A:E5:A9:6C:0B:DE:09:DF:6B:8E:FA:AD
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:d7:dc:c2:00:e0:2b:ae:c0:ff:93:3a:e8:3b:fe:7a:59:34:
39:f5:54:b0:da:aa:a6:13:3e:dd:4e:cf:14:4e:12:ed:fb:21:
d9:bd:34:8e:34:a1:5d:cd:8f:ad:4f:6c:e2:58:0e:fc:4d:ef:
39:74:e7:32:06:46:d4:17:b4:37:fd:c2:cc:3c:b9:1b:0d:77:
7a:3f:59:13:6a:55:f2:35:69:c9:6a:f9:82:4e:b7:cc:b6:0d:
61:8e:10:cd:66:2f:b0:ea:8e:1b:f4:89:aa:3f:66:04:12:3a:
68:c7:48:4a:3b:14:09:80:1d:93:a7:8b:02:a4:f6:50:7c:a5:
51:cf:f1:35:2c:79:8b:82:b9:8d:cd:30:b9:ce:bc:0b:52:97:
eb:b2:5f:78:7c:5b:17:fb:e8:5c:42:1b:ce:b0:b6:b7:71:5d:
96:31:c4:38:14:b9:c3:6b:48:33:18:f1:9a:5e:d1:fe:c8:5f:
3b:fc:1a:84:ac:ec:5a:a4:38:55:7a:b3:38:95:fa:23:45:7f:
43:3d:92:a4:95:be:ff:f3:f7:b7:3f:36:07:40:30:af:88:c4:
cf:c6:f9:67:2e:a3:ff:5c:c3:47:07:d4:0b:0b:ee:34:3c:96:
1b:15:b9:ff:96:08:9b:30:81:15:05:60:8a:88:6e:91:bf:25:
56:16:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:39 2026 by rpki-client