This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: gKiicT424N3x7+Mjs0ly7RQgw8shWaHYXNcTlPFJBHo=
Subject key identifier: 1E:B1:EF:58:92:BB:DF:B8:D7:67:D0:0E:61:67:00:42:69:F2:72:81
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 019C41D8FE8AEBA934D405207BA786F6D504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 06DA
Signing time: Mon 09 Feb 2026 10:01:05 +0000
Manifest this update: Mon 09 Feb 2026 10:01:05 +0000
Manifest next update: Tue 10 Feb 2026 10:01:05 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: 6srVss4fxQTRMAJPU5BpVSHqlk+S+CzF3hkwMBy5qKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:fe:8a:eb:a9:34:d4:05:20:7b:a7:86:f6:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Feb 9 10:01:05 2026 GMT
Not After : Feb 10 10:01:05 2026 GMT
Subject: CN=1eb1ef5892bbdfb8d767d00e6167004269f27281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:d8:cf:6f:2f:95:4c:8b:7e:03:31:2d:f5:
9c:e6:27:18:43:c3:a5:27:6a:eb:d3:c5:18:1e:c5:
cd:9f:ab:0a:f1:5d:cd:e9:39:f7:07:a2:c4:56:87:
b8:75:eb:4e:d5:03:9a:a0:9a:ae:b5:5f:45:a9:c9:
6f:1b:13:f1:aa:6c:37:67:7a:1f:f9:90:2c:8f:d0:
db:e4:d6:d5:73:d2:07:b6:7e:11:c4:cb:78:38:9f:
da:df:60:a9:ba:8d:cd:6a:53:00:78:cf:6b:ad:5d:
d9:4e:24:d7:c2:7a:78:bd:21:ca:ea:8d:8d:4c:99:
99:12:fc:0d:e6:c8:a9:55:0e:55:ad:38:94:cd:b1:
57:ba:a2:98:c8:44:9a:e1:14:8a:ac:b3:ab:05:3b:
4d:43:8d:e7:57:4e:7d:73:aa:87:23:89:ec:3e:92:
6d:41:fa:71:f5:12:a2:16:50:28:ee:8e:34:8c:e6:
be:a6:92:d7:b0:09:20:62:b8:89:6f:e5:01:c7:76:
6c:b3:d2:8d:87:37:9e:75:56:65:79:90:32:f8:60:
9f:01:65:27:fe:23:4b:e3:ca:47:28:c2:40:31:36:
ae:6d:2d:1c:b3:fa:80:ae:43:6d:93:a7:e2:45:1f:
6c:0b:4e:31:9d:a3:a2:1d:77:8b:cc:5f:67:1e:4f:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:EF:58:92:BB:DF:B8:D7:67:D0:0E:61:67:00:42:69:F2:72:81
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:ff:e5:35:6a:3b:cd:6a:1e:9e:35:d6:e4:19:c2:8b:c0:
b6:dc:89:9a:91:07:14:20:33:03:94:7a:69:d0:3d:76:0a:c0:
be:bd:7f:f1:2a:28:00:22:19:8a:d8:52:0d:a2:e9:b8:95:05:
77:2e:9a:50:03:e7:dd:72:73:b3:b0:fe:c6:83:b7:f2:bd:14:
bf:02:75:94:87:fc:ea:95:7d:31:4d:36:db:a4:9a:66:28:9d:
63:50:bf:7c:aa:20:a5:20:d7:cf:54:66:f0:03:9f:e9:50:d2:
c1:b4:16:10:ec:0b:1b:de:92:f1:9d:77:cf:14:f6:29:1f:42:
74:ba:20:2b:58:29:16:10:6f:bf:4f:3e:37:7d:89:d3:5e:a6:
c3:6a:9d:dd:b6:b5:8d:a2:69:28:cd:bf:92:20:5b:5b:ee:22:
d0:b2:bb:dc:ac:7b:4c:9b:1c:d9:ce:51:26:c7:80:8e:12:f9:
d7:06:63:89:3f:df:c2:b8:82:9e:ff:e2:b8:4e:ec:7c:1d:76:
18:e3:f6:09:f8:25:2f:d4:66:51:48:95:cf:20:c6:a1:78:0a:
b6:c9:0c:3d:18:58:c8:bb:44:71:42:a0:12:33:96:e7:50:f6:
b9:79:06:5b:c5:f5:9f:df:0c:58:c3:25:0a:d7:05:36:87:59:
45:16:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:46 2026 by rpki-client