This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: 8rhAtLxC6Xjm+WiNjIQo/mDHf7H1MzMhw83JrO5Ww6I=
Subject key identifier: 16:B5:9D:D8:FA:BC:E3:7D:0B:B3:77:D7:09:72:E6:C5:21:CD:D0:65
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 019C435950EC6DB380104D3FC58DB1D5A70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 1437
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: IK1D4FqaxkD0e3Rz3UWDPsWTBaY.roa (hash: VpKoh7MGGe09JzMr2Q/wQfbBpFjOWoXi11g9RixR0Rs=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: WYvGQnT9hplqXAkuEaHQAZq1ogNr4VPF68TijqFokH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:50:ec:6d:b3:80:10:4d:3f:c5:8d:b1:d5:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=16b59dd8fabce37d0bb377d70972e6c521cdd065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:38:b3:6f:c8:94:ff:15:69:f1:c1:bd:a3:
1b:65:de:3a:61:ed:7f:2d:31:e7:45:24:ed:86:35:
28:28:ee:3f:32:f1:02:3c:1a:0e:a7:67:0f:3a:76:
2c:6c:02:67:3f:6e:7c:55:d0:05:40:0b:ba:ec:11:
b5:7d:f7:a9:88:e0:83:0f:ec:1d:cd:60:11:ef:3d:
30:89:ee:2a:00:e0:97:d1:39:0e:24:28:49:58:98:
5e:dd:85:7f:98:7c:36:f8:d2:41:e1:5e:cf:11:ee:
67:34:48:11:65:30:9e:e2:9f:fe:1a:05:62:d6:48:
e3:a0:38:1e:33:bb:f8:3a:5f:9d:27:d6:d3:53:26:
f3:ae:ec:4d:d6:eb:6a:12:b4:75:de:48:c1:57:d8:
c8:15:ff:67:07:69:14:f8:3e:22:0a:23:70:17:5d:
8c:a9:2c:9f:b7:97:ea:92:43:da:b0:89:d0:92:ba:
24:28:19:42:c4:6d:3b:1d:9f:0a:14:81:79:5b:aa:
c4:8d:ac:a3:a2:4d:6f:5f:03:a8:7c:c2:f9:ee:6f:
0b:06:d9:05:f6:48:ad:d6:45:e6:e2:db:a2:72:c5:
2e:42:d5:60:3e:be:ba:d9:26:09:89:9e:40:bf:83:
51:c4:71:74:b2:8e:22:75:3c:01:36:7f:67:4c:8a:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:9D:D8:FA:BC:E3:7D:0B:B3:77:D7:09:72:E6:C5:21:CD:D0:65
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bc:ca:3e:f5:84:93:14:76:7d:35:64:8a:8f:89:a1:a2:1f:
24:98:68:cc:33:ba:c1:c6:d1:27:21:14:73:22:77:87:00:c3:
3d:7c:e9:f5:5e:4e:f5:40:f2:43:d3:bf:9a:18:34:39:c5:a6:
58:6b:76:58:f7:f6:71:e4:d7:c9:fd:a2:84:0d:8f:66:47:5a:
0a:5a:0f:0d:9a:eb:4a:73:e1:a7:80:04:d7:e7:c8:51:5a:d3:
85:0e:74:61:ed:c7:3e:fa:40:b0:c5:a0:bc:88:a9:69:85:91:
ad:b7:90:37:78:c9:c5:0f:49:47:76:68:46:58:e9:71:46:d7:
c4:d9:19:9c:d9:3a:47:e7:f0:fb:24:69:28:52:3b:db:b9:b3:
8f:97:6f:bd:f3:1d:f1:f1:70:60:e7:2b:e2:7b:05:98:c7:b8:
32:a1:fc:45:94:e0:7e:95:61:a3:50:53:48:3d:d7:72:44:95:
47:a7:d1:fc:08:64:0b:fc:28:c2:15:3a:31:49:e9:12:1e:ea:
52:8e:dd:2e:9b:ed:79:1f:58:14:d7:11:e2:d2:5e:68:ac:b5:
b2:0a:ec:d1:0e:7c:1f:dd:54:23:72:fe:09:57:eb:88:f2:a1:
38:b1:23:e0:b1:0d:3e:de:44:7f:71:49:62:cf:2a:da:8f:ec:
f2:31:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:57 2026 by rpki-client