This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: hC05H+F+8klKpfv8Lfns+RwcXu18A+Cds3R+b08MFTc=
Subject key identifier: 6B:7F:DB:31:4F:F7:3C:B9:D5:35:CB:19:4D:2F:CE:22:55:6D:70:B1
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 019C42B4536786A06DD866137FC5646A73F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 172C
Signing time: Mon 09 Feb 2026 14:00:39 +0000
Manifest this update: Mon 09 Feb 2026 14:00:39 +0000
Manifest next update: Tue 10 Feb 2026 14:00:39 +0000
Files and hashes: 1: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: 7qifmkduYbAS0OoOsSb/eOIQPfJb69cPypXNSa/ogO0=)
2: pqfPRJRXyOZ16sEictRnWg5paro.roa (hash: Iy8adOlkmCKzZcCemxuStClF7zRpOXHA9lf434dtvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:53:67:86:a0:6d:d8:66:13:7f:c5:64:6a:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Feb 9 14:00:39 2026 GMT
Not After : Feb 10 14:00:39 2026 GMT
Subject: CN=6b7fdb314ff73cb9d535cb194d2fce22556d70b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:27:3c:a1:41:fd:85:ae:cf:ae:77:d7:bd:
3b:ff:f1:de:3c:64:46:9c:cb:9a:7e:f0:8e:3a:cd:
07:70:7e:76:48:4d:99:52:91:00:c8:18:2e:25:83:
10:34:f2:01:18:5c:89:7e:96:ae:59:28:be:8e:96:
c2:1b:66:9d:82:1e:a7:30:34:e3:3c:95:2d:03:d0:
66:d3:73:9f:96:50:8d:9e:ae:31:84:60:c6:ea:aa:
0f:13:82:a7:a7:8c:72:72:78:e0:e9:ea:1d:b9:22:
28:ae:b1:3e:bc:84:b4:2d:dc:ad:d0:8f:5d:ea:28:
38:0f:b8:5b:5b:ad:cf:19:08:90:4a:e3:44:76:5a:
63:29:fb:16:73:4a:e0:7a:6f:e9:ea:01:e1:3a:f5:
67:9c:d6:95:8d:59:2d:aa:54:f6:e9:06:5f:b6:37:
d7:eb:5e:ce:6a:7e:e2:56:47:bd:73:c5:4f:13:8b:
75:71:75:3f:04:af:6f:a8:56:9b:4d:18:19:24:62:
15:e3:e2:36:cf:5b:66:a1:a8:99:33:98:e0:6d:d4:
4b:a8:18:df:a1:a7:6b:c0:af:0c:91:ac:44:90:85:
6f:12:95:4c:8e:5e:f3:ec:cf:4f:7a:f4:0a:38:c6:
f3:14:08:52:5f:0f:ee:32:eb:a9:c0:b1:8a:9a:39:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:DB:31:4F:F7:3C:B9:D5:35:CB:19:4D:2F:CE:22:55:6D:70:B1
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:91:7c:e0:65:90:90:72:fe:42:69:61:f9:9f:4d:0c:02:86:
61:ac:68:b3:03:d1:88:dd:5f:0a:5e:ca:bd:b1:35:ef:bf:4c:
ea:93:33:ea:34:9b:c4:62:5c:0e:3f:34:ef:66:cf:d1:47:4a:
b5:c8:da:95:f0:66:5a:36:af:02:ac:92:8f:5e:da:23:8c:fa:
10:37:cb:09:f6:f9:93:ef:04:95:a9:b6:18:2f:db:de:9b:b1:
8c:b0:44:dd:56:06:31:17:41:cc:67:5b:3b:cc:64:9c:d8:c1:
32:86:91:e1:db:b3:64:a7:d4:7d:40:7f:2c:7f:4b:c5:d6:03:
b8:c7:f0:1f:01:e5:92:5a:d9:0e:2e:52:07:d1:3e:c4:90:3d:
24:30:ba:06:72:16:4f:7f:bf:6b:e6:bc:1f:50:5f:36:52:83:
84:df:98:ce:d5:5d:3c:4e:95:c4:3d:65:35:f2:f7:3c:6e:5a:
c8:8c:7f:ac:82:28:7e:23:ba:d2:32:7b:43:ed:9b:ed:ed:3a:
ac:ac:1b:e8:09:00:46:1c:9a:aa:b4:89:7c:65:64:a7:c5:f8:
e6:89:65:80:a1:99:20:45:36:38:65:f7:94:6c:08:da:89:29:
cb:1e:7f:c8:38:6a:62:d4:dd:63:9b:f0:b4:f8:34:a5:72:a5:
de:5f:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:31 2026 by rpki-client