This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: Z7ZoffcG6j7iJttuADDcwWaedIhQcy6r71MaVzoAOoI=
Subject key identifier: FC:00:4F:9B:02:5C:FA:6F:26:62:66:CB:47:B8:D8:B9:A5:27:9A:6A
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019C43221B530EFD4A78FF0235EE83305E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 0471
Signing time: Mon 09 Feb 2026 16:00:34 +0000
Manifest this update: Mon 09 Feb 2026 16:00:34 +0000
Manifest next update: Tue 10 Feb 2026 16:00:34 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: jYNaOxR4wog/d09hssu4sVVhu5D++LOeqxPNd+KauDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:1b:53:0e:fd:4a:78:ff:02:35:ee:83:30:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Feb 9 16:00:34 2026 GMT
Not After : Feb 10 16:00:34 2026 GMT
Subject: CN=fc004f9b025cfa6f266266cb47b8d8b9a5279a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:74:68:72:35:30:26:82:c5:95:6d:e3:12:
32:9a:19:dd:e9:f4:67:27:ce:d2:d5:c8:2d:9c:8c:
68:21:4d:2a:6f:4b:10:d8:05:ee:2c:c6:9f:21:23:
b6:95:e4:a2:83:f9:ae:ab:96:65:df:9d:a0:d1:7c:
3b:69:f1:16:5e:b8:be:3c:1a:b1:0b:cc:45:9e:51:
49:88:88:3a:db:e3:68:1f:de:0f:e2:af:40:f1:5a:
4f:62:d9:50:3d:6a:6a:ab:12:ce:8b:6c:4f:bd:87:
19:21:43:53:0a:fa:0f:4b:18:ae:fc:37:78:97:34:
c6:16:77:c3:9e:f5:fe:f3:af:d1:91:37:95:23:8e:
97:6a:58:29:bc:c1:82:7b:ce:54:80:20:33:ad:e3:
fa:55:5f:18:5a:75:a7:6b:20:5e:c3:0e:e5:1c:e2:
9b:32:57:63:9c:9c:4c:d9:25:79:f4:40:69:ac:47:
bb:20:dc:00:00:92:89:a3:24:f9:5e:64:53:a0:bc:
a4:61:24:3a:dc:00:c1:2e:de:15:43:0f:fd:4a:67:
aa:7f:bd:de:f2:7d:f0:31:03:c7:09:03:7b:90:62:
83:36:20:a4:04:93:ec:f6:3d:08:e9:43:6c:43:4f:
3e:e5:44:a9:16:0e:2c:f7:51:4d:d4:ac:1e:54:c7:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:4F:9B:02:5C:FA:6F:26:62:66:CB:47:B8:D8:B9:A5:27:9A:6A
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:31:c0:8a:6d:b7:ab:04:54:f4:c1:d8:7b:a2:1b:26:61:
b1:b9:21:fe:51:0b:a7:5c:7c:93:02:f5:6a:a3:b7:36:44:dc:
7e:b2:1d:48:ff:03:57:0c:b2:26:b7:7e:9a:02:a1:f2:bf:b0:
9e:d1:cf:01:23:88:0b:cc:83:da:84:c2:df:14:eb:6e:c4:9e:
89:83:dc:f6:1c:0b:3b:8a:da:52:f7:83:3c:41:0a:44:8a:18:
a2:19:da:15:b2:54:7d:cd:ee:77:b2:f2:a6:c9:12:0c:87:76:
6f:69:f9:04:19:b4:dc:f6:4c:bc:9e:49:d6:32:d2:86:d7:49:
2f:d4:4e:1a:66:17:cb:6f:17:01:52:a2:ac:5c:e0:07:11:ca:
e4:a2:1b:77:e4:a5:89:07:6f:ac:ea:b9:bd:96:71:20:84:d6:
aa:5e:4d:ec:59:bb:7e:95:56:7b:39:9d:09:1e:0d:38:f8:80:
08:99:ac:1b:ca:b0:36:d3:cc:ff:73:f9:ca:d9:d4:90:af:bb:
3f:e3:16:71:81:4a:2b:8d:fa:ec:de:9d:9c:fa:a2:1b:0c:3b:
bd:6b:f0:05:a1:37:ae:bf:fd:0e:ab:54:18:cc:b8:4e:f9:07:
83:58:4e:76:25:af:9c:6e:8c:38:81:ec:ed:51:4b:34:5d:d0:
ac:a8:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:11 2026 by rpki-client