This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: HwlvMLw2M+bMkZgPYvGzpgtX097+iQZstijY2XE9/F0=
Subject key identifier: EE:B2:92:6C:47:5F:88:CB:39:1C:8E:E1:7F:2A:4A:86:E1:0B:7E:94
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019C420FC1F2FFEFC7FD44E51E2DBC8223C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 019C
Signing time: Mon 09 Feb 2026 11:00:54 +0000
Manifest this update: Mon 09 Feb 2026 11:00:54 +0000
Manifest next update: Tue 10 Feb 2026 11:00:54 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: 45Ra7eQw0TJODqB9n8VE41trg8vW+8xBtU4O0yoEt+w=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:c1:f2:ff:ef:c7:fd:44:e5:1e:2d:bc:82:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Feb 9 11:00:54 2026 GMT
Not After : Feb 10 11:00:54 2026 GMT
Subject: CN=eeb2926c475f88cb391c8ee17f2a4a86e10b7e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:79:81:c5:93:1c:cf:0e:ff:4f:11:dc:bd:
ec:1e:32:62:ad:18:2a:aa:23:7b:44:22:53:32:a9:
aa:02:cf:d9:96:9d:db:62:f5:0a:87:7e:17:a2:51:
6f:d7:6d:6b:3d:82:f9:8d:80:fa:b7:05:b6:cd:7b:
17:7e:74:c1:e4:a8:7e:c3:ed:73:b9:ab:20:ce:13:
e9:47:ce:0d:42:54:e1:e9:c8:40:c4:d1:13:8c:3a:
cf:62:62:9f:94:31:7c:de:c2:3e:ad:63:e7:27:35:
ff:46:4a:55:77:83:1f:c8:95:36:3b:54:4c:71:b2:
67:cd:4b:49:0b:32:22:fc:a1:19:92:10:79:d9:d0:
ba:f4:7d:82:f7:66:b9:38:f8:fc:13:4e:76:a2:64:
e9:d9:46:a2:4b:50:42:7c:ad:70:da:01:60:8d:85:
13:38:14:02:ae:64:96:b4:24:c8:61:82:08:6a:94:
bf:af:82:16:96:1f:1e:5e:bd:3c:36:6d:d5:97:63:
a1:20:34:e1:f7:d0:61:b6:eb:0c:b2:f3:0c:7e:17:
54:aa:d4:fb:74:b9:93:3e:3e:af:79:eb:f9:88:b7:
8b:61:a3:46:73:2b:f3:cf:f8:b2:9d:23:19:76:0f:
42:a7:38:1b:d0:8b:d5:8f:64:b5:f4:bf:d2:80:20:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B2:92:6C:47:5F:88:CB:39:1C:8E:E1:7F:2A:4A:86:E1:0B:7E:94
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:46:04:60:b4:8e:32:dc:63:8c:ae:b4:6a:87:0d:9f:34:
bf:0f:0b:09:93:0c:f6:76:36:b8:f7:6b:d1:26:ae:a0:10:a4:
3f:7d:fb:9a:f9:37:e6:e7:b2:d5:84:55:c3:92:5e:0b:6e:31:
a3:c6:20:c9:50:fb:78:1b:55:87:dd:50:fa:f7:cd:3a:d3:ab:
57:b3:92:60:a2:cb:5b:5b:2d:bd:68:6d:9c:2a:b0:9a:d2:98:
06:c7:1e:86:70:00:a9:13:04:0f:17:a7:fe:ed:56:8c:43:00:
90:ce:6f:d9:e9:bf:1d:a7:ec:5d:1f:11:e3:20:cf:c6:ab:fe:
d8:e7:5b:1f:80:37:90:c6:f9:87:2f:11:e0:39:db:f3:7f:17:
34:76:f9:7d:8e:be:7f:64:ea:8b:cd:a4:bd:bb:85:4c:1d:94:
b8:c1:39:a0:9b:20:4e:2e:44:17:16:8b:de:53:bb:8e:5f:15:
a9:22:40:22:07:4d:47:b1:e9:41:b2:76:23:43:51:a6:ac:26:
34:7c:27:72:db:0f:09:55:24:16:d8:81:7b:e9:73:14:7d:d9:
01:4f:41:39:c0:1b:d1:d9:fe:9b:d6:f0:7b:30:dd:83:33:31:
65:20:c9:df:fa:fb:3a:98:b4:57:ce:a3:36:81:e2:c2:83:b5:
76:89:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:44 2026 by rpki-client