This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: xa6cJ3NH4E7pD+1+DCCvnoZEZWZ9Ayes+BInR2br0Bs=
Subject key identifier: 3D:45:7F:58:71:70:F2:FF:07:56:FC:58:02:21:8B:2B:84:07:09:CE
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 019C44A276B11B8B6D10CD93D38149F70FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 1317
Signing time: Mon 09 Feb 2026 23:00:23 +0000
Manifest this update: Mon 09 Feb 2026 23:00:23 +0000
Manifest next update: Tue 10 Feb 2026 23:00:23 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: LviL96Xg461nPocpJ+ZjZ7l0T/rsYqtpjn3U6r5oTaQ=)
2: J4YLrLdwYgPSyWf3TDtozKJGYDA.roa (hash: oD8qfrXmhU5eXPYgfnLW4FbZh7wYxDBRIu7McpM1mGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:76:b1:1b:8b:6d:10:cd:93:d3:81:49:f7:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Feb 9 23:00:23 2026 GMT
Not After : Feb 10 23:00:23 2026 GMT
Subject: CN=3d457f587170f2ff0756fc5802218b2b840709ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:95:56:9d:c0:35:78:15:a2:ce:9e:d6:ec:
11:77:f0:3c:19:63:cd:32:03:2f:ea:02:1a:6c:70:
99:62:d0:31:61:61:88:cc:a0:db:a7:1c:38:03:84:
24:27:3f:e0:08:42:45:bf:bb:ac:e5:57:52:cb:d9:
ad:74:95:d7:74:e0:9b:7e:57:4f:02:3f:0e:2f:27:
8f:ca:20:c1:52:94:7a:da:51:db:06:20:6f:38:28:
4c:b6:6a:1a:2d:c2:07:fe:71:92:df:aa:7f:fc:3a:
cb:72:19:48:8c:0c:41:35:73:1a:72:11:95:67:ea:
92:a5:e1:5b:20:35:2f:cc:e5:9f:05:d4:6e:bd:33:
9f:a8:f0:6d:65:4f:7f:b0:5b:26:25:7a:70:ed:57:
5f:b8:7f:6b:99:80:02:7b:e9:13:d7:d6:19:9a:65:
04:0a:33:f1:a7:b9:6e:d3:f6:a8:5d:a5:7e:37:0d:
69:5c:67:66:21:d4:16:07:bb:92:f3:c9:48:59:69:
5a:73:85:9a:9d:ec:d2:e3:e4:55:4b:71:21:0f:89:
19:56:27:76:f1:ea:9e:50:93:17:d6:44:ed:08:ac:
40:10:a2:5b:eb:66:0f:3c:94:21:4c:61:45:59:94:
cd:e0:bb:1c:71:c7:67:c0:24:75:28:00:e8:a9:4f:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:45:7F:58:71:70:F2:FF:07:56:FC:58:02:21:8B:2B:84:07:09:CE
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6d:b0:f9:3c:1a:a1:a3:93:a2:fb:fb:08:45:5b:47:17:78:
04:2f:1e:ee:71:6d:01:1a:ae:1d:e9:cb:49:53:10:c7:21:85:
0d:a2:ef:df:8c:7b:22:af:0b:93:66:c4:09:7b:7a:b2:78:54:
d6:35:50:63:80:8e:9c:81:c2:b5:1b:d9:3f:cf:4e:9f:35:01:
fd:0b:59:45:c8:5c:61:38:3c:21:91:45:05:dc:73:91:af:6a:
da:b8:f4:7e:e4:dc:30:4d:ad:16:a3:ac:71:75:a9:fd:93:2e:
29:18:2a:ea:72:cb:07:cd:8e:bf:50:76:30:62:25:2c:58:06:
50:cb:f9:f5:1b:a6:60:a9:bd:ba:4c:91:0d:e2:26:24:45:1f:
5c:4b:79:b4:42:57:fc:36:95:64:08:82:c3:ea:f8:94:7d:51:
8c:32:b9:19:fc:9f:26:46:a3:25:e8:10:80:0d:13:ad:81:d5:
e7:f3:d8:9f:28:0a:57:5c:43:8e:10:f8:8f:e5:35:f6:c8:05:
05:6f:95:54:69:3d:bb:4f:f8:02:f5:98:c6:ca:eb:d1:ed:6b:
27:a7:b5:14:26:bc:d6:13:9c:ee:f0:53:60:8a:b2:af:eb:7e:
d0:be:ee:c1:d3:c4:b2:84:63:95:60:f0:9a:90:54:ee:63:a4:
51:a4:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:02 2026 by rpki-client