This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: /JzLzJdg89Q63Wg9RKCmylAsvSxApwzmZxJybTGc8eE=
Subject key identifier: 2D:74:58:FD:1D:9F:83:EA:C5:0A:7D:B7:40:BE:42:1D:F6:1A:8A:74
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019C42B43D65B6865F505546A460D84804C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 14:00:34 +0000
Manifest this update: Mon 09 Feb 2026 14:00:34 +0000
Manifest next update: Tue 10 Feb 2026 14:00:34 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: XA1cY+AhzSSbWnyLjLMvxuraYQNuIKg+T2dlXKx9jz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:3d:65:b6:86:5f:50:55:46:a4:60:d8:48:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Feb 9 14:00:34 2026 GMT
Not After : Feb 10 14:00:34 2026 GMT
Subject: CN=2d7458fd1d9f83eac50a7db740be421df61a8a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:64:5e:8c:ba:30:84:e3:ff:8c:4a:f2:e4:
fa:58:f8:4d:ab:99:ea:09:45:7d:e3:ed:f4:ae:d5:
18:1c:5c:ce:98:69:2e:83:fc:63:ee:3e:42:62:79:
12:c7:81:c1:95:08:a5:7f:70:bc:3a:c5:3f:64:bd:
05:e3:d8:a6:21:a8:76:10:0c:fa:03:43:91:e9:ad:
4e:e9:5c:0b:1e:46:18:cf:db:72:16:52:5e:e3:89:
b7:04:ec:ff:f3:99:38:8d:39:e9:7a:4e:38:11:5e:
21:69:b4:18:74:09:e3:6b:78:24:37:62:ec:b0:af:
cc:47:47:af:88:50:e4:03:0d:98:67:65:12:c2:d5:
88:8e:3a:ef:1a:c9:45:6b:2d:bc:19:d6:ac:df:e8:
28:b0:07:da:4b:95:46:45:4d:22:33:84:6d:df:16:
f9:da:d9:c1:6a:1e:b1:b3:33:ec:5d:41:db:05:39:
b4:64:e7:71:e6:e1:c8:5c:74:ca:36:bc:a9:c6:5f:
52:f0:75:cd:10:de:af:db:4e:e5:46:1d:90:e2:d9:
82:50:f8:6c:ad:1e:ba:5d:81:16:2c:da:78:c6:3e:
9b:1e:8e:75:6b:0d:6c:d3:5c:69:0e:7b:66:af:ad:
12:37:1d:42:34:70:ac:da:9c:1c:27:95:06:d1:a1:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:58:FD:1D:9F:83:EA:C5:0A:7D:B7:40:BE:42:1D:F6:1A:8A:74
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:d2:af:4f:0d:7b:b9:75:a8:1c:fc:ce:9a:39:c8:8d:9b:
02:a1:50:d8:21:5d:f9:c5:b3:05:5f:1a:67:bb:90:e8:2c:a5:
a6:27:73:a7:32:74:09:ad:b7:ab:5d:bb:dd:0c:11:8c:e2:2a:
7b:33:79:de:00:36:e6:c2:f9:fa:69:26:64:e7:d3:be:27:da:
65:8a:20:65:43:c7:e0:65:7a:18:5c:2b:61:06:5d:f5:cc:13:
fa:92:87:b5:0d:12:c5:06:95:04:78:24:8b:ac:75:8d:4a:51:
fb:b1:39:9e:59:5a:f0:8f:6f:fd:36:a1:f6:a1:46:82:9d:33:
30:4d:11:6b:a7:f5:41:4c:26:f8:7c:f3:9a:6e:80:39:7a:80:
44:51:a0:10:1e:03:5f:c8:67:b4:51:58:da:e5:97:a1:d3:24:
d4:5e:c3:22:ab:a4:0d:2f:d1:a9:cc:02:d3:84:61:e9:77:70:
66:aa:5f:ce:dd:60:83:64:77:21:76:83:85:67:4e:b9:c8:07:
d5:f0:85:00:ab:d9:42:ff:ca:c3:1c:5e:31:63:91:9c:6b:77:
9b:75:fb:6b:a5:4e:dd:9e:4f:fc:5f:5a:e0:28:17:44:9e:21:
57:3a:07:d1:21:1c:55:c0:8e:2f:a0:cc:16:ae:f6:96:cd:83:
8e:67:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:05 2026 by rpki-client