This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier: lZWiTxklN2E0VMzF9UdN+MIGql05kb7Sbiefps2R0Rs=
Subject key identifier: 1F:EF:80:6E:76:7D:1A:36:39:EC:4A:85:76:0C:F3:F0:5A:80:95:16
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019C42B40683C92E8CA0B971F85136AAF2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number: 47
Signing time: Mon 09 Feb 2026 14:00:20 +0000
Manifest this update: Mon 09 Feb 2026 14:00:20 +0000
Manifest next update: Tue 10 Feb 2026 14:00:20 +0000
Files and hashes: 1: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
2: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: XrQIksYQawoXm00XHLRJI+HsirfEXX7QQ5lshvhOzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:06:83:c9:2e:8c:a0:b9:71:f8:51:36:aa:f2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Feb 9 14:00:20 2026 GMT
Not After : Feb 10 14:00:20 2026 GMT
Subject: CN=1fef806e767d1a3639ec4a85760cf3f05a809516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:5e:ca:c6:9c:70:61:9a:6d:bb:d1:80:6c:
79:cb:c8:15:c5:a1:d1:4c:f5:05:67:ad:8b:c9:af:
00:aa:ae:ad:35:12:69:07:8b:a5:55:87:67:0f:c4:
80:69:58:fe:34:fd:2b:6f:a2:d1:ac:e9:2e:5f:5b:
75:6b:b2:07:b1:ef:8c:1d:a2:6a:a8:11:64:70:2e:
7a:69:ec:c5:0b:35:13:6e:f4:60:60:d9:3f:fd:52:
a2:0c:ea:46:c9:3d:36:59:5c:c1:3f:e3:d3:3c:e3:
e5:12:3f:18:fd:c3:72:b5:d8:b1:14:cc:9f:9e:79:
39:d7:bb:1b:4d:af:65:bd:4b:59:8a:a9:05:fd:74:
aa:99:75:6c:36:00:dc:ca:79:dd:74:d8:f6:86:24:
75:c1:37:4c:8a:33:a8:86:94:ee:79:c9:e0:3e:45:
b8:ea:fb:6d:7b:ec:a5:76:0f:38:1f:3d:4b:58:03:
1c:c4:3e:4e:a4:9f:a8:01:42:df:e7:bb:1f:c6:aa:
a9:0a:68:5f:2c:f0:6d:ae:ba:0a:43:99:c1:ab:c2:
57:a5:84:3f:d8:b9:25:cb:f8:a7:3b:be:5e:8b:85:
93:53:cd:06:41:84:85:0f:52:1f:45:70:2d:fb:d7:
21:36:5c:e4:91:69:58:47:ec:c2:d4:33:9d:f5:24:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:80:6E:76:7D:1A:36:39:EC:4A:85:76:0C:F3:F0:5A:80:95:16
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:94:f9:bc:99:c7:07:79:a8:d6:c2:6e:46:71:75:f5:00:20:
af:6f:72:78:41:fc:df:1a:0b:b4:4a:c9:1a:7e:44:51:fa:85:
b0:4d:d0:fa:ff:87:4d:82:5d:b2:8b:9b:b2:76:2c:6c:0f:bb:
75:34:21:e1:d4:0b:99:77:3e:fc:54:53:fa:89:95:0b:35:81:
a8:84:c0:7c:74:d7:e3:9e:f2:20:53:c7:cd:91:0c:b6:ae:21:
45:93:e6:5e:8a:b7:92:5e:36:f4:fc:db:66:94:d9:43:4c:e4:
50:93:98:4a:9d:fd:27:dc:60:84:11:75:ef:c4:e0:62:0d:93:
d6:44:ab:b6:24:f6:51:5d:7c:c7:1c:0f:1b:1c:13:e0:7c:8f:
89:e6:2d:17:ba:4c:25:3f:01:12:da:6d:b9:b9:42:a4:87:bc:
b4:c8:a0:cb:70:40:26:59:57:ec:d8:cd:d3:b0:46:9c:39:0a:
2c:a6:50:21:76:b2:13:b3:b3:f6:1c:69:7e:da:55:23:af:42:
19:94:95:fd:14:e0:a2:ec:65:28:67:b7:60:fd:5b:95:fe:cb:
6c:46:f7:f5:91:13:9e:8f:bc:bb:41:bb:01:fd:1e:20:ad:9b:
87:8f:ad:95:89:a5:6b:cc:2a:6d:97:a6:c4:34:b7:2a:5a:6e:
0a:4e:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:23 2026 by rpki-client