This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: lng3wri3p89/HF/sCGEWuDWgmX4EMFptGayrhhrv7v8=
Subject key identifier: EF:79:52:B6:9C:CC:E6:44:24:22:58:A0:28:F6:FB:4A:6B:4D:82:03
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 019C4358DBD7A56F5A5EF505C40AB342D31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0C89
Signing time: Mon 09 Feb 2026 17:00:22 +0000
Manifest this update: Mon 09 Feb 2026 17:00:22 +0000
Manifest next update: Tue 10 Feb 2026 17:00:22 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: Km7/rMu0CtF8TcD79cXqO/D7km7GVnLv1WOYtmPi9WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:db:d7:a5:6f:5a:5e:f5:05:c4:0a:b3:42:d3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Feb 9 17:00:22 2026 GMT
Not After : Feb 10 17:00:22 2026 GMT
Subject: CN=ef7952b69ccce644242258a028f6fb4a6b4d8203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:e8:07:87:50:c7:9f:69:18:f6:1c:0b:2f:
f8:e6:87:0b:6b:00:45:0f:e2:5f:ad:56:d3:fc:e9:
d9:e8:bb:02:34:63:02:96:6c:c9:1c:03:3b:6e:9d:
b6:83:5d:00:52:da:bb:c3:62:de:ec:a6:f9:c8:d6:
c0:3a:ec:96:92:47:b4:db:2a:4f:c0:b3:24:86:e9:
f7:ba:c7:62:03:e7:8b:df:6f:2f:d6:f8:2c:6f:fb:
21:ac:31:ed:ba:a7:18:8f:75:22:05:07:79:fb:1a:
17:c4:6b:34:1e:29:0e:07:40:2a:b8:9e:1b:66:bd:
24:0a:34:29:e8:8c:b5:25:1d:99:e8:42:1d:de:5c:
6e:e3:77:c8:fc:a6:0c:03:dd:b7:fe:f7:bf:15:5a:
83:83:df:d0:7b:30:d8:c7:93:12:3e:a7:53:c0:11:
6d:04:99:14:ed:4e:16:b6:c3:74:92:c8:e7:8b:15:
ab:df:06:cb:a8:da:31:f7:16:1b:29:f6:ed:67:f1:
6c:37:0c:6e:d2:99:63:8f:21:d7:a4:c9:76:8d:34:
3b:23:d4:57:bd:83:23:54:3e:4d:fe:3f:d9:d3:30:
26:52:9e:67:07:c8:b5:2a:ed:e1:f5:98:83:7d:e6:
9b:35:ea:68:5b:b8:bd:63:9b:b6:d4:6a:be:f4:f6:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:52:B6:9C:CC:E6:44:24:22:58:A0:28:F6:FB:4A:6B:4D:82:03
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:2f:69:15:c2:87:16:90:6c:72:84:62:93:d7:a9:e5:e2:
40:42:3c:95:45:31:49:82:47:1d:1b:03:80:bd:64:3c:b9:e0:
6c:0d:a1:ad:71:c5:a2:de:1b:12:c4:d1:66:ae:73:43:7b:f7:
82:e9:9a:04:46:ae:81:f3:dc:6e:50:cf:48:d3:b8:ae:bf:bd:
da:e6:e7:05:ac:67:19:65:25:09:9d:e0:fa:5d:fc:b5:1b:f4:
51:fc:78:11:23:82:8f:61:eb:24:7a:25:b7:a0:dd:37:23:f8:
fa:a8:2a:30:34:99:e2:f3:8d:99:cd:56:af:0f:5b:dd:74:56:
6c:b4:01:fc:e0:37:71:dc:83:d1:a6:a1:ed:d4:85:88:b4:78:
4d:33:5d:13:f6:49:0d:8a:42:b7:0f:1e:d3:2f:3e:18:01:af:
cf:b9:2f:b4:c3:d3:71:9a:ed:9e:4b:1d:0e:12:c1:49:15:f0:
c9:89:52:58:eb:0a:68:16:ef:83:f4:c8:13:08:c5:88:fb:05:
29:b7:be:f0:e8:28:19:30:2f:7d:c0:95:0f:e4:17:f5:fd:33:
56:9d:9f:12:9d:7f:84:ce:09:d8:c7:5d:a8:c1:ad:f4:ff:9d:
d7:d5:9c:79:ba:dc:2d:c1:72:f1:1d:11:2a:1d:92:62:4c:a3:
2d:20:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:08 2026 by rpki-client