This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: HpOUEra76v3r62ORGEGK5IxQog80yXlkYjgpCnBlBhc=
Subject key identifier: 8E:E2:BB:6B:D1:06:E9:C3:8A:3A:36:7E:D2:61:E3:CE:8C:79:43:4C
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019C4133B553EB7BCFA4B4933C4AB1654490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 0470
Signing time: Mon 09 Feb 2026 07:00:33 +0000
Manifest this update: Mon 09 Feb 2026 07:00:33 +0000
Manifest next update: Tue 10 Feb 2026 07:00:33 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: rn5opd5P7zWZFVqDNvx9KK/ba2f8haybLPszmSRbYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:b5:53:eb:7b:cf:a4:b4:93:3c:4a:b1:65:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Feb 9 07:00:33 2026 GMT
Not After : Feb 10 07:00:33 2026 GMT
Subject: CN=8ee2bb6bd106e9c38a3a367ed261e3ce8c79434c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:c0:ab:6f:33:b0:d0:01:f9:55:77:3d:c2:
b9:0e:7e:a8:32:0b:98:9e:4a:8d:d5:71:a2:c2:ba:
38:1d:43:99:3f:03:22:37:fe:10:22:a7:75:9f:d6:
37:14:fb:f8:4f:ec:a2:dc:ea:58:e7:de:be:8c:87:
5d:4b:61:24:71:97:20:3d:fa:ec:1f:f8:49:15:9d:
b3:bb:2d:ae:f6:8f:e8:bb:5d:13:de:a5:27:d7:4a:
e4:bb:ff:52:a9:3f:8f:4a:0b:28:d5:a3:81:37:86:
5e:5e:fa:36:bf:7c:37:70:29:30:27:77:94:3b:e9:
e3:88:88:8c:e2:08:85:ca:d5:ef:2d:4d:9c:75:fa:
d1:08:f2:ef:ef:8f:3e:5d:2f:37:f9:bf:ec:80:85:
95:bf:6d:ef:99:04:51:37:6e:42:56:e4:03:93:6d:
f6:36:59:80:65:15:d5:0b:ed:0e:b6:87:f1:2c:21:
3a:a7:cc:81:1c:4c:9d:63:c2:2e:80:10:80:87:af:
1a:0e:9d:27:42:ea:09:48:61:55:4f:ca:a8:a3:75:
db:84:dc:ad:16:0a:0e:74:7d:60:b8:d3:ff:a5:02:
1c:ca:46:3a:0b:71:90:cf:b0:ed:d1:62:e2:7d:c9:
77:d7:58:49:40:0e:1d:7f:9c:91:32:44:66:41:01:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:BB:6B:D1:06:E9:C3:8A:3A:36:7E:D2:61:E3:CE:8C:79:43:4C
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9e:f4:04:40:0a:62:e4:8a:c2:91:fb:e6:e2:43:cc:8c:9a:
23:77:24:50:37:bc:c4:46:31:b5:a0:05:49:7d:22:52:ab:66:
c0:04:48:c4:40:c5:18:e5:25:da:be:84:cd:ee:b5:78:54:8e:
13:33:fc:48:65:be:20:3e:b1:9d:a7:a4:12:17:a5:18:f9:86:
14:b9:76:89:04:a5:cb:78:38:13:ee:84:02:f3:38:2b:4e:a1:
bc:f2:a3:b4:6f:00:c7:0f:49:26:a4:3c:a5:33:aa:00:ce:22:
de:be:ec:8f:2f:b0:0f:38:33:46:57:3d:2b:5f:fa:82:d4:b9:
35:88:fb:58:14:c7:31:74:9b:11:f4:c1:7e:e3:ef:0c:d7:93:
5b:f2:e7:58:cc:27:35:a5:d8:8f:12:cc:d5:2c:f2:a1:7b:c2:
fb:f2:3d:57:54:f2:70:d5:20:89:76:44:0c:77:13:cb:d9:87:
73:cb:7b:8a:81:fd:cb:cc:cb:5e:af:b3:0c:c3:b1:0d:bf:d5:
e3:06:80:50:c8:b3:6c:af:5a:03:1d:9b:e1:1e:7e:c2:f7:60:
5d:bc:d3:1d:6e:67:8d:34:d5:c3:66:26:1a:41:1a:0f:95:d1:
82:85:99:83:f0:b2:ce:1f:1b:85:5b:2f:3c:34:d4:c0:b4:af:
b0:6a:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:50 2026 by rpki-client