This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: oezg3IkGcljtO8vleIaGYc5kuF21ImtbrtOjpS6H3Pw=
Subject key identifier: 47:75:C1:89:E3:E8:85:3F:23:2D:78:66:D8:A7:14:E7:5B:7D:12:5D
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 019C439045C12A9A259A83222F54FB921A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0C9B
Signing time: Mon 09 Feb 2026 18:00:54 +0000
Manifest this update: Mon 09 Feb 2026 18:00:54 +0000
Manifest next update: Tue 10 Feb 2026 18:00:54 +0000
Files and hashes: 1: Yc6S2U-P88_n_iZTloXSN0V0Eao.roa (hash: AY1UxXU5qK5SakiZ4km0VoIyNHZTCKedI3Fo2P7nvNY=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: snzj5+YlEfZtv7tkk7tFTSVxw7E5gnnRp8F85Byc2kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:45:c1:2a:9a:25:9a:83:22:2f:54:fb:92:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Feb 9 18:00:54 2026 GMT
Not After : Feb 10 18:00:54 2026 GMT
Subject: CN=4775c189e3e8853f232d7866d8a714e75b7d125d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:a4:8c:ff:8f:fd:b6:f4:a0:1d:77:a5:45:
42:6a:e6:6a:dd:00:77:f4:76:99:32:97:54:04:ba:
6e:79:f4:22:d8:fd:cd:02:34:c9:50:45:64:36:0a:
0d:46:c5:61:04:32:3f:7a:90:ee:5f:64:f2:c4:95:
0d:4b:3a:35:e2:e2:6a:26:89:9a:02:de:c6:94:cf:
47:9a:ed:cd:6c:4d:29:80:8c:98:3b:ec:d5:ee:dc:
9b:8f:16:90:8b:e2:63:b0:c5:7a:21:4e:3d:2d:b4:
7f:5b:0f:7b:ad:20:aa:38:6a:25:a6:89:09:7d:11:
f8:c4:63:14:eb:4d:70:b4:e5:77:0d:0d:c2:ec:35:
da:a5:77:13:b8:af:ee:15:3b:9e:9e:d9:cf:59:dd:
33:a7:89:c1:f8:a3:4e:9a:69:c3:a0:3d:93:a2:32:
db:da:52:92:57:2f:6a:45:0c:92:65:58:83:cd:c4:
a0:2c:38:ba:e8:e5:a5:d4:fd:81:76:b6:ea:80:18:
43:57:87:9f:3f:a4:b2:70:fe:3f:96:17:84:3f:ad:
7f:c8:dc:0b:d4:e4:da:de:a0:0d:8e:15:d2:f1:71:
08:9c:b6:b0:e1:89:7c:2d:9c:d6:40:41:e3:c1:84:
2f:29:86:9a:6d:00:ef:82:b2:8d:93:3c:9c:39:4e:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:C1:89:E3:E8:85:3F:23:2D:78:66:D8:A7:14:E7:5B:7D:12:5D
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:44:e0:7c:a4:07:f1:cf:96:b5:69:76:06:94:ac:1e:0a:eb:
42:cf:8e:1d:7b:62:be:8a:c8:cb:03:75:d2:71:ed:f8:52:77:
00:3a:5d:aa:2f:33:c8:1b:22:70:04:09:ac:22:bc:a8:bd:b7:
4b:91:0b:2b:18:12:6d:35:bf:42:ce:28:57:b1:f3:01:be:57:
fa:e8:19:77:94:ea:22:e4:6d:cf:a0:e3:83:01:af:e3:5b:e0:
7a:d4:d0:2a:95:38:31:18:69:15:a2:fb:6a:75:ed:37:2e:d4:
10:da:43:9b:10:e5:3f:a7:cb:e3:7d:20:af:34:52:3a:ac:a0:
19:db:f0:fe:cc:de:98:1a:66:e7:1d:6b:4b:32:d7:73:45:94:
c7:68:c8:a9:49:21:a5:b2:a2:b4:b2:45:fd:05:4d:a4:17:30:
28:82:46:5d:de:cf:fd:c3:33:ab:75:ab:5f:62:87:19:7d:ae:
c7:0e:7c:31:5d:d0:ba:00:a5:9a:36:22:d0:3e:14:fd:48:e5:
c6:c9:db:b8:f7:af:0e:d7:5f:07:8a:cf:75:90:6f:4d:6d:3d:
a0:79:f8:ae:9f:73:0c:c7:80:9a:0c:12:e1:60:e5:01:53:a5:
40:87:2d:6c:92:be:77:a2:70:fd:36:ae:8d:9b:e9:c8:f9:40:
ed:f2:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:36 2026 by rpki-client