This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: Y9ISZl/zM+HieA6cQl0Ima7qWri+0U5PoPdYbJIwhsU=
Subject key identifier: 94:37:2C:6E:E4:FC:16:0B:13:B1:2D:01:CC:9F:B9:4A:23:77:0A:94
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019C4322555E9FFF71CB4B9D2EE7B90D62C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0AE9
Signing time: Mon 09 Feb 2026 16:00:49 +0000
Manifest this update: Mon 09 Feb 2026 16:00:49 +0000
Manifest next update: Tue 10 Feb 2026 16:00:49 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: rw4/iW2WgGa+TBejkMieLrtxgGmwQXcfj4GQTA9maZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:55:5e:9f:ff:71:cb:4b:9d:2e:e7:b9:0d:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Feb 9 16:00:49 2026 GMT
Not After : Feb 10 16:00:49 2026 GMT
Subject: CN=94372c6ee4fc160b13b12d01cc9fb94a23770a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:4b:eb:71:89:cd:52:d1:0e:2d:dd:d3:77:
84:49:94:c7:a5:49:e7:b4:4a:0e:ae:a0:69:29:bf:
bd:52:32:79:79:7b:15:0a:8b:0b:fc:20:a9:04:6c:
1f:92:ce:b3:b0:11:e7:64:5e:eb:22:af:91:b6:41:
9f:3c:5d:8d:72:6c:60:03:2c:44:cb:81:9a:9a:fc:
53:ab:4a:1b:98:69:4c:6b:0c:a0:ee:9f:d4:3e:04:
9f:7d:19:08:df:89:a4:fd:d3:0a:95:64:bb:df:4d:
91:32:1f:4e:44:d4:14:b5:5b:c6:ce:f5:bf:bc:3a:
06:24:d2:91:0e:68:97:3c:74:e0:aa:89:9c:32:8d:
6b:03:14:7b:a4:e3:f6:6e:00:76:9f:a5:dc:70:db:
9b:c9:47:12:25:c0:84:e4:87:80:dc:b9:59:6e:9a:
d1:12:b3:44:53:81:29:eb:2e:d3:ab:26:f5:58:6d:
c2:dc:49:74:6d:3f:29:73:8b:6d:9f:a2:42:cf:14:
07:05:f1:19:99:f9:4b:a9:4c:93:ce:b3:34:ed:8a:
83:53:58:9f:cb:39:27:b7:7b:b0:f8:6a:79:01:47:
1b:09:06:f2:03:02:7c:95:08:e2:c7:45:a5:29:a0:
c6:15:03:61:9e:39:4b:8a:62:57:f0:a6:db:68:f3:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:37:2C:6E:E4:FC:16:0B:13:B1:2D:01:CC:9F:B9:4A:23:77:0A:94
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a6:db:43:ec:0d:9e:d2:e0:99:cd:3b:7b:64:24:35:bc:37:
10:ad:3b:71:de:23:85:d2:a7:77:c4:58:86:f0:a7:95:ad:71:
a7:01:23:51:87:50:8a:64:39:6b:4e:7c:24:d3:70:e2:53:a5:
f2:f6:2f:7b:5b:72:1b:d3:84:e2:05:34:82:af:85:d9:cb:47:
0d:12:61:c8:fb:99:ef:13:61:8f:96:d3:a3:5a:a8:2d:81:60:
7a:20:66:23:d2:5c:c4:a1:6b:0e:8d:88:1d:fa:46:81:9a:3b:
9d:0b:7a:d9:2d:d3:01:83:b3:bc:0d:36:18:bf:93:3f:7b:67:
c5:af:05:29:ae:10:9c:51:1a:bc:fa:93:8e:fa:58:66:8b:42:
24:f8:10:97:02:e0:06:e0:b0:5b:81:ce:83:27:83:71:d0:1f:
3b:59:21:10:7e:67:22:20:13:70:5b:35:a5:da:d8:8b:0c:4c:
4e:42:c3:98:2d:6b:4e:03:45:3e:47:79:07:15:8d:f4:8f:22:
3c:6d:b6:c1:99:29:0c:2e:64:67:55:1b:aa:30:a9:cc:10:2c:
9d:a1:2e:02:b7:f3:a2:98:3f:1f:3d:b6:e4:26:82:3e:7e:08:
42:63:08:44:1e:b2:19:cb:40:c6:e6:1d:ac:06:90:8f:8d:31:
5e:99:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:52 2026 by rpki-client