This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier: cIUNR1XZpvlfRZscCjRefSw1ys9BMA82OVWVxKzkut4=
Subject key identifier: D0:CF:75:D7:23:E2:56:E6:31:FC:22:23:03:37:CF:3E:55:21:5F:0E
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 019C42EB75A1B3DF3C6F140785858E568643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number: 06CF
Signing time: Mon 09 Feb 2026 15:00:53 +0000
Manifest this update: Mon 09 Feb 2026 15:00:53 +0000
Manifest next update: Tue 10 Feb 2026 15:00:53 +0000
Files and hashes: 1: 96LYOeOZrfhBfF0aYpvHmgR3_EI.roa (hash: cZrj9IEY9V0hY5ejfic9+qWXj8uAu/BE+c5uGfFzBJY=)
2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: enB7k6hui5Hpa4jqB0riLLiAbQIFCq9yFF1tLagP4LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:75:a1:b3:df:3c:6f:14:07:85:85:8e:56:86:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Feb 9 15:00:53 2026 GMT
Not After : Feb 10 15:00:53 2026 GMT
Subject: CN=d0cf75d723e256e631fc22230337cf3e55215f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:b3:df:dd:8c:c9:58:19:c5:ed:4c:7c:f0:
be:36:8e:c9:fc:94:69:14:16:bf:0b:6d:72:81:04:
06:ac:f3:75:c9:6f:3d:13:91:ba:2a:0a:03:d8:42:
d0:2b:4a:31:82:ec:fc:b1:d4:26:c1:45:b4:3c:87:
e7:67:32:a4:b9:cf:46:1c:60:f3:12:b7:18:50:8d:
39:db:89:89:0e:ce:8a:41:39:c8:97:12:e4:4f:d8:
22:0d:bc:30:72:d5:fa:db:d4:ae:16:94:53:b8:b3:
f7:81:3c:d6:02:a4:f1:bb:19:a5:ae:41:39:c2:3e:
f5:a4:30:33:23:6a:40:85:91:43:10:9b:95:07:ca:
6c:95:73:0e:34:04:8c:72:67:92:f4:75:f9:f1:a2:
aa:34:0f:fc:65:06:f8:91:2d:80:c7:4d:c8:32:46:
c7:5c:09:5e:b0:c3:fa:85:39:69:eb:a7:d6:d8:b8:
f6:ad:f7:1f:c6:00:7e:6c:fd:28:66:e5:03:a9:ff:
db:4f:11:cb:03:7e:25:b9:93:fa:94:49:ff:73:99:
92:a8:9f:11:a4:d3:fe:c5:8c:b0:75:d6:eb:1f:92:
dd:93:78:85:21:3a:b1:5f:f3:0f:5a:56:89:03:0d:
5f:2b:a5:aa:dd:e7:33:94:1b:f2:88:62:cd:ce:f1:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CF:75:D7:23:E2:56:E6:31:FC:22:23:03:37:CF:3E:55:21:5F:0E
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d6:0c:d8:59:c5:21:f5:e9:d2:87:d2:b5:da:3a:e1:34:72:
35:13:d8:0c:31:36:d6:eb:fc:d3:3e:b9:c4:52:a8:67:4b:eb:
f3:58:51:5d:fe:80:1c:b9:b2:66:97:e1:38:80:da:90:e9:12:
74:6c:2c:c6:92:85:df:db:3d:02:ba:e0:ff:c0:06:d3:3b:87:
fa:96:c2:bc:ea:95:eb:ba:5c:32:17:ee:cc:8a:49:0a:76:da:
8e:e4:61:81:98:e7:c7:eb:89:33:8a:46:78:84:9a:d1:e0:6e:
da:70:81:05:d0:91:f9:b5:b0:70:ba:d2:65:63:0b:0a:51:06:
66:17:0a:83:9e:51:4b:eb:8f:c6:07:03:bd:df:dd:f6:d8:52:
02:49:2e:9f:3e:ab:6e:50:c4:4f:6b:14:68:72:60:f3:1f:40:
59:c3:f9:da:32:b7:77:e9:be:4f:88:0d:d1:b8:8d:9e:37:ab:
3d:e0:56:2f:7c:0e:fd:dd:34:ee:84:96:c0:c7:bd:a9:1b:3a:
74:78:0d:d7:3c:c5:75:0f:c2:64:a8:46:89:1e:6a:7c:d7:de:
2e:07:ca:3a:84:82:f5:b8:a5:79:7e:76:54:50:c6:fd:03:53:
07:c9:32:16:10:1a:64:81:57:3d:97:e4:6d:33:cc:40:32:bf:
8e:2e:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:18:11 2026 by rpki-client