This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier: gJ1z7BfeBkCo3SxAL7VrdQtAB6fog7eYKaqjAD3xOMc=
Subject key identifier: 68:88:CB:F6:A0:D4:E2:D0:82:DC:11:2B:F5:DC:98:48:3B:BA:FC:D8
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial: 019C4390A7E3538A29D283D0F5201E437E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:01:19 +0000
Manifest this update: Mon 09 Feb 2026 18:01:19 +0000
Manifest next update: Tue 10 Feb 2026 18:01:19 +0000
Files and hashes: 1: 28Fp5F0Ta9wpxDOVdnX8b3fiA7M.roa (hash: CSosAC0RkIivRtuzYTWYojYmIhFl5s25SMxfOZ9APWQ=)
2: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: 5ZoCxKa44xLxrjgRU+FPKEmfib/TUTInTa4y4p2y/68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:a7:e3:53:8a:29:d2:83:d0:f5:20:1e:43:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Validity
Not Before: Feb 9 18:01:19 2026 GMT
Not After : Feb 10 18:01:19 2026 GMT
Subject: CN=6888cbf6a0d4e2d082dc112bf5dc98483bbafcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:a0:74:9c:0b:9b:00:c0:db:4e:f3:52:f1:
7e:67:1d:35:16:5d:a8:fb:08:6b:07:d6:38:34:8b:
68:93:ab:15:bb:34:a4:34:1d:ee:f6:5f:53:99:31:
42:c5:8e:5a:8b:7d:dd:07:b4:11:ac:62:a9:77:9b:
b6:74:c3:7d:be:d2:95:04:98:07:60:86:42:43:83:
26:d6:c8:07:81:a2:d0:fa:71:6d:17:e2:04:69:20:
f9:d4:4f:37:66:a0:b1:21:a7:e9:fa:d7:25:43:f8:
ac:fc:e1:cf:b2:5f:87:41:0d:ee:80:06:f2:13:bd:
14:a7:53:76:f8:65:a2:14:ca:af:99:5a:bb:31:5c:
97:2b:de:20:54:42:c0:9c:9f:1e:32:11:b5:2d:01:
15:23:bb:97:2d:06:b2:a3:c7:52:59:71:cd:1b:54:
9a:d5:a6:c9:d1:16:82:8c:07:4f:ab:ea:61:c8:2d:
aa:c3:08:66:3a:60:b1:17:a0:ff:19:65:09:c9:21:
6c:5a:2d:7d:f6:bf:f0:cd:3f:d4:1f:d0:00:49:9f:
74:fc:b0:01:28:42:c5:e5:98:ba:b9:0c:d0:06:80:
40:65:1e:32:83:00:f1:71:46:36:7b:b2:d3:01:5a:
94:e9:51:f4:f0:aa:e2:e6:70:bf:97:e2:ed:a2:13:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:CB:F6:A0:D4:E2:D0:82:DC:11:2B:F5:DC:98:48:3B:BA:FC:D8
X509v3 Authority Key Identifier:
keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:51:4f:32:d4:3b:b2:34:3a:77:2f:58:85:87:7f:7f:49:
c3:12:b2:8a:66:ef:10:1f:56:d0:77:ed:ae:9c:11:fd:b4:99:
0a:15:22:52:95:42:8c:f7:af:27:2c:b3:c6:13:15:c2:87:68:
b5:bf:24:15:15:53:eb:78:ac:c1:a3:95:2b:62:f7:2f:c0:cd:
1e:02:8c:51:93:a6:c4:d9:e8:8b:48:cb:c5:cc:e2:bd:e4:10:
dd:1c:10:50:43:3b:3e:56:09:0a:03:1b:51:82:dd:40:75:22:
65:8e:ed:f7:33:8c:e1:9b:9a:73:cd:53:6f:51:6d:16:ad:66:
32:75:7d:46:41:d2:71:a6:89:eb:38:b6:05:1e:8e:1f:35:d4:
e1:af:51:df:cb:50:91:1f:08:f1:cf:09:7d:fc:2d:81:ce:b3:
c6:17:6a:55:2e:e4:59:0b:53:f6:81:22:58:c2:cb:1c:e0:09:
de:7a:d0:ef:51:e0:07:cf:c8:ae:5f:2a:a5:54:bc:69:78:89:
62:26:52:3c:d9:1a:00:e5:71:11:91:30:b3:e8:be:71:b4:0c:
44:b9:3b:87:77:70:80:2c:85:c1:ff:8b:3d:04:a5:46:fb:da:
36:6e:30:63:57:b8:68:ef:73:4c:06:0e:85:59:03:32:aa:91:
88:ff:a7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:20 2026 by rpki-client