This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
File: __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json)
Hash identifier: QNhEB8AfBHA9471jpGd5Xs401wg2AxGO88TYGQmjueI=
Subject key identifier: A1:9F:17:41:B5:FD:98:28:E6:E3:C7:22:1E:21:2E:07:4B:91:21:3E
Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Certificate serial: 019C42B442F4C31DCD79D8CCCA7092503478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
Manifest number: 0356
Signing time: Mon 09 Feb 2026 14:00:35 +0000
Manifest this update: Mon 09 Feb 2026 14:00:35 +0000
Manifest next update: Tue 10 Feb 2026 14:00:35 +0000
Files and hashes: 1: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: WQScOGvuk4WMVUsyUVmFd6ucMMjEqEfZxFl3i0p8zVg=)
2: bXRkIrV0wQpxtNZxKH1mFWtcddg.roa (hash: DYSijGZOnfjjVwkoHf3hP0M/u05BlD0+6ng7wBTurKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:42:f4:c3:1d:cd:79:d8:cc:ca:70:92:50:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Validity
Not Before: Feb 9 14:00:35 2026 GMT
Not After : Feb 10 14:00:35 2026 GMT
Subject: CN=a19f1741b5fd9828e6e3c7221e212e074b91213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:d5:f7:c9:ca:32:cf:e7:d4:b9:c8:6f:5d:
22:51:d8:79:cb:fa:17:c1:3b:26:78:80:1f:c1:b4:
60:b9:29:33:62:45:44:c1:e0:cf:7b:b9:b9:e1:11:
55:3b:f3:10:1e:6a:d6:11:90:16:29:75:c4:23:d3:
76:89:d2:8a:5c:17:6e:b8:4d:43:27:c0:25:23:ac:
27:38:c0:6c:4f:9d:21:25:15:94:1e:9f:52:8e:21:
c1:3d:86:21:30:ed:41:b3:fd:e6:8e:44:86:98:d0:
08:d0:e4:3b:92:2b:f6:77:1b:71:ce:41:e2:6b:5e:
24:c9:3a:ed:a8:39:88:ef:86:9a:c3:cb:98:4c:7c:
18:d4:7e:7a:dc:2a:2a:69:8b:f3:f8:80:d2:e4:a9:
40:83:cb:3f:9e:b1:e7:3d:02:7d:d6:04:57:3a:0b:
a2:2f:27:24:19:b8:64:95:bc:c6:54:06:8c:c9:b0:
c4:d2:40:1c:05:82:86:39:82:c7:98:15:2b:ac:5b:
55:e8:b8:d9:ca:b3:5f:6e:75:c3:58:2c:72:51:9d:
c0:9a:41:0b:f9:97:80:ae:14:8c:3d:b4:6f:21:e8:
bb:02:35:66:bd:a0:7d:2e:0c:76:dd:48:09:8e:bc:
c0:57:89:cd:51:f3:15:0d:b3:72:53:2b:19:ea:89:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9F:17:41:B5:FD:98:28:E6:E3:C7:22:1E:21:2E:07:4B:91:21:3E
X509v3 Authority Key Identifier:
keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:93:33:7e:e1:e2:62:3b:25:2c:4b:dd:6a:e7:31:bb:c3:
8e:63:2e:17:78:b9:94:e9:23:e6:59:55:8d:cf:e7:af:19:10:
93:3b:2d:2d:d2:de:81:f9:56:f2:68:39:c0:ed:39:57:e3:35:
ba:36:92:b9:ae:87:82:f2:72:eb:ad:7c:d9:f1:03:5b:54:0c:
fb:fc:a2:46:8d:81:c8:28:ad:7e:76:68:90:65:2b:f5:eb:41:
1c:f4:4f:e0:22:a5:91:12:51:86:4c:89:74:3f:6d:40:91:e7:
c2:a2:32:38:82:01:87:be:87:d9:19:57:bd:cd:90:91:d6:b5:
38:2e:56:05:83:1c:65:aa:be:35:bc:55:d0:fb:ca:69:6f:64:
ef:cd:73:94:6d:f4:88:bb:72:11:f8:a4:5f:03:c1:f0:90:d1:
8d:88:6b:4e:bc:6d:58:57:e3:85:c2:05:b2:22:5e:82:ed:cf:
15:80:e4:84:1c:0e:d0:ee:f0:55:15:fc:5a:10:e5:67:df:fb:
69:ba:2b:9f:a0:c1:43:4b:ba:f0:9b:a9:e3:ee:be:7d:e7:e3:
1b:01:ef:8c:f2:af:03:87:74:bd:41:36:a0:38:b2:b1:c5:8f:
80:a4:59:b3:c0:43:28:2a:b1:32:7b:93:0a:af:c7:1e:db:b2:
20:19:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:50 2026 by rpki-client