This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: BzTn56A+5+ZNqOAvLZT29sSwLraLUkH0mXP+eoVtxAs=
Subject key identifier: A6:97:03:80:50:46:98:CA:CC:A4:95:5A:00:4E:CB:C3:B0:65:25:5E
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 019C427D310C9F9F04C0D8F26801E2AB8366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 0FFE
Signing time: Mon 09 Feb 2026 13:00:26 +0000
Manifest this update: Mon 09 Feb 2026 13:00:26 +0000
Manifest next update: Tue 10 Feb 2026 13:00:26 +0000
Files and hashes: 1: CZ_vg2yMDqKVCYRK8Qle7EmywbM.roa (hash: I6MzdrErUPSCD0sk16myqhgh6+H1xFM8zE2Mja1DH0A=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: 3Hra2Br6I9Qgzg87a+9HyrSbhPsAR8l+HYzqtIbB1p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:31:0c:9f:9f:04:c0:d8:f2:68:01:e2:ab:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Feb 9 13:00:26 2026 GMT
Not After : Feb 10 13:00:26 2026 GMT
Subject: CN=a6970380504698cacca4955a004ecbc3b065255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:59:8b:f1:10:0d:b2:63:a8:81:27:eb:7d:
f7:c1:df:30:41:55:88:51:a5:55:69:61:30:4a:89:
4f:57:1a:73:2e:8e:86:ac:1d:d9:88:17:0f:16:80:
86:f0:8d:85:50:3b:c0:73:89:1a:f0:1f:4f:e9:0d:
51:df:5e:39:c7:30:78:5a:8d:1a:fd:c4:22:75:fa:
f7:5e:f0:2a:3a:53:aa:f3:08:a7:b5:d6:52:28:13:
ea:0a:19:b1:c9:ad:cd:83:00:12:56:aa:39:70:87:
b8:8a:3b:50:64:51:35:b3:5c:0d:41:d0:a2:06:a2:
74:0b:76:46:38:10:a6:86:76:e6:65:92:11:95:26:
96:29:1d:5e:ef:bd:26:73:b6:a7:cb:72:9a:3f:7b:
5f:16:47:83:2f:d7:b8:33:0b:55:de:5f:e4:15:3f:
07:84:e5:ef:9f:34:9f:17:1c:ba:5b:f0:cc:54:9c:
2f:6c:7a:66:73:a3:f2:2f:7d:1e:f6:4b:9c:ad:32:
06:28:67:40:82:48:e8:f4:ce:f8:75:aa:e2:93:d7:
d3:88:8b:f9:6b:ca:f3:da:a3:31:af:f2:77:66:1f:
dc:50:b0:8f:d3:ed:95:a4:96:62:23:ed:ef:5f:30:
79:1b:6c:01:93:ac:2e:0c:01:e4:81:b4:2c:74:e5:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:03:80:50:46:98:CA:CC:A4:95:5A:00:4E:CB:C3:B0:65:25:5E
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:92:42:1c:ac:45:aa:2b:01:a5:37:a1:5f:36:7f:0c:d9:1f:
54:87:b3:ce:4d:e3:fc:00:96:8f:c8:bc:68:9b:40:4c:d3:ed:
73:ae:20:e2:79:a5:c2:59:17:24:0c:53:74:69:6f:59:ba:e1:
1e:01:d0:90:73:de:55:15:2f:13:95:26:e7:5e:b2:2a:c5:27:
53:4c:45:30:b9:65:26:e2:e3:9e:53:df:2f:39:7f:61:13:8e:
c0:f8:53:56:ef:a0:e3:8b:76:ce:e7:0d:07:14:64:1f:aa:ba:
97:e9:b0:77:46:c3:c2:69:28:a4:28:02:1f:41:2f:18:d3:24:
b6:ed:7f:fb:91:ec:e6:1d:48:8e:03:56:d0:d8:ae:ff:ff:dc:
e3:9e:c9:57:69:e6:a3:8c:24:01:f6:3b:c1:c8:41:81:e1:e7:
76:ed:b3:0a:3d:b9:62:bd:f4:df:0a:42:7c:81:17:3a:ad:34:
89:ff:d1:b8:2f:a6:b5:e6:96:0e:f9:27:96:93:32:38:33:a8:
30:d3:54:0a:3a:1f:cf:7c:54:28:11:cb:75:b5:18:2d:89:46:
28:3d:cc:11:45:b9:b9:c6:01:69:8d:c7:f1:02:e9:b3:71:71:
d2:a7:8b:bb:de:09:0b:fb:21:47:33:f2:f2:e4:b0:5f:bd:e6:
37:31:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:28 2026 by rpki-client