This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: Pa7tk5nXdJaFReGwIzLYDsLAFr2ztydU57IaXtaveCY=
Subject key identifier: B7:5F:46:3E:A9:90:CF:BC:6A:78:81:A5:A9:72:32:D1:C4:37:02:88
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 019C44A2DB792AD6F71E660182FD77F2BE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 1817
Signing time: Mon 09 Feb 2026 23:00:49 +0000
Manifest this update: Mon 09 Feb 2026 23:00:49 +0000
Manifest next update: Tue 10 Feb 2026 23:00:49 +0000
Files and hashes: 1: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (hash: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: b/w9VFmyuJfAqYVTKwB9au3DpNufGW8YztYhMJ+LHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:db:79:2a:d6:f7:1e:66:01:82:fd:77:f2:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Feb 9 23:00:49 2026 GMT
Not After : Feb 10 23:00:49 2026 GMT
Subject: CN=b75f463ea990cfbc6a7881a5a97232d1c4370288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:53:bf:e5:97:ae:98:65:82:b8:7b:9c:c4:
3d:4a:f1:6f:57:39:cf:31:1f:68:d3:31:23:10:f6:
83:16:08:cf:f7:6e:82:0b:93:c2:e2:89:c0:80:8b:
8b:43:3c:94:c2:da:c7:c4:bc:e8:f0:e8:17:b5:79:
3d:65:6e:d0:47:70:d6:04:20:00:b4:3d:5b:93:a6:
6e:03:e5:8a:e0:c8:46:eb:d4:12:32:c8:dc:a8:8a:
18:cb:8f:cd:ab:e8:eb:99:e4:d1:fd:c2:38:8b:12:
74:c5:04:6a:58:95:0e:41:a9:98:9f:c1:08:e5:7b:
1f:e5:4d:20:8a:b0:a0:b3:1d:1e:7a:4d:46:fd:56:
4c:27:9d:37:7b:c3:7d:dc:1d:0c:64:e7:f3:76:6a:
0e:02:33:fe:ec:2a:18:d4:98:53:de:f7:70:31:2a:
1c:3e:e2:20:98:3c:44:c7:2f:b3:93:7d:ed:94:16:
c7:8c:f6:bf:e2:0f:fc:58:8b:ea:7a:18:c1:b9:69:
b2:46:69:b9:bd:49:6b:25:53:6d:63:5c:c5:c6:f0:
af:b5:0a:d6:7e:61:f7:88:4f:3d:57:ba:e7:54:86:
a4:cc:4a:e6:ea:a5:b5:8a:5e:62:f1:c6:92:89:1b:
54:2e:ab:ef:a0:4e:7b:bd:eb:a8:7a:a7:12:93:ae:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:46:3E:A9:90:CF:BC:6A:78:81:A5:A9:72:32:D1:C4:37:02:88
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:f1:dc:71:a8:25:33:65:46:85:bc:f3:54:e7:48:29:d7:
ba:bc:96:ff:a4:09:34:fe:ef:38:04:7f:34:49:e8:73:11:e6:
a8:0b:cd:65:63:76:3f:db:bf:19:92:43:1f:69:ed:dc:ae:ef:
c4:68:b1:c6:c7:45:49:d1:ba:8d:cf:89:50:31:9d:7b:13:dd:
f9:45:55:ea:df:ef:9b:d5:d7:25:e4:2b:e8:c7:53:dc:d9:5c:
00:a1:04:11:65:8e:79:89:59:59:30:9f:58:8b:14:da:28:d5:
fb:24:7c:29:92:91:f5:ef:ad:12:6f:53:1d:49:88:a4:54:18:
22:55:16:71:61:68:75:d7:c6:c9:26:59:76:64:b9:76:02:24:
02:b8:7f:40:58:79:d5:d7:3a:5d:91:0a:37:6e:1e:be:cd:43:
e0:5b:38:8c:b9:1a:3e:4a:ed:28:d1:b0:f3:6f:69:71:60:9b:
bc:b5:5d:cb:c0:d7:ba:60:33:af:ef:e1:29:64:c5:6e:c7:20:
35:7e:4a:ff:8d:20:2f:66:61:cd:7c:68:5f:85:97:b6:ed:ef:
db:ad:78:84:72:0b:a8:ec:29:d8:7d:92:26:83:0c:0c:f7:a9:
f1:e1:1c:f0:a0:82:fe:19:4e:3c:a8:a3:da:8a:1e:1e:06:2d:
19:b9:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:24 2026 by rpki-client