This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: TG7s9TErTAc7DhBUEpNBaSGLGgknRfx93zZFrcnh5ks=
Subject key identifier: 56:85:B7:EB:60:11:3D:BD:49:BE:FB:BE:8A:83:DB:84:1C:96:53:5C
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 019C42B408430C8D7FF845EF718DC1BC44FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 14:00:20 +0000
Manifest this update: Mon 09 Feb 2026 14:00:20 +0000
Manifest next update: Tue 10 Feb 2026 14:00:20 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: nBz7Lt+P1XLWUe4Kpm93JFH2ia9di1pMxsatlAB5xx8=)
2: 4uZV0ecDQCsLSsVXEupDSaa2T3I.roa (hash: MAPL4inDc1NqzrZUNgjEgak9EE9tXeKLQhKgPP9NyZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:08:43:0c:8d:7f:f8:45:ef:71:8d:c1:bc:44:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Feb 9 14:00:20 2026 GMT
Not After : Feb 10 14:00:20 2026 GMT
Subject: CN=5685b7eb60113dbd49befbbe8a83db841c96535c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:e7:c5:de:f5:ea:53:4a:45:49:13:0b:d8:
29:d8:c9:13:8e:fd:96:64:8f:48:03:7f:a2:98:05:
a1:7b:69:b7:11:ce:89:62:2f:74:12:08:01:b2:20:
ea:cd:18:c8:cc:e3:09:5c:fc:6b:e7:8c:f5:8c:27:
0a:8c:63:02:a1:3e:e1:71:a8:5f:c1:53:54:12:0c:
d3:2d:e6:cc:e9:ee:4b:bf:7b:a2:dc:9c:16:43:a2:
89:87:7f:24:22:97:d6:eb:c9:8d:b1:1b:37:19:da:
ac:cb:fc:fe:9c:18:94:59:2b:b5:2a:23:1e:c3:11:
a8:55:92:19:e5:6d:ca:51:34:02:ff:c8:96:54:c8:
bf:2b:f2:b1:fc:28:d8:55:9a:ca:af:9b:ef:68:26:
70:23:9b:35:18:b2:e6:c1:51:b2:f8:3d:52:2b:92:
7e:ab:a3:54:9e:b5:a3:a0:0e:fe:9f:4b:66:af:a0:
76:df:f4:9c:3b:05:1d:94:ac:73:66:ce:e3:d0:c2:
9f:87:e0:b5:67:7a:ab:09:66:c4:c5:96:bb:f7:a5:
e6:9e:eb:ea:f5:11:56:8a:be:a0:64:7f:41:7a:7b:
82:28:8d:77:9f:0f:ac:54:a9:01:89:92:1c:f1:ac:
5d:5e:b6:41:8e:6a:27:b1:95:a5:bb:1c:8d:a0:8d:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:B7:EB:60:11:3D:BD:49:BE:FB:BE:8A:83:DB:84:1C:96:53:5C
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:03:a8:62:fb:ec:f0:22:df:d7:2d:0d:28:22:06:45:f3:4a:
5b:70:ff:63:29:9b:c3:e6:38:83:bc:3f:8f:a9:ce:2c:28:74:
bd:5a:18:41:7c:9f:c7:57:08:d3:81:e0:83:44:2c:ea:7b:62:
f0:fa:6a:ae:cd:32:85:41:cd:f4:74:6b:f4:47:1e:b5:72:11:
cf:44:67:b6:7d:1c:92:0e:ad:fe:f9:9a:20:37:bb:a4:63:33:
ba:b0:24:75:8c:f8:e0:8b:5b:60:95:f1:8e:4b:59:e8:b7:07:
7b:88:e7:df:96:75:0f:d8:02:9f:80:07:1c:35:8a:84:e5:82:
bc:b8:8c:dc:e2:80:ac:a5:db:8c:9b:f5:a1:c2:0c:c3:41:59:
b0:d9:66:c9:7d:b7:76:ca:74:15:5b:67:f6:a2:76:75:3e:ca:
7f:c4:0a:56:cd:68:7f:1d:9a:84:ba:5d:7a:c0:40:59:08:f4:
0a:63:3b:90:82:19:c3:c0:2a:33:6b:99:94:83:0c:95:b8:20:
83:15:11:5e:71:c9:8c:18:c0:d0:88:11:e3:73:55:16:a2:0a:
9f:df:92:73:31:c5:00:a2:8a:79:8e:72:e6:82:56:fa:c9:a0:
f4:37:9c:c2:ab:2c:30:c5:b8:d5:55:db:8f:83:84:9b:76:02:
73:09:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:45 2026 by rpki-client