This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: Ry2M5+Ii4qInj01JhuB9cxVJ4clhzD3tDcu3CPcKnRQ=
Subject key identifier: DA:FC:5F:0A:66:FD:56:FF:83:C6:7D:D7:CC:66:16:78:C7:24:B6:0E
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 019C44D9B0906B8E0A7B350ED25A4F138809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 0441
Signing time: Tue 10 Feb 2026 00:00:43 +0000
Manifest this update: Tue 10 Feb 2026 00:00:43 +0000
Manifest next update: Wed 11 Feb 2026 00:00:43 +0000
Files and hashes: 1: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=)
2: fySblURiBoP5SziKdVGmimST7RI.crl (hash: 6aFTDCu5I2f3P1dc5/3YsKOfSMZULG0tUdDRJuWbtWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:b0:90:6b:8e:0a:7b:35:0e:d2:5a:4f:13:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: Feb 10 00:00:43 2026 GMT
Not After : Feb 11 00:00:43 2026 GMT
Subject: CN=dafc5f0a66fd56ff83c67dd7cc661678c724b60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:e4:33:85:e6:94:22:3f:89:6c:b2:a7:b0:
b2:0f:50:b4:bb:98:25:27:8d:6f:91:99:58:b0:d6:
8b:1b:a4:fc:b9:9b:bf:4a:96:08:8e:a5:38:1d:ce:
90:4a:40:f4:5e:45:11:34:20:36:36:d5:0f:89:a3:
58:58:75:bd:0a:5c:90:cc:cc:80:b6:f7:11:7f:9a:
82:80:fd:f7:0b:c0:c2:2a:30:4f:fa:95:a7:ec:85:
f6:84:51:47:fd:e1:22:be:85:6c:2d:c9:e0:c4:f9:
ba:6e:1e:7a:ba:d3:31:26:3f:12:c8:1c:e9:a6:01:
e5:2d:18:5e:58:b9:a1:46:af:bb:3c:41:a1:70:a3:
44:9a:ad:82:0e:ed:ac:13:a6:38:ce:67:7f:de:75:
4d:70:22:d3:2b:71:17:c6:bf:79:c1:9d:43:ed:93:
e0:da:97:41:1e:ae:98:c1:b4:9a:86:f7:a5:38:b1:
28:96:b9:f7:20:b9:3f:71:86:cb:f4:cc:68:49:24:
c7:d7:ff:96:3a:31:f1:8f:7e:c4:55:9f:7f:ce:21:
12:c1:f3:68:aa:f7:38:23:8b:7e:cd:da:9f:17:2a:
30:e4:88:c1:5f:ef:85:f1:63:0a:ac:fb:a3:cc:c7:
5c:b3:46:7f:46:a8:ee:ab:25:df:64:bd:d9:68:cc:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:5F:0A:66:FD:56:FF:83:C6:7D:D7:CC:66:16:78:C7:24:B6:0E
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:70:f5:8e:b5:94:7c:d5:89:8f:6e:f4:16:ab:00:d4:3e:
3d:67:da:14:5d:1a:d3:62:e5:f8:da:a8:be:93:79:f2:24:45:
9a:62:1c:65:98:82:2c:ea:50:45:8c:f7:cb:69:f5:ae:e7:bd:
70:d6:e2:b7:c5:a1:fb:23:0c:3c:92:a1:55:1d:f9:b9:5c:fd:
ae:a3:34:60:c0:b4:b2:89:67:f9:ae:72:f1:97:d6:4f:fb:e3:
93:86:8a:e6:04:7b:0d:15:55:c4:e5:75:e0:b7:6a:28:df:eb:
08:ab:25:c9:cc:dc:e1:25:04:80:e4:25:51:06:ca:af:7d:0a:
25:50:e0:63:1d:43:27:2d:31:2e:76:93:bc:1c:53:94:79:81:
89:db:fd:9f:95:1d:ba:71:6a:86:d0:67:bd:3d:7f:18:a9:c1:
23:6d:c6:f5:16:81:2f:c3:ca:51:04:c5:94:73:2c:e4:8d:61:
f0:bf:b1:20:7b:da:2f:8b:c0:d7:6d:a7:bc:a0:dc:60:a0:9a:
18:7c:b6:32:5c:de:af:14:fc:f4:cf:52:4e:01:e2:a7:75:f7:
01:e3:f1:42:d4:65:21:cb:d5:a1:ab:49:f6:49:4d:d6:df:a5:
37:dd:e6:a4:85:2d:bf:43:5b:b5:e8:55:2d:ae:94:e3:d8:f0:
2b:f4:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:12 2026 by rpki-client