This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: ep6/E4BokbzSRK8u4c8XUTktDUNY0cB53lIz8y4gCNc=
Subject key identifier: F0:1D:DD:3C:BD:4D:61:37:59:61:C1:8B:B4:71:47:FF:59:66:33:95
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 019C41A187ECE141BC68AAE5E593B652B4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 127F
Signing time: Mon 09 Feb 2026 09:00:30 +0000
Manifest this update: Mon 09 Feb 2026 09:00:30 +0000
Manifest next update: Tue 10 Feb 2026 09:00:30 +0000
Files and hashes: 1: LLHf1llyboYlmMdrimxD-i9OBTA.roa (hash: FD4h5t5+E9U3hUWnTKbkdjC1oNaGYlXx79R2DfDU7go=)
2: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: QrcnRv7QyI++GD6lCqHIcpjG17A9lBXJA9Jy5Ubu7yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:87:ec:e1:41:bc:68:aa:e5:e5:93:b6:52:b4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Feb 9 09:00:30 2026 GMT
Not After : Feb 10 09:00:30 2026 GMT
Subject: CN=f01ddd3cbd4d61375961c18bb47147ff59663395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:58:de:f5:a7:34:91:c7:47:5e:9a:37:a9:
30:b9:e3:b1:29:42:b4:e0:d9:92:ba:75:ec:29:3a:
b3:58:ce:06:53:19:8d:0b:af:0b:62:9c:ef:f6:86:
4e:5f:ba:e3:0d:8e:fd:b7:c0:ed:4c:75:73:4b:2c:
50:41:60:5d:89:ca:a6:6c:0c:c5:ed:3f:9b:e6:8e:
d0:1a:22:71:0a:34:bc:6f:01:83:5c:91:f8:aa:18:
c1:ac:3b:56:01:04:49:02:5f:76:17:ef:7e:58:84:
2e:a7:4d:8b:b5:3b:4f:bf:69:99:0a:93:d1:9a:e1:
d9:d9:ce:1c:56:0f:31:99:e1:32:38:2e:93:df:8a:
44:48:6a:32:36:0b:ea:48:fd:16:1d:1c:1e:2d:7d:
90:7b:7e:44:a8:2a:0f:d8:31:ff:64:d1:b8:6a:74:
7f:40:09:e3:60:21:e9:77:2f:35:8f:b9:2a:69:b2:
36:32:b5:6a:49:1a:f5:83:fc:6b:5f:f3:b4:78:81:
a7:63:72:50:07:3d:20:5e:de:d0:d4:34:36:f6:e3:
6a:83:5b:4c:5f:36:fb:62:34:1b:c0:0d:5e:cb:43:
12:c0:80:1a:f7:91:6e:a7:c1:f3:73:26:86:46:c8:
13:b7:a3:48:0e:be:60:de:5a:48:b5:14:35:84:be:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:DD:3C:BD:4D:61:37:59:61:C1:8B:B4:71:47:FF:59:66:33:95
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:ef:7e:3b:c7:ac:bb:fc:3f:bd:e6:1e:c0:2c:7a:4c:10:
12:a8:ec:91:82:c6:e9:68:7f:4b:5a:b3:79:44:13:be:b6:d6:
25:6b:f0:1b:b4:ad:62:33:5e:7b:50:69:04:08:69:be:d4:6d:
ea:fb:15:f1:02:d7:c7:6d:a8:b8:e2:07:ee:d9:72:8e:9f:9d:
d9:64:a3:ab:48:f9:d3:22:9a:1a:bb:91:59:04:3a:c3:cb:88:
67:c9:0f:51:ea:87:d3:6e:e8:b8:41:8a:3b:ea:62:83:e1:2e:
7a:cb:9e:8d:8b:1a:87:b5:d8:52:da:26:b0:17:3a:62:6a:c2:
03:4e:0a:35:9e:69:d1:07:64:16:a3:57:21:c8:41:7a:57:2e:
6d:bb:e1:7b:2a:70:f6:55:2d:02:f8:59:99:f1:ca:93:cd:cd:
ae:51:5c:7e:9e:fb:ff:b4:0c:03:fc:68:95:27:8a:91:ae:bb:
8b:cb:5f:61:b4:36:32:be:20:0d:9d:9d:51:76:82:d5:81:48:
e5:8b:0f:9d:4d:26:97:11:4b:a8:67:01:fa:c2:c7:69:54:5f:
c7:35:e2:98:ab:77:40:ce:0c:b0:93:72:1b:f2:76:c7:2a:29:
3e:2b:30:0d:0c:ba:25:d7:2c:73:0e:38:47:cd:db:7c:42:b7:
e3:e8:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:43 2026 by rpki-client