This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
File: F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json)
Hash identifier: wTkxcSk92GSIl0SFm8QecjrMgnrEbU6E7EIpmWUiRiw=
Subject key identifier: AF:7F:0B:9A:9D:42:DA:BA:88:7B:70:51:3F:BB:19:61:EB:2F:C8:6B
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial: 019C41D8DBBD7E37E43D9231F08D88A1D45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
Manifest number: 028D
Signing time: Mon 09 Feb 2026 10:00:56 +0000
Manifest this update: Mon 09 Feb 2026 10:00:56 +0000
Manifest next update: Tue 10 Feb 2026 10:00:56 +0000
Files and hashes: 1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: FOJ+uDlHtX8Hm6LNLL0+Vba2gMMdXDEOERoTyL6ciE8=)
2: Muw91QFF1gZnvIhmwJGxe0JW4UM.roa (hash: uuXLdfsOuVDa4QD34/Jn4ShZlQdSH9Vf/9OOXP9hBVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:db:bd:7e:37:e4:3d:92:31:f0:8d:88:a1:d4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Validity
Not Before: Feb 9 10:00:56 2026 GMT
Not After : Feb 10 10:00:56 2026 GMT
Subject: CN=af7f0b9a9d42daba887b70513fbb1961eb2fc86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:8a:f0:15:d9:55:ca:f0:d5:4d:a7:b8:ef:
c6:da:4d:b8:3d:85:08:fb:af:73:00:ce:a8:4f:12:
20:9c:8f:b8:51:6e:56:5b:40:8b:6c:94:77:40:d9:
b5:e5:12:0a:b4:d5:70:fc:67:18:a2:7c:6c:03:d5:
95:4c:a5:6f:33:1e:f3:fc:6a:4e:12:7d:f3:24:da:
37:73:c0:b6:9a:d2:fd:8b:a6:33:4f:f7:bc:f9:e5:
b8:42:49:12:6f:56:9d:6b:80:81:45:f8:c0:02:73:
df:09:a6:33:13:b1:79:35:8d:e7:dc:78:91:5e:77:
d9:b4:87:15:6b:c4:83:19:6d:3b:e8:05:c8:16:2f:
3e:63:59:95:07:5b:37:40:1d:70:76:8e:3f:5a:5c:
f5:30:a8:c7:df:60:8d:e3:52:c1:0b:74:ae:b9:cb:
8f:88:ab:e4:d3:62:a4:5b:2a:a0:90:97:88:c0:52:
6f:8a:ba:76:5f:4e:7a:e8:af:01:1c:39:27:82:f9:
7a:e6:9b:87:08:00:ed:63:75:d1:34:4a:26:93:3b:
80:53:60:80:72:fb:bf:d0:20:15:6f:1e:43:37:a9:
ab:ec:a3:0b:c3:52:b5:ab:d8:c6:2d:ef:5c:dc:b3:
97:4a:dc:8a:f7:97:f6:6a:44:ac:b5:da:e7:0c:e0:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:0B:9A:9D:42:DA:BA:88:7B:70:51:3F:BB:19:61:EB:2F:C8:6B
X509v3 Authority Key Identifier:
keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:4a:9a:5f:89:2f:7c:fe:28:6c:57:01:bf:cf:aa:56:37:
a1:74:ec:78:45:9e:f1:56:d2:dd:c3:18:4e:86:f9:3e:04:72:
80:4e:24:d2:77:61:34:5f:09:49:1c:86:79:00:cc:e0:ff:76:
6d:ea:0e:71:80:d0:af:bc:ed:6f:59:61:c9:8d:1e:9a:c2:0e:
fe:09:fa:4e:85:f8:79:48:54:42:96:67:f3:ee:bd:84:bf:81:
3b:65:19:e5:43:4b:98:76:c4:90:4e:55:19:57:d2:25:84:08:
fd:a6:36:3d:fc:ce:3c:29:c3:fd:97:3b:a6:cc:ca:6b:26:1b:
74:75:a1:04:e5:3d:ea:dc:94:0b:91:1b:82:25:2f:ec:45:52:
f4:7a:df:ce:d3:a3:6e:54:e0:5d:f5:cf:46:48:23:9d:73:ed:
f0:b3:00:52:7e:c9:59:e8:98:fd:03:69:83:99:dd:a6:ce:37:
03:77:82:9c:64:44:af:25:25:2d:3c:50:f3:ab:64:cc:d7:f4:
30:75:ef:94:bf:b8:d3:da:9e:e7:06:ed:6e:65:de:cb:3d:2a:
fc:7a:df:0a:2a:48:2e:f2:b8:9a:b0:12:18:33:87:36:fd:c9:
7f:91:3e:11:6a:20:cd:f4:18:df:08:2a:11:b4:9a:eb:66:f3:
38:f6:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:38 2026 by rpki-client