This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
File: fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json)
Hash identifier: Lno/qP4K7SeA04DMjja3PsnYMvE0d2H/9Hwor0V37Ec=
Subject key identifier: A2:BC:2B:AB:55:AB:1B:BB:11:1A:69:06:51:D8:A4:22:7E:6D:E3:85
Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
Certificate issuer: /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Certificate serial: 019C4246530DDB3091C9D8689B365C8E43C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
Manifest number: 041B
Signing time: Mon 09 Feb 2026 12:00:30 +0000
Manifest this update: Mon 09 Feb 2026 12:00:30 +0000
Manifest next update: Tue 10 Feb 2026 12:00:30 +0000
Files and hashes: 1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: hoo4I9IY+qB0ikS3i9HG6UHOSN8f5Nt9AxoEWkqS+gg=)
2: s7AnIMBWFcao-dbPnG3NGpeppdE.roa (hash: uM0/Gb1QJj63m1aOHeWULTaWA/xK5/bpQpEosjfVypk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:53:0d:db:30:91:c9:d8:68:9b:36:5c:8e:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Validity
Not Before: Feb 9 12:00:30 2026 GMT
Not After : Feb 10 12:00:30 2026 GMT
Subject: CN=a2bc2bab55ab1bbb111a690651d8a4227e6de385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:01:44:3a:10:4c:93:bc:ab:17:e8:b8:b8:
24:68:78:29:c5:00:3b:39:31:d4:4d:de:24:5e:0e:
8b:9d:b2:a9:0a:38:1a:29:59:1b:d0:18:c1:54:94:
61:2b:b1:d6:91:97:fe:3e:04:fe:6d:c0:40:1a:b3:
cf:c7:d4:ac:06:d6:b0:79:83:ad:f4:8f:7d:f5:72:
ff:b5:44:9e:2d:ae:13:e9:5d:75:6d:8d:01:74:e4:
21:24:60:93:a4:23:0e:73:10:12:c7:a2:74:74:ff:
1c:55:fb:f0:5f:00:a9:41:7f:d3:28:d6:3f:6a:28:
8a:a2:59:d2:32:28:39:41:9b:4a:c5:9b:41:6b:04:
73:63:6d:44:d7:e7:de:ad:be:c8:ef:c4:f2:68:bc:
1a:d8:1d:d6:88:c4:05:cd:fe:be:be:55:32:07:7f:
60:1e:90:7e:c1:e4:8d:1b:5a:32:b1:b3:d5:d2:d0:
90:8e:aa:26:95:d4:47:24:51:6c:ba:e7:e4:ae:d2:
0e:ea:68:8f:3a:39:0d:2f:e8:2f:18:f9:63:76:d1:
c6:55:15:1c:12:5f:d8:e7:fe:23:50:e7:f1:7c:56:
10:6f:85:b7:11:33:5e:93:9f:e6:e9:ad:78:7b:30:
3b:11:1a:33:d1:8c:4e:02:47:37:0e:92:c4:0d:7f:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:2B:AB:55:AB:1B:BB:11:1A:69:06:51:D8:A4:22:7E:6D:E3:85
X509v3 Authority Key Identifier:
keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:59:ab:4d:5a:d6:8e:a9:9b:cf:b7:8f:f3:3d:76:f0:1a:f8:
5c:2f:0e:4a:5e:7b:94:15:c9:15:0a:25:00:98:12:68:c1:e8:
10:cd:b5:49:bd:9f:54:bf:96:0d:d4:46:93:03:76:a0:19:df:
22:8d:5e:9f:8b:a3:2f:56:bb:c8:48:36:d6:5f:07:34:5a:bb:
7e:58:2f:15:82:57:8f:8e:ad:bc:93:80:10:2d:8d:fe:66:26:
54:91:93:43:e2:da:01:70:ee:65:f0:38:8d:60:bf:ff:98:04:
c1:cd:63:f4:58:48:d6:4f:5c:39:80:63:cc:cd:3e:7d:96:13:
f8:be:25:29:1d:0f:df:5a:7d:95:f6:0b:c5:49:b5:fc:47:b7:
f9:e4:66:07:ee:c0:4a:59:c1:8c:0a:5f:ac:2c:be:31:0a:77:
e5:1f:e0:26:e3:62:79:86:ef:b2:94:3b:24:d8:59:b3:c7:a0:
30:88:9e:94:cc:b1:e4:85:26:55:d9:2c:ec:6c:c8:13:f5:97:
20:3f:ef:77:57:9b:0c:75:60:86:b4:92:cb:f9:1c:8d:4e:45:
67:f2:3b:33:58:a2:48:97:b7:b7:17:34:46:f4:ba:d3:c8:aa:
b7:b2:a0:2b:31:2c:d1:6f:73:d0:6d:74:bb:69:a3:c1:c6:a0:
97:f4:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:19 2026 by rpki-client