This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
File: fmT8p3Ppn2rcgao85cY2I-4rHdc.mft (raw, json)
Hash identifier: xg98RkT0eNVt5HWdACEdNzTzM0tLjvZnKGoLejDjlJI=
Subject key identifier: 24:E5:03:6F:C3:25:EB:23:1E:13:32:AD:A5:AA:BA:48:C2:5E:BA:47
Authority key identifier: 7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
Certificate issuer: /CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Certificate serial: 019C42B42B42478041CDDBB008919A051F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
Manifest number: 0119
Signing time: Mon 09 Feb 2026 14:00:29 +0000
Manifest this update: Mon 09 Feb 2026 14:00:29 +0000
Manifest next update: Tue 10 Feb 2026 14:00:29 +0000
Files and hashes: 1: fmT8p3Ppn2rcgao85cY2I-4rHdc.crl (hash: RWJKJUgdzJBmt6tyZroHrhvrtYUH7Pq+tlVy04IEpog=)
2: y_GQcAQDbkFTHL71hHYsT9LG7hc.roa (hash: 2J6Fy5jG8JnfTzvk3RxBPKppQZeZ6SvRqxBPKKzZurU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2b:42:47:80:41:cd:db:b0:08:91:9a:05:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Validity
Not Before: Feb 9 14:00:29 2026 GMT
Not After : Feb 10 14:00:29 2026 GMT
Subject: CN=24e5036fc325eb231e1332ada5aaba48c25eba47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:d2:c6:dd:36:1a:61:fd:af:08:cc:7d:08:
d6:76:42:df:70:21:fe:51:3b:14:ae:54:d5:9c:ed:
be:f4:3a:34:be:b6:db:ef:77:83:2f:51:72:5f:38:
24:d4:28:4a:74:6b:c8:15:e0:95:41:bb:17:37:f6:
af:b4:1b:51:0c:f5:fe:8f:58:9f:5b:95:df:16:43:
4e:d5:42:3b:08:46:c4:ff:57:95:19:ca:c6:10:ba:
fc:8d:14:b4:bf:67:41:1a:4d:8a:b0:b1:9a:99:13:
b8:ac:5e:e8:89:03:50:59:3e:a4:0b:35:41:c2:e0:
2c:c5:ed:7b:a4:bd:31:68:b9:c9:98:cf:ff:2d:3d:
2a:ed:9a:c8:a3:85:e4:c5:8c:33:4f:b3:c6:90:3a:
e5:de:20:a6:57:74:65:9a:10:f5:8e:ce:ec:ee:0e:
e6:c2:76:fd:5b:67:22:36:9b:85:bf:75:15:55:53:
15:ec:c2:41:43:ef:b9:cd:f1:18:0f:4e:04:7f:1a:
e6:6a:aa:d1:70:b6:59:66:9a:20:f4:68:31:8d:12:
0d:e9:f0:b8:d8:d3:4f:fc:c9:85:b7:c0:3b:48:f3:
ab:a8:49:98:3e:99:fb:84:cb:97:f0:a0:6a:7e:2f:
ec:8e:88:d7:df:63:94:99:bc:dc:7a:97:7e:b7:fb:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E5:03:6F:C3:25:EB:23:1E:13:32:AD:A5:AA:BA:48:C2:5E:BA:47
X509v3 Authority Key Identifier:
keyid:7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:53:78:b4:a5:c1:28:bf:03:8d:12:57:24:1f:ae:ca:ab:
5c:70:c1:a2:e0:e6:20:d1:63:38:4e:d3:ff:0b:da:ee:98:b2:
fe:e4:df:40:3e:50:19:33:14:a0:85:2d:82:f8:b9:ef:64:eb:
d8:07:c8:5a:be:c9:38:b8:80:a1:35:3a:b2:3f:37:48:25:1f:
30:af:3a:dc:b7:e7:9b:38:e8:76:0b:05:10:d6:68:6a:6f:52:
95:43:a3:31:64:1b:30:cb:c6:f4:7e:0c:24:f5:e6:5b:ee:45:
e6:4c:65:51:ff:fa:80:e8:5d:a9:29:fd:d3:c0:d4:0e:1a:06:
65:b9:f1:c4:ec:84:b0:26:82:c5:26:d9:10:52:e8:20:63:7f:
f1:59:7b:82:66:29:4d:a1:69:ab:2b:21:d6:8b:89:a4:bb:aa:
0d:11:4c:06:a3:4f:ca:ea:e2:3c:91:df:cd:7c:81:66:04:a0:
c5:58:e2:17:4f:bd:e3:9f:e3:a4:8a:fd:40:7f:c6:b4:21:5e:
6d:68:49:42:3a:fd:38:fa:24:d9:13:90:4d:61:8b:15:10:a4:
af:7e:45:bd:f7:ba:52:4c:9b:50:3e:5c:34:45:1f:5f:d2:9b:
9f:6a:28:1a:30:12:d4:c7:4d:1c:a2:32:59:87:6b:bf:9e:53:
09:a0:73:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtCtCR4BBzduwCJGaBR8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjRmY2E3NzNlOTlmNmFkYzgxYWEzY2U1YzYzNjIzZWUy
YjFkZDcwHhcNMjYwMjA5MTQwMDI5WhcNMjYwMjEwMTQwMDI5WjAzMTEwLwYDVQQD
EygyNGU1MDM2ZmMzMjVlYjIzMWUxMzMyYWRhNWFhYmE0OGMyNWViYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT7Sxt02GmH9rwjMfQjWdkLfcCH+
UTsUrlTVnO2+9Do0vrbb73eDL1FyXzgk1ChKdGvIFeCVQbsXN/avtBtRDPX+j1if
W5XfFkNO1UI7CEbE/1eVGcrGELr8jRS0v2dBGk2KsLGamRO4rF7oiQNQWT6kCzVB
wuAsxe17pL0xaLnJmM//LT0q7ZrIo4XkxYwzT7PGkDrl3iCmV3RlmhD1js7s7g7m
wnb9W2ciNpuFv3UVVVMV7MJBQ++5zfEYD04EfxrmaqrRcLZZZpog9GgxjRIN6fC4
2NNP/MmFt8A7SPOrqEmYPpn7hMuX8KBqfi/sjojX32OUmbzcepd+t/tJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTlA2/DJesjHhMyraWqukjCXrpHMB8GA1UdIwQY
MBaAFH5k/Kdz6Z9q3IGqPOXGNiPuKx3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ODBkMzYtZDFmZC00ZWViLWI5Yjgt
YzUyZGZiMjg5ODQzLzEvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80ODBkMzYtZDFmZC00ZWViLWI5YjgtYzUyZGZiMjg5ODQz
LzEvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX19TeLSl
wSi/A40SVyQfrsqrXHDBouDmINFjOE7T/wva7piy/uTfQD5QGTMUoIUtgvi572Tr
2AfIWr7JOLiAoTU6sj83SCUfMK863LfnmzjodgsFENZoam9SlUOjMWQbMMvG9H4M
JPXmW+5F5kxlUf/6gOhdqSn908DUDhoGZbnxxOyEsCaCxSbZEFLoIGN/8Vl7gmYp
TaFpqysh1ouJpLuqDRFMBqNPyuriPJHfzXyBZgSgxVjiF0+945/jpIr9QH/GtCFe
bWhJQjr9OPok2ROQTWGLFRCkr35Fvfe6UkybUD5cNEUfX9Kbn2ooGjAS1MdNHKIy
WYdrv55TCaBz/w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:54 2026 by rpki-client