This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: BJbrv/wK4ZH8z8AjJwpbI1zmM5V6ky8ZvUzh4Vh4cnQ=
Subject key identifier: 3C:17:D3:CD:8A:83:C1:30:90:AD:BD:6F:DE:E1:33:6F:A1:AD:7F:42
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019C427D748B030CF57ED6794538E0E408CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 13:00:43 +0000
Manifest this update: Mon 09 Feb 2026 13:00:43 +0000
Manifest next update: Tue 10 Feb 2026 13:00:43 +0000
Files and hashes: 1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: LWOAJsqZc0HtI26MAwB+04Iz+Byz6sxRuva3sdQfR2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:74:8b:03:0c:f5:7e:d6:79:45:38:e0:e4:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Feb 9 13:00:43 2026 GMT
Not After : Feb 10 13:00:43 2026 GMT
Subject: CN=3c17d3cd8a83c13090adbd6fdee1336fa1ad7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:fc:13:96:16:24:08:52:89:88:f6:58:95:
24:1f:01:1e:61:13:82:b9:9e:f3:f3:fa:66:b7:51:
2f:21:ed:f8:8e:58:67:3f:84:9d:69:0e:08:ed:a9:
93:6e:3a:87:79:d3:9a:87:fd:33:3f:13:6a:47:b5:
c7:b8:08:55:d9:35:70:ac:2f:14:08:6e:b1:c8:52:
1a:cd:8f:58:81:f6:e3:f6:ca:85:97:22:79:95:11:
56:ea:00:f0:1c:ac:08:cc:f1:06:37:dc:a7:a0:cd:
37:c0:7d:ce:a8:4f:1f:07:05:c1:69:4a:85:1a:d5:
0c:19:47:f7:1b:5a:dd:83:4c:bf:9c:cc:35:2e:31:
7b:ee:d2:43:ff:f9:7a:87:60:78:9c:7d:43:c0:12:
17:5c:7c:4e:99:31:a3:99:9b:02:5f:c1:30:95:2c:
81:1d:7d:ce:e2:fb:74:94:37:95:07:f1:17:58:ef:
62:e0:b2:b7:0b:af:4e:39:83:4b:d3:fd:5a:83:fb:
c4:fb:2c:0f:0c:98:04:60:41:24:e4:fd:78:29:98:
84:7a:eb:fd:43:c6:eb:1a:da:55:f1:8f:0b:c5:c4:
eb:56:a6:67:ea:2c:9c:f0:e6:55:66:1d:7b:20:f8:
6e:57:8e:d1:7a:c7:2c:76:9b:3b:7d:89:6b:ce:60:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:D3:CD:8A:83:C1:30:90:AD:BD:6F:DE:E1:33:6F:A1:AD:7F:42
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c1:33:41:76:7e:67:b5:06:5b:4f:5a:fe:db:12:3a:24:5a:
36:09:f3:aa:4e:6d:cb:6c:3a:5c:63:59:fd:df:92:b7:5b:16:
1a:25:d7:0c:73:05:43:1a:d9:a0:a5:e6:b6:74:79:ec:ee:7c:
99:2e:26:07:52:6f:41:65:58:0a:ee:15:7b:5b:d0:7c:4b:cc:
a5:b9:9f:22:04:f9:45:5a:76:3c:2f:ab:17:8c:62:60:6d:b6:
05:b0:59:3d:c7:64:22:9d:3d:55:43:d8:f6:9f:68:0f:58:ec:
b4:32:42:da:06:ab:e8:c5:40:cb:a4:60:5f:81:8d:b1:95:8d:
c6:60:dc:ea:8b:2d:44:7e:d4:9b:8c:c2:49:d5:14:d9:7c:05:
f7:f7:68:72:fb:97:d9:96:f7:75:5f:25:27:da:9c:bc:91:25:
3b:f4:7f:1d:ca:12:43:a2:8a:e0:4e:75:19:44:e2:1f:74:56:
ef:8e:e5:bb:ce:2f:76:87:4b:99:37:80:ab:ab:43:0f:fa:85:
13:33:d1:9f:2a:8c:92:d1:9b:e6:0d:5e:87:9e:5f:f5:b4:37:
ef:e8:f2:57:5e:63:89:4b:7c:ec:73:68:fe:b4:5c:aa:3d:e6:
d7:de:43:a8:3f:2e:34:bb:37:b0:35:30:22:58:20:ec:03:f3:
e7:aa:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:54 2026 by rpki-client