This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: rXac68cDx/8QgJO+06u4GPoPpJ3WbBY7+MeZoHrJNnM=
Subject key identifier: 54:2F:33:64:C5:7E:B5:55:B4:EC:7F:D5:7F:B6:0B:2B:38:56:20:AD
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019C42B41E5949E8B7D102DE2B1A60EAE7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 14BB
Signing time: Mon 09 Feb 2026 14:00:26 +0000
Manifest this update: Mon 09 Feb 2026 14:00:26 +0000
Manifest next update: Tue 10 Feb 2026 14:00:26 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: PL9IezjxIZAq0FJDF1ulrfxuqacxg1KSYAUmAdIGLMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:1e:59:49:e8:b7:d1:02:de:2b:1a:60:ea:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Feb 9 14:00:26 2026 GMT
Not After : Feb 10 14:00:26 2026 GMT
Subject: CN=542f3364c57eb555b4ec7fd57fb60b2b385620ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:36:51:0b:a3:06:9b:88:ec:e3:df:c8:de:
49:61:4d:53:1b:73:07:a2:c5:8f:17:40:35:29:bd:
4c:86:ea:93:fc:f5:ce:17:70:f8:8d:a2:b2:66:70:
26:06:48:6b:48:0d:8b:6f:26:8b:84:f2:36:be:b8:
3e:00:42:dc:c6:19:26:58:8c:51:e1:6f:3c:0f:04:
7a:e4:e6:a4:28:eb:1a:52:9b:ec:33:7a:f4:d9:f7:
a3:66:54:83:c9:cb:da:6e:3a:a3:15:2f:a0:3b:04:
60:33:2b:2b:4b:91:2a:e2:d8:8c:1c:75:cb:f2:33:
a8:e4:0a:00:ed:11:21:0d:cb:ad:e6:91:c3:e1:8b:
0b:6b:60:50:8d:a6:53:79:15:46:8a:dc:83:0f:74:
a6:cd:c4:bc:6e:c8:52:54:b1:63:25:17:f1:f6:22:
3a:76:d9:0a:e1:ed:72:38:ef:b7:5c:ea:39:27:dc:
80:3c:85:7c:ac:17:16:16:75:61:20:89:c7:dc:6d:
da:fb:7d:1b:23:33:b1:3f:48:dc:ae:da:3f:86:b7:
1a:aa:fd:de:59:d4:1e:ed:f4:55:0c:e0:e0:7f:6c:
61:de:3c:f6:ed:3a:03:27:bf:57:c6:0f:17:88:e9:
7f:61:bf:d5:ec:73:05:4e:14:19:2e:bc:0e:c8:99:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2F:33:64:C5:7E:B5:55:B4:EC:7F:D5:7F:B6:0B:2B:38:56:20:AD
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cf:be:1c:86:09:30:03:c2:9f:b3:56:77:0e:04:6c:5e:67:
42:8d:30:37:0d:00:8f:83:96:69:08:de:76:eb:1f:81:f9:9c:
52:26:6f:5b:1b:76:27:55:28:25:64:9c:e8:4e:35:47:d0:1d:
26:b1:38:15:61:51:9f:54:78:89:d7:e9:15:45:b0:76:2c:0e:
4c:32:43:be:cc:b0:e5:8d:27:6a:18:23:39:99:b2:fc:c4:9a:
29:8a:98:55:e2:31:df:5e:8f:77:73:85:1a:c5:c6:1e:21:03:
cc:c8:94:9a:41:bd:63:bd:7c:8e:25:cc:f3:35:4a:06:02:98:
9a:76:53:10:98:19:d2:3e:99:ff:90:94:50:78:ce:d6:e0:d3:
40:13:14:16:cd:0f:a2:e4:cf:2b:39:bc:fa:da:d1:9a:d2:bb:
c4:4c:1e:58:2a:b4:57:cc:91:24:01:bf:68:ee:f0:d1:0f:34:
d4:fe:98:b3:ca:1f:1e:11:e3:86:bd:64:e9:1e:36:28:84:4a:
61:01:2d:78:47:90:2e:63:f1:b6:06:0f:9d:c9:a2:50:d9:df:
b6:ae:9c:ef:fc:58:05:06:d7:bf:2d:e3:d5:7c:dc:a4:8f:ee:
20:f3:90:6e:e7:24:0c:bd:c9:03:d2:e4:12:c8:19:0e:1b:af:
fd:30:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:31 2026 by rpki-client