This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: snRnd5ijddHjl13ScKxsr1S1jUM83YIFGStACbZugW4=
Subject key identifier: 9D:19:EB:94:F7:09:CF:5D:C7:04:94:8A:20:16:77:0D:85:D2:FA:7E
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019C41D8E170AEDFCCB66DEDD3039983BCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 16E6
Signing time: Mon 09 Feb 2026 10:00:58 +0000
Manifest this update: Mon 09 Feb 2026 10:00:58 +0000
Manifest next update: Tue 10 Feb 2026 10:00:58 +0000
Files and hashes: 1: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: +pyPKfIctP8HcMYRv1DFzycH5VF/n3gnnUU/Up3Gyc4=)
2: xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa (hash: zkFlgvRz6cw1Fnc2wE2R8kAE+e+wpIfkz9Qvftstx7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:e1:70:ae:df:cc:b6:6d:ed:d3:03:99:83:bc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Feb 9 10:00:58 2026 GMT
Not After : Feb 10 10:00:58 2026 GMT
Subject: CN=9d19eb94f709cf5dc704948a2016770d85d2fa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:89:c6:d6:4b:2b:08:4a:94:ca:93:74:f3:
fa:0c:46:95:f0:2a:8c:d8:e2:49:b4:03:11:29:97:
e5:c3:6b:64:04:95:86:47:6a:46:5f:86:ab:9d:10:
75:e2:da:0a:cd:5b:82:11:36:f4:95:28:4b:64:6f:
f0:79:d3:6d:55:1e:5a:12:c1:38:3d:07:c8:c6:62:
09:91:17:a7:9f:68:e8:db:35:9f:a1:f2:b9:9e:25:
d4:8e:cd:f6:68:6d:24:6d:c8:90:78:5e:22:9f:03:
b9:d2:4f:83:ff:b7:c0:e3:0c:c4:22:fa:25:f3:1c:
7b:0f:00:83:0d:3f:e5:b3:35:3f:f4:62:76:19:c0:
22:eb:7a:5a:35:9d:8a:ae:cc:54:64:08:58:1e:7d:
87:3c:26:c7:3e:2f:65:90:b1:6a:4e:47:2c:0f:53:
ea:f8:51:91:16:d8:30:b2:36:83:32:0e:ae:56:d7:
dc:d0:e6:8c:13:f1:99:0e:aa:b0:2d:53:67:1b:fe:
14:35:90:79:8d:13:9e:12:0d:03:de:0a:31:43:60:
e6:e1:2d:88:6f:62:eb:d5:e6:b8:83:ba:cf:f8:3f:
58:10:e9:82:05:07:b6:ba:15:a6:d1:b8:20:49:47:
a9:c8:61:1a:33:4a:1b:8f:ca:eb:6a:c3:9f:e2:ec:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:EB:94:F7:09:CF:5D:C7:04:94:8A:20:16:77:0D:85:D2:FA:7E
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ba:e3:57:da:1e:a3:2c:9f:87:ed:84:e5:d4:7b:8c:12:d9:
b5:97:5b:f3:45:71:76:08:7a:f0:7d:2f:6d:a6:35:00:3d:a7:
b3:69:20:87:15:38:af:67:04:e6:7f:f0:22:3d:98:35:29:97:
4a:ce:3c:23:b6:a9:09:f0:bd:7f:e3:b7:cb:bb:5a:49:2f:a1:
54:f8:e3:ed:bf:3f:1d:a0:44:be:ed:33:b6:b9:9e:91:ad:a6:
12:14:11:30:cb:22:27:14:0a:69:ff:bc:b3:c8:65:f7:9c:8d:
e0:33:6c:2d:90:97:d8:e9:d1:c1:2f:c5:7b:e3:ed:77:06:9c:
17:5c:22:7a:17:7b:27:9f:52:56:f5:59:8a:3c:19:8d:bf:47:
40:f6:9c:82:08:62:bb:f9:a9:96:29:e4:0b:7c:81:16:69:0a:
8f:33:c2:13:fe:4b:ce:f3:f5:b1:11:f4:d7:47:18:82:53:af:
f0:48:bd:bb:c3:d7:4c:29:0b:ac:00:78:69:c5:c5:ee:69:f2:
55:2a:ff:86:e5:0e:7d:0c:2a:98:d3:33:85:07:1a:52:e9:cc:
a5:8e:ce:08:06:1b:2f:75:db:0a:7f:e1:2c:34:2c:60:a2:fe:
a9:5c:00:43:bd:89:9b:8f:2f:8a:16:0e:cd:b1:8b:ce:57:68:
be:3f:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:48 2026 by rpki-client