This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: xHFvj229rJtL4giHSq8UQYURpKUSqTnz17JcBBqqVh8=
Subject key identifier: 84:F6:EB:8F:47:3F:36:00:89:DA:21:60:C3:69:55:96:6E:6D:E5:3D
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 019C451089F8F72E82A8EBA00684D48C6290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 07A0
Signing time: Tue 10 Feb 2026 01:00:37 +0000
Manifest this update: Tue 10 Feb 2026 01:00:37 +0000
Manifest next update: Wed 11 Feb 2026 01:00:37 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: 1CcsOPAnHeIMUrewRHEHaDAMnRHoqRwwr5WEcBF0YGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:89:f8:f7:2e:82:a8:eb:a0:06:84:d4:8c:62:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Feb 10 01:00:37 2026 GMT
Not After : Feb 11 01:00:37 2026 GMT
Subject: CN=84f6eb8f473f360089da2160c36955966e6de53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:82:af:2d:37:fc:45:f5:d2:de:b3:bf:2f:
26:8b:38:5b:1f:4b:8a:12:6b:8d:6e:64:d8:1c:3d:
6b:6d:c4:0b:52:cc:a7:e7:3a:b9:30:b9:ae:19:13:
5d:48:68:75:29:6f:d7:bc:ef:a1:9e:0f:ad:32:9c:
fb:08:2d:51:3d:2d:df:8b:d5:c7:4a:03:85:16:d8:
74:06:b2:ba:e3:92:b8:63:4e:ee:51:b2:a5:d5:04:
68:df:07:fb:da:a6:e4:3d:a1:87:3a:2d:87:b0:72:
c4:65:e2:1b:c3:ec:dd:d8:cc:c8:fe:1f:3f:65:8e:
af:c9:ca:0a:02:38:82:f8:39:09:f7:75:54:22:40:
7b:0e:71:52:9d:0c:af:7b:af:ec:6d:8c:2c:40:38:
86:18:6b:27:e1:09:34:42:c7:e7:17:01:b9:c4:b1:
73:b5:de:ac:db:47:45:e0:00:ab:14:e2:0f:71:51:
61:55:f8:a9:ee:4c:73:19:a9:28:57:a4:b3:14:d0:
85:37:b0:de:3c:e0:48:32:03:46:da:d9:7b:18:e8:
9b:a2:e0:fd:08:fe:13:d8:d1:fb:ec:12:f1:bc:60:
cc:bf:fe:56:ce:d4:4f:62:9c:13:56:32:23:5d:8d:
b7:b1:67:bf:36:21:5d:15:61:f7:0e:a6:cb:81:92:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:EB:8F:47:3F:36:00:89:DA:21:60:C3:69:55:96:6E:6D:E5:3D
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c9:40:a2:21:3b:01:2e:09:c1:35:b9:03:de:4b:d4:c2:b0:
53:af:c4:db:53:c9:b9:c5:14:48:6f:4f:82:c6:10:1c:aa:a9:
0a:8a:0a:8b:a5:0b:48:9f:33:2c:85:62:c7:b8:81:4e:e7:08:
01:0b:17:27:7b:e1:8c:47:c9:6f:42:6a:dd:f7:66:da:c5:40:
da:70:fc:41:b2:bb:77:6d:67:04:25:0a:ea:f8:ec:ea:9e:5f:
58:3d:18:83:86:6c:fe:cd:2d:f8:6e:8e:27:4a:33:9b:eb:18:
c6:19:2f:44:e7:86:1a:a7:a0:8b:73:75:b7:01:d1:5c:fe:89:
b8:bf:1e:3a:7a:8e:a1:fe:64:fe:03:71:b2:38:ec:92:86:43:
0f:1c:8a:c2:f1:f3:2e:da:0f:3b:26:df:c2:4e:4a:ad:28:a9:
d2:3a:da:f4:5f:9f:61:82:62:d2:94:94:c1:14:96:4e:37:7c:
0d:1b:4d:49:4f:1c:3e:67:44:bf:90:30:ac:88:44:7c:83:e3:
9e:4a:36:87:71:48:4c:db:6c:4f:72:0e:f4:6d:0d:44:69:13:
7c:70:46:db:ac:86:8e:86:d4:22:de:ce:8b:08:2c:57:09:2b:
72:b8:4c:fe:e3:b1:54:08:6e:64:6b:ee:ce:41:db:ee:25:db:
11:ad:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:26 2026 by rpki-client