This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: kfvCyjcVy3nGawIkc+G7e1ip/oJqKQWBr8w8ykbaMeY=
Subject key identifier: EA:8D:9B:3E:D7:04:35:55:0F:48:F8:5D:B7:4C:02:4C:75:EE:7E:EF
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 019C41A22B329EE1D639FD31FFDB17CE3C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: 01F7
Signing time: Mon 09 Feb 2026 09:01:12 +0000
Manifest this update: Mon 09 Feb 2026 09:01:12 +0000
Manifest next update: Tue 10 Feb 2026 09:01:12 +0000
Files and hashes: 1: 9Srvn7WkPvAkxmGJNBo0PeKuqeE.roa (hash: 4/kn8//kMdNf7GsYCYVFUpw6FQ06SMpgTw2lQ8uxiZY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: sGxs64Kd0cbHUVLxqnBjfH2ucaDEX9xnKFztikhx3fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:2b:32:9e:e1:d6:39:fd:31:ff:db:17:ce:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Feb 9 09:01:12 2026 GMT
Not After : Feb 10 09:01:12 2026 GMT
Subject: CN=ea8d9b3ed70435550f48f85db74c024c75ee7eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:7f:67:83:72:83:03:17:d3:2b:22:bb:4d:
d9:75:aa:e8:20:ea:0a:18:29:17:36:fb:e2:94:1b:
b2:2b:01:90:e9:d2:94:b7:06:23:34:f7:27:86:84:
3b:d8:c4:45:ae:a8:ac:2a:c5:e1:ff:a3:b7:80:e6:
71:0d:8f:fa:05:39:74:94:ab:47:8b:88:83:28:a3:
7c:90:aa:66:73:a6:85:9a:30:be:0c:22:93:68:8a:
c5:11:fc:95:fb:12:23:c3:6d:0e:21:43:af:56:c6:
e2:56:e3:c5:ac:00:62:61:a4:e6:de:bb:43:1f:a8:
93:27:84:e8:4a:15:77:fb:e6:98:33:0a:ba:42:d8:
56:cf:6e:ef:af:e3:4d:c5:25:95:4d:5a:94:58:b5:
86:66:b1:c9:8e:35:f6:ff:ad:0d:a1:9d:20:cf:4a:
75:39:8c:96:58:87:55:b9:4d:27:b5:39:e6:48:88:
ce:c7:4e:09:f5:c0:ae:b7:7e:77:7f:ca:15:cb:4f:
11:2b:e8:d5:75:48:59:a2:fc:c1:85:78:d7:82:86:
6f:1e:09:ce:9d:d3:5a:5b:5d:d9:19:00:eb:55:9d:
ef:f7:89:d0:62:c8:c9:53:ea:c2:1a:6f:55:87:20:
c7:0f:f3:08:0e:58:f3:78:e2:14:db:26:92:22:24:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:9B:3E:D7:04:35:55:0F:48:F8:5D:B7:4C:02:4C:75:EE:7E:EF
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:c7:62:3e:ca:fe:ea:5a:0c:6e:33:c4:5e:62:a5:e3:93:
fb:e6:d6:63:66:42:93:42:d3:eb:48:c2:5c:54:17:f5:c7:c4:
a7:dc:ab:84:2f:2a:3c:bc:4e:81:5b:95:95:6e:44:91:1a:b5:
aa:32:e8:29:f3:ce:54:0a:0f:d6:03:7d:87:78:6e:1a:05:4a:
e4:71:f3:35:f5:bc:ae:d6:58:a8:e2:81:23:e4:eb:1b:2b:2c:
bf:61:a3:1a:3f:f5:a5:fb:45:47:2c:62:ec:51:98:d1:83:e5:
a8:cb:bd:36:fd:65:c0:ea:84:0f:8f:03:a0:d0:d1:ef:9b:5f:
ea:a3:41:d3:fe:10:f9:2c:45:b4:0e:b3:7d:d1:ed:11:7f:7b:
7d:25:73:1c:6a:02:cf:43:0e:c1:52:ed:c4:af:69:8f:7e:10:
74:45:71:11:18:a6:ee:74:45:14:3f:94:d7:b8:cd:fb:8a:e9:
0e:68:09:4c:82:06:c3:45:3a:c1:a1:fe:0b:c0:60:0a:8b:43:
63:07:72:2b:ec:5b:33:c7:d8:86:ab:a4:38:8a:a3:c2:9f:94:
b5:be:86:21:b2:30:1f:d7:62:b2:57:fc:42:34:6a:dd:e4:77:
11:24:2b:b2:86:d8:3f:25:1f:17:58:f1:fe:dd:9d:d6:20:79:
54:98:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:20 2026 by rpki-client