This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: XF/A1UVZO/xfW4ikFUl9OXfjQkQHe7iFpGwdSeADcsA=
Subject key identifier: 86:B6:27:D9:C6:D3:F1:A7:9F:3D:99:24:70:17:C4:36:F0:90:2F:89
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 019C4390C03A48C53D7EA56A6A6A9F1A76A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0B31
Signing time: Mon 09 Feb 2026 18:01:25 +0000
Manifest this update: Mon 09 Feb 2026 18:01:25 +0000
Manifest next update: Tue 10 Feb 2026 18:01:25 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: ZSsYJxctfKZYtyxZ1X09wALAdc1C+r3hnHDFp2i+jNg=)
2: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (hash: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:c0:3a:48:c5:3d:7e:a5:6a:6a:6a:9f:1a:76:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Feb 9 18:01:25 2026 GMT
Not After : Feb 10 18:01:25 2026 GMT
Subject: CN=86b627d9c6d3f1a79f3d99247017c436f0902f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:68:aa:77:5a:de:36:37:db:8d:9f:fe:64:5d:
78:eb:f0:c8:91:72:6c:3f:3b:06:f8:68:d3:a9:94:
e7:88:10:c1:61:f7:1f:33:71:df:86:7a:68:50:1d:
2d:f3:44:4a:57:c5:16:32:54:45:83:85:9e:57:86:
e5:cf:93:83:85:d8:e7:51:18:d7:df:0d:33:a2:a4:
c9:e3:53:83:cb:3e:9d:d8:69:c4:2c:ed:ff:cf:12:
21:d1:92:3c:f2:6e:f2:14:76:2a:62:05:b8:67:f4:
3b:47:61:36:4b:49:f2:43:38:ae:11:d6:68:62:90:
e5:76:e9:8a:a8:61:7c:4b:e1:20:7f:46:95:9a:3f:
1b:dd:14:27:e7:29:08:ac:3c:fc:31:34:1c:6e:ae:
b6:f5:80:b4:2e:ae:cb:c2:6c:c8:cd:42:c0:4a:2e:
f8:97:54:97:72:17:80:78:b9:7e:24:d0:2b:6a:9d:
61:ac:75:8f:67:ea:9a:e2:a6:bf:fa:84:cf:21:c8:
73:46:e7:d2:29:16:03:f5:30:85:22:c0:11:ef:6c:
4a:af:01:ca:28:dd:ff:2a:1f:7b:8a:e1:ff:b0:3a:
20:9b:3a:86:28:86:7e:84:03:9c:11:b7:70:dd:b6:
89:02:17:e6:b3:71:0e:0e:5b:8c:9e:f7:44:2e:91:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:27:D9:C6:D3:F1:A7:9F:3D:99:24:70:17:C4:36:F0:90:2F:89
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7e:c2:15:cf:59:91:bf:8a:41:de:84:8d:d8:c3:58:78:70:
e0:74:17:37:27:d8:7a:e0:55:1b:01:12:c9:48:a7:3e:8e:c2:
12:a4:ed:34:68:3f:48:6f:e0:40:c8:c0:d3:4d:c4:8c:73:ba:
3f:b7:52:56:7b:3e:a0:ac:73:0e:33:fe:5b:e0:0c:be:e0:1e:
5e:50:d2:62:4c:fc:9b:19:66:a5:0a:45:68:c7:c1:4f:33:ab:
6c:93:2c:4f:a7:37:e9:b1:17:45:13:a5:6f:a0:02:2c:be:5f:
4c:9f:d7:80:01:20:37:d6:96:d4:37:fc:79:05:82:4d:c2:d4:
48:8b:25:35:18:c9:9b:6c:76:da:6a:7c:13:8a:87:85:c3:b1:
7e:3a:0e:31:04:d2:cd:a2:a3:4c:4b:26:87:e3:d9:bf:9c:52:
ed:32:06:24:d2:ed:35:2b:40:c5:a8:a3:ab:77:6c:21:21:b1:
35:0c:7d:14:a4:67:cc:cd:79:97:8b:bf:ca:16:f9:d2:66:a2:
d6:ab:0b:2b:84:d0:ad:9c:cf:9a:cb:85:51:25:c8:55:fb:04:
1a:b3:13:18:22:c6:6c:41:d6:c2:6c:d5:57:49:56:c2:8a:39:
ec:89:33:b7:e6:dd:be:f6:8f:25:64:eb:ed:50:07:b8:94:e9:
31:b7:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:58 2026 by rpki-client