This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: Onruqhgb5aCHo7O/+WZZUr32w/lT4XF3UFiCE++P/tw=
Subject key identifier: 40:E1:67:76:B5:52:06:8D:BD:3E:18:6D:C9:7A:09:FB:6C:19:57:C0
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 019C438FE6541DC14EEE2F6FB69B8CD13CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 06CC
Signing time: Mon 09 Feb 2026 18:00:29 +0000
Manifest this update: Mon 09 Feb 2026 18:00:29 +0000
Manifest next update: Tue 10 Feb 2026 18:00:29 +0000
Files and hashes: 1: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: +h1t3nVh4OSd/nJKpusKsTOqjfSawq7wGttx3yl42iA=)
2: Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa (hash: CTgenKosJdcAbaZ5ZvRKAeILm3aXtuh6bQlnuyIpyNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:e6:54:1d:c1:4e:ee:2f:6f:b6:9b:8c:d1:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Feb 9 18:00:29 2026 GMT
Not After : Feb 10 18:00:29 2026 GMT
Subject: CN=40e16776b552068dbd3e186dc97a09fb6c1957c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:ea:a0:06:3d:9b:eb:38:a0:31:3f:dd:72:
49:35:36:9f:eb:56:d2:d0:85:d7:f8:09:98:f8:fc:
ee:6d:93:a6:49:95:fe:26:29:e5:a8:ca:a2:b7:11:
98:db:58:5c:01:8d:f4:be:8f:5d:e5:da:54:01:43:
0b:a7:46:52:27:c3:c1:3c:1b:19:d3:69:d3:3f:84:
da:6c:41:de:a5:52:3e:b7:43:43:df:58:24:67:b6:
ac:3a:95:2e:60:76:5b:be:21:fd:0b:07:9b:78:84:
ba:6c:03:83:d2:52:2c:84:e1:69:61:6a:50:f3:f7:
d0:1c:ce:4c:e4:42:6f:6c:6c:85:b9:08:e9:36:d5:
56:c9:ff:11:50:d7:f1:0b:17:06:88:e6:d1:2c:e4:
58:de:d4:ff:da:0b:f0:33:a6:ad:e9:8c:3e:f0:45:
33:a4:f7:44:3a:87:63:32:c9:8c:af:ad:36:89:b4:
24:ed:85:e3:d9:8e:79:07:2e:42:81:a1:2b:b4:89:
ec:f5:6e:38:fc:df:9c:1f:aa:fc:48:49:d1:12:97:
8a:f7:a2:3c:37:46:f2:86:7d:36:cb:53:1d:6e:2f:
f9:4f:31:70:fb:12:46:79:0c:71:0b:7f:a5:be:65:
dc:3b:87:04:ea:d3:14:13:75:09:65:e7:d4:ab:ba:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E1:67:76:B5:52:06:8D:BD:3E:18:6D:C9:7A:09:FB:6C:19:57:C0
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5b:49:f9:5f:bf:3e:20:02:7b:35:8b:c4:55:be:c9:72:b7:
b3:cc:cb:d2:ef:48:84:59:96:77:6a:23:04:2a:b2:08:55:8a:
5f:0c:50:b3:03:de:1d:b8:1c:77:71:3e:96:ef:d2:51:f6:97:
3c:89:f2:34:a5:30:e2:ae:97:83:10:3a:d3:c3:01:7a:20:d4:
2f:45:d5:53:b4:10:a0:17:62:45:6d:95:ec:0e:ef:2c:d3:b2:
f8:2f:7c:2b:c8:97:91:14:e1:78:2e:d0:d0:92:90:e8:be:bc:
5f:68:9d:9c:68:aa:59:0c:8f:18:2d:dd:c7:be:79:f3:cf:8b:
fc:e4:5f:96:54:8a:c2:69:54:50:5b:25:ed:d6:35:d4:dc:cd:
c8:8a:2c:4f:fe:69:05:98:8d:ba:de:c5:04:c6:29:49:68:50:
8c:a6:c2:e3:af:3e:f4:a7:b2:ec:ea:5f:6e:48:45:dc:3d:da:
8d:8c:b1:94:55:fc:d1:ed:3a:ec:fe:db:fd:79:42:5f:29:71:
05:63:08:c0:d5:6c:10:39:2c:ad:df:0e:46:f9:9e:5c:ab:7b:
bf:4d:91:28:cd:75:f3:af:a3:0b:95:c8:61:93:2f:93:5b:dd:
51:fc:78:35:9a:d8:1e:4a:1d:1a:e5:90:35:b9:5c:8e:cd:9a:
6a:0d:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:27 2026 by rpki-client