This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: oh3eoTNyeWstrBmGz4W1NTRyGbkM2WPU6mcFKuq0NQM=
Subject key identifier: 5B:BC:D0:5C:8B:05:A5:27:F2:46:9F:21:D1:B4:FA:3B:EE:58:58:60
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 019C42103850DBD008B7A279E96426F23253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 12D4
Signing time: Mon 09 Feb 2026 11:01:25 +0000
Manifest this update: Mon 09 Feb 2026 11:01:25 +0000
Manifest next update: Tue 10 Feb 2026 11:01:25 +0000
Files and hashes: 1: 0tgi-bedT7M90yonGJNHWcEtkks.roa (hash: jx45i7P1C49PseKbfYGkTcUnQdu8nI1iX163v3oChsI=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: H9TA9Jw5Slkiz3D5UvXRYFlnRj19kFJPy3gvjgRD/ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:38:50:db:d0:08:b7:a2:79:e9:64:26:f2:32:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Feb 9 11:01:25 2026 GMT
Not After : Feb 10 11:01:25 2026 GMT
Subject: CN=5bbcd05c8b05a527f2469f21d1b4fa3bee585860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:d3:45:68:03:2d:7e:76:d1:8d:a7:86:3b:
a2:ff:dd:b2:b2:58:95:fd:11:cc:52:36:4a:bd:70:
f8:e8:af:44:e4:c7:2c:f2:0f:08:50:07:f7:8e:85:
e1:4c:c0:f8:29:8d:9f:e8:eb:39:0c:3f:3b:14:3e:
ee:90:fc:a2:a3:e4:5e:a0:b0:40:0e:b7:e1:a6:c5:
e3:a4:b5:c2:8c:1c:05:d9:37:28:90:14:12:ed:ea:
11:4d:47:fc:b3:13:6e:3b:31:f1:8e:ad:d7:40:ee:
fe:70:b7:5a:e4:fc:a9:a4:d7:da:22:26:8a:2f:44:
87:e4:4d:21:ce:a2:b9:64:cf:46:a9:4b:01:14:61:
ee:fc:9d:79:97:92:1e:14:c8:16:94:39:64:d3:5a:
c0:9c:eb:f7:9a:d3:43:b7:e5:26:06:cf:13:d9:c5:
b5:f0:d8:9a:53:25:21:57:ff:63:3e:eb:bb:77:f5:
fe:7c:ec:3e:d4:58:be:99:25:9d:e9:ce:27:55:2b:
22:07:d8:91:e8:dd:ee:a3:6e:27:8b:b9:51:5b:63:
e6:8a:9e:92:5c:29:55:26:2c:1c:36:79:7a:bf:44:
14:b6:ff:aa:5b:ed:7d:ea:10:2a:8b:6a:ae:1d:63:
47:21:dd:ad:2f:dd:e9:88:1f:e8:1d:95:7d:43:6d:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:D0:5C:8B:05:A5:27:F2:46:9F:21:D1:B4:FA:3B:EE:58:58:60
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:a8:77:6d:9c:4b:fc:d3:57:74:75:dd:54:6b:75:8a:ae:
db:eb:56:20:d1:45:03:aa:25:28:00:41:f3:04:f1:3c:2e:6f:
01:1e:85:e9:03:69:a2:91:2b:90:01:e6:e6:00:13:1a:45:f2:
c6:ef:f8:ba:a3:ca:35:b3:ce:36:51:42:24:88:9e:3f:b2:2a:
31:ed:53:3d:19:be:d4:28:24:0e:73:ef:e7:0e:89:9e:8c:99:
c0:9d:db:2f:70:39:2f:f8:1e:b8:19:de:c6:7a:58:77:41:bf:
fa:a8:2e:f1:33:f0:ad:11:ae:b1:f9:8a:c6:f4:71:b2:42:74:
a0:88:7d:33:67:60:5a:8b:ef:f1:4a:1d:f4:30:66:57:ea:ce:
6c:9c:a5:f9:3a:3a:3a:09:e7:21:78:07:8a:bd:a6:f9:58:77:
25:da:44:e2:54:f3:a1:98:7d:04:45:5a:cb:5e:ec:21:e8:15:
e9:55:68:cf:88:97:a8:97:f0:22:c9:cd:ce:0d:e3:1f:39:b5:
50:af:a3:65:e2:ec:8f:ee:63:d4:e7:b3:4c:ef:ab:e6:b2:0e:
1a:2e:16:a8:ae:ef:bb:9a:c4:15:22:6e:3b:96:de:0a:4e:e4:
87:51:21:c1:91:be:0c:33:2e:08:68:97:bc:90:d7:ab:9e:a5:
ac:35:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:56 2026 by rpki-client