This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: 24YSqqpXLwnRIn/Idef28PuToj5E8ymgOCJvmPEG7d0=
Subject key identifier: E5:A0:35:45:52:B0:0E:BE:08:D3:C8:05:D9:AA:35:B6:2A:63:7D:D0
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 019C435937A400047980C54DDB26FEB56DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0C22
Signing time: Mon 09 Feb 2026 17:00:46 +0000
Manifest this update: Mon 09 Feb 2026 17:00:46 +0000
Manifest next update: Tue 10 Feb 2026 17:00:46 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: BdDZWwUf91UvqQOkT9+/fypcvohfpI/q8WKaEPZnlyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:37:a4:00:04:79:80:c5:4d:db:26:fe:b5:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Feb 9 17:00:46 2026 GMT
Not After : Feb 10 17:00:46 2026 GMT
Subject: CN=e5a0354552b00ebe08d3c805d9aa35b62a637dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:81:ce:6d:33:37:06:16:f5:af:0f:cc:08:
56:fc:36:92:70:02:e1:c6:5a:90:29:6f:ab:78:68:
98:32:0f:03:7d:c2:58:22:bb:99:f5:2a:ba:41:7d:
e0:fe:94:25:fb:6c:30:b9:f7:40:db:ee:8d:be:25:
ca:54:f0:f8:6c:77:3a:e0:1a:82:9d:d6:86:21:92:
e1:ec:5e:c6:32:0a:dc:08:2d:ae:43:7a:e6:d5:ad:
6b:51:40:97:30:16:4f:d2:08:75:45:7c:47:25:36:
6c:bb:1b:45:e0:7e:7d:5c:cc:b2:0a:bf:a2:82:f7:
bf:16:70:dc:18:e9:e9:d7:48:9f:fd:d4:fd:ad:16:
f1:7d:49:52:08:63:54:eb:f5:fb:06:8a:7d:f3:68:
2b:47:0d:05:82:bc:98:87:87:fb:19:fe:d2:f8:29:
a5:2c:09:7d:6a:13:e6:b1:68:61:ba:d5:43:0d:29:
7f:bc:fc:14:22:9a:c6:42:70:27:c3:7b:55:d5:42:
4e:b1:47:af:ff:f7:3c:e1:99:3e:dd:98:2f:b4:db:
ef:5d:c4:d6:67:4b:d2:8a:3e:fb:78:35:bf:27:2c:
26:04:58:66:1d:5b:c7:67:e7:d4:a4:52:13:7a:0e:
9e:12:e1:87:c3:ae:b4:c1:31:7f:ca:69:5e:50:cb:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:35:45:52:B0:0E:BE:08:D3:C8:05:D9:AA:35:B6:2A:63:7D:D0
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7f:9e:dd:8f:bb:b1:7d:2c:76:4c:d0:d9:d0:b7:3f:db:07:
51:1a:f2:db:dc:23:23:5b:dd:21:f7:bf:26:a8:24:aa:0d:1f:
e4:91:50:73:51:77:3d:44:53:21:74:3d:75:31:c8:2a:c0:9a:
87:7b:a4:d4:a2:4f:86:c3:e4:71:69:41:86:d0:36:c7:0d:4d:
01:fb:d6:7f:60:ee:b1:bf:67:ef:00:de:2a:66:30:81:7c:96:
a8:d9:ce:8a:d1:12:7a:d6:ac:70:46:83:79:a9:3e:87:79:b9:
ab:c2:f4:77:73:9c:53:f8:a7:58:bc:ff:d8:1e:95:f7:ff:1f:
97:36:39:e1:d2:61:6f:9d:02:a4:86:47:df:64:7d:a3:0e:01:
b3:da:d5:8d:9e:e2:57:e8:c1:43:3f:ee:a7:cc:42:22:0d:f1:
17:83:68:32:b6:9b:5c:7e:fc:4e:07:51:ff:db:0c:9a:36:c8:
b3:8b:a7:2f:0c:5c:3f:fa:af:b2:52:b3:54:67:d8:08:eb:a2:
7d:5f:0d:db:a5:0f:f5:1c:14:31:06:f4:e0:5c:bb:d3:67:92:
64:bc:99:f7:ed:5d:c1:16:cb:3e:1e:63:c9:5d:a1:10:76:ee:
46:0f:cb:af:16:31:18:97:30:2d:37:e4:be:2e:b1:c3:1f:1a:
16:c2:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:14 2026 by rpki-client