This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: eddhUJ37YPow1Mp5gldQXW+TkP2vm7KUjX0M+ccOPYQ=
Subject key identifier: DA:22:3B:C2:B5:11:63:67:A8:73:27:70:0C:D6:04:E1:8C:42:A2:2F
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019C420F47AAAE4D31907E7AE4FD11CB9FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:23 +0000
Manifest this update: Mon 09 Feb 2026 11:00:23 +0000
Manifest next update: Tue 10 Feb 2026 11:00:23 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: 8e1PAGGpx7UqAXWFPaKR0yp3pJ1ml0kjadgYB4mcMts=)
2: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (hash: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:47:aa:ae:4d:31:90:7e:7a:e4:fd:11:cb:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Feb 9 11:00:23 2026 GMT
Not After : Feb 10 11:00:23 2026 GMT
Subject: CN=da223bc2b5116367a87327700cd604e18c42a22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:19:b9:70:fc:5c:dd:a1:fd:a8:09:c1:4e:
70:77:8c:4f:39:ac:60:a3:52:97:30:ac:71:37:1d:
fb:d0:a2:62:4e:9f:76:1c:91:17:77:44:28:4b:45:
65:d8:8d:35:53:e1:6b:54:a7:25:06:9d:25:32:d5:
11:69:08:f9:b3:75:b9:cb:81:fa:b2:d0:b9:ab:09:
ab:61:6b:76:fc:6e:1e:c2:de:f1:7e:dd:5f:95:a1:
6f:70:1b:58:b2:81:a6:92:6d:f6:eb:25:76:71:88:
34:5b:86:4a:7b:98:07:bf:e6:e1:fa:a3:52:b6:f9:
c2:02:9b:42:ab:84:a8:1d:9f:cf:86:4b:05:bc:d7:
eb:57:e3:c7:4f:57:5f:f2:d8:ab:3c:d6:e4:ed:80:
e0:88:49:91:9b:90:4d:e5:0e:99:45:c2:13:46:19:
04:42:74:61:b0:ff:e7:12:2a:b2:03:b3:c5:cd:5d:
0e:a7:65:c4:42:32:4a:4a:36:bf:ff:ca:d6:8e:a3:
20:72:ad:15:1d:71:73:4f:07:0f:65:01:71:1c:6f:
3c:85:57:63:ae:3d:46:98:ec:e6:35:44:82:3a:bc:
2a:ac:77:c0:a8:4f:6f:4e:12:14:01:7b:89:cd:50:
41:be:57:23:2f:82:73:50:ca:6f:96:87:0a:3e:c9:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:3B:C2:B5:11:63:67:A8:73:27:70:0C:D6:04:E1:8C:42:A2:2F
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:59:11:27:a5:6a:0a:97:8e:97:25:ba:33:6b:56:43:d5:
61:2b:36:67:3a:6b:a7:6b:76:33:0e:fc:54:24:6e:a2:7a:6d:
b9:3c:7c:d8:55:cd:f9:fa:33:cf:6a:4c:de:5f:7e:96:dc:ab:
04:cf:11:09:89:47:32:5c:43:64:37:60:48:cb:be:eb:1a:51:
c3:c4:b7:31:da:64:99:b4:88:c1:ab:df:cc:e5:aa:79:0d:ab:
3d:43:1e:25:46:c0:21:9d:5e:93:f0:21:5a:5c:3f:64:8c:da:
37:ca:dc:ae:e5:b5:a3:0d:96:d4:bb:a1:53:7b:e7:5b:ee:fc:
c5:fe:eb:d4:fb:4b:cb:66:71:06:92:11:97:75:ac:f8:c7:6a:
1d:a0:83:db:78:0c:08:a1:85:ce:af:a3:c4:09:1d:c8:ff:c2:
fa:82:26:50:25:b2:23:08:f1:ac:a9:58:09:ca:16:ab:b5:41:
c2:52:cd:8c:68:cb:02:bc:2e:96:b5:8c:85:1d:cb:30:cc:31:
fa:53:6f:36:e3:7e:0e:c0:0c:ac:da:93:85:7d:ba:47:42:e6:
7f:c3:1b:a1:7c:fe:3a:8e:83:51:9c:67:86:cd:aa:39:1f:2c:
de:ed:48:15:ae:93:43:0c:09:3d:ff:16:11:63:bb:d7:1c:2c:
97:19:59:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD0eqrk0xkH565P0Ry5/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2
MzU5MTcwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD
EyhkYTIyM2JjMmI1MTE2MzY3YTg3MzI3NzAwY2Q2MDRlMThjNDJhMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMgZuXD8XN2h/agJwU5wd4xPOaxg
o1KXMKxxNx370KJiTp92HJEXd0QoS0Vl2I01U+FrVKclBp0lMtURaQj5s3W5y4H6
stC5qwmrYWt2/G4ewt7xft1flaFvcBtYsoGmkm326yV2cYg0W4ZKe5gHv+bh+qNS
tvnCAptCq4SoHZ/PhksFvNfrV+PHT1df8tirPNbk7YDgiEmRm5BN5Q6ZRcITRhkE
QnRhsP/nEiqyA7PFzV0Op2XEQjJKSja//8rWjqMgcq0VHXFzTwcPZQFxHG88hVdj
rj1GmOzmNUSCOrwqrHfAqE9vThIUAXuJzVBBvlcjL4JzUMpvlocKPslQJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoiO8K1EWNnqHMncAzWBOGMQqIvMB8GA1UdIwQY
MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt
MWEyMTIxOWU5MTAwLzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw
LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD5ZESel
agqXjpclujNrVkPVYSs2Zzprp2t2Mw78VCRuonptuTx82FXN+fozz2pM3l9+ltyr
BM8RCYlHMlxDZDdgSMu+6xpRw8S3MdpkmbSIwavfzOWqeQ2rPUMeJUbAIZ1ek/Ah
Wlw/ZIzaN8rcruW1ow2W1LuhU3vnW+78xf7r1PtLy2ZxBpIRl3Ws+MdqHaCD23gM
CKGFzq+jxAkdyP/C+oImUCWyIwjxrKlYCcoWq7VBwlLNjGjLArwulrWMhR3LMMwx
+lNvNuN+DsAMrNqThX26R0Lmf8MboXz+Oo6DUZxnhs2qOR8s3u1IFa6TQwwJPf8W
EWO71xwslxlZWg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:28 2026 by rpki-client