This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: dojGleZEpXvMNaCVAkBJnN7GvGPT3ASKQaiFaliG8Rg=
Subject key identifier: 8F:2B:05:ED:F2:F3:92:41:D3:C9:D0:F4:79:7F:D2:25:B0:8D:CC:35
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 019C427D843C85DE7F6E9294773C55E06C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 0768
Signing time: Mon 09 Feb 2026 13:00:47 +0000
Manifest this update: Mon 09 Feb 2026 13:00:47 +0000
Manifest next update: Tue 10 Feb 2026 13:00:47 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: fSl+ncbIu23MAab9XIYB/GPEY/P7rKf8McPNMQKX5/I=)
2: SbtU24bKXJzT0r_Edu3hABMBFRg.roa (hash: uhs0gjYBAZV/9eh8e1DZS32viLByYHa3Altj0TI5SN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:84:3c:85:de:7f:6e:92:94:77:3c:55:e0:6c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Feb 9 13:00:47 2026 GMT
Not After : Feb 10 13:00:47 2026 GMT
Subject: CN=8f2b05edf2f39241d3c9d0f4797fd225b08dcc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:d1:fa:a9:b1:1d:67:fd:a9:50:79:92:44:
8d:86:0a:e6:1d:9f:00:8a:b4:f4:53:35:02:a4:42:
1e:be:d0:ea:13:a6:99:bd:93:6b:ad:7f:07:cc:71:
f0:9e:c6:da:65:b3:f4:50:d9:82:f0:c5:b5:ca:12:
44:e7:e8:1a:e5:fb:c1:db:32:d6:12:ae:68:05:24:
11:fb:c9:01:c4:7c:62:a0:7e:81:cf:45:43:67:1d:
1f:97:e4:da:e8:6c:3c:b4:3f:84:80:4b:36:38:7b:
1e:43:6b:f5:08:f8:80:4b:5b:8e:0f:28:3a:54:45:
58:ba:aa:38:60:f5:db:38:75:75:6c:b7:83:11:83:
68:2f:6a:5c:53:5a:ac:bc:82:e0:b5:dc:44:2b:e3:
f4:aa:d8:a8:54:64:6e:05:aa:d9:ac:a1:bd:2f:77:
34:72:9a:4e:e5:a3:15:cd:1e:91:85:74:ac:21:4e:
8d:4e:f9:7e:e7:c4:9d:5a:9c:ef:a6:1f:60:d5:a7:
b2:2e:52:0b:e0:42:29:e5:79:68:66:87:a0:1b:94:
ec:9a:45:80:49:22:ec:1e:2f:33:82:65:85:db:74:
6f:c5:84:23:0b:11:0c:a8:74:62:c6:1a:b9:ac:a3:
8f:d8:bf:71:dc:40:ba:a4:bc:9e:1c:d1:fc:ec:32:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:05:ED:F2:F3:92:41:D3:C9:D0:F4:79:7F:D2:25:B0:8D:CC:35
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f6:db:42:2c:4a:f8:97:2a:63:5a:c8:1a:8d:d5:cf:29:d0:
7a:83:c1:50:23:bb:d6:a2:fc:33:d0:ca:71:ad:a4:74:17:fb:
69:9c:9e:2e:cd:8c:0c:ab:21:37:b6:82:2a:db:c3:a7:92:45:
fa:c5:ca:03:f4:2a:8a:e2:82:b7:f0:1e:5a:62:37:48:63:ee:
d9:22:3c:8e:9b:54:49:e3:ca:65:08:32:c5:5c:d1:ad:94:6f:
e3:d2:2a:fa:a3:30:30:38:77:b3:c3:a6:f4:7e:1b:57:e9:5a:
63:5b:35:66:ce:2e:97:cc:30:33:87:23:ce:0e:c6:42:e0:d7:
3c:a6:21:bf:a7:7f:41:db:2b:f1:11:80:70:9c:12:1e:d2:f9:
7a:7f:e7:5d:ce:cb:ed:47:32:49:27:c7:2a:1d:60:f6:37:1d:
c6:78:bb:4e:5f:a2:e8:59:3b:6e:a0:0d:d6:a5:5a:0d:df:b0:
e0:bb:df:d1:ef:0f:35:53:41:33:90:34:e9:a3:02:01:5b:d6:
bd:ef:2f:8e:69:25:85:5a:c8:5e:ce:19:9e:d6:1b:84:0d:dd:
f1:a6:fe:59:eb:3e:ea:58:56:4f:ca:78:40:93:a4:4a:b4:15:
ba:4f:7b:08:bd:6d:01:88:49:12:c1:fd:39:54:54:94:a9:80:
89:af:7a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfYQ8hd5/bpKUdzxV4GwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OGQ4MTIxZWY3MDRkN2E5NzcwYzNlY2UxZTIwNTYxNDc5
MGFjMzkwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZjJiMDVlZGYyZjM5MjQxZDNjOWQwZjQ3OTdmZDIyNWIwOGRjYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8HR+qmxHWf9qVB5kkSNhgrmHZ8A
irT0UzUCpEIevtDqE6aZvZNrrX8HzHHwnsbaZbP0UNmC8MW1yhJE5+ga5fvB2zLW
Eq5oBSQR+8kBxHxioH6Bz0VDZx0fl+Ta6Gw8tD+EgEs2OHseQ2v1CPiAS1uODyg6
VEVYuqo4YPXbOHV1bLeDEYNoL2pcU1qsvILgtdxEK+P0qtioVGRuBarZrKG9L3c0
cppO5aMVzR6RhXSsIU6NTvl+58SdWpzvph9g1aeyLlIL4EIp5XloZoegG5TsmkWA
SSLsHi8zgmWF23RvxYQjCxEMqHRixhq5rKOP2L9x3EC6pLyeHNH87DJ2jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8rBe3y85JB08nQ9Hl/0iWwjcw1MB8GA1UdIwQY
MBaAFBeNgSHvcE16l3DD7OHiBWFHkKw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2It
OTAwMmZhZDllYTFlLzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2ItOTAwMmZhZDllYTFl
LzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPbbQixK
+JcqY1rIGo3VzynQeoPBUCO71qL8M9DKca2kdBf7aZyeLs2MDKshN7aCKtvDp5JF
+sXKA/QqiuKCt/AeWmI3SGPu2SI8jptUSePKZQgyxVzRrZRv49Iq+qMwMDh3s8Om
9H4bV+laY1s1Zs4ul8wwM4cjzg7GQuDXPKYhv6d/Qdsr8RGAcJwSHtL5en/nXc7L
7UcySSfHKh1g9jcdxni7Tl+i6Fk7bqAN1qVaDd+w4Lvf0e8PNVNBM5A06aMCAVvW
ve8vjmklhVrIXs4ZntYbhA3d8ab+Wes+6lhWT8p4QJOkSrQVuk97CL1tAYhJEsH9
OVRUlKmAia961g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:44 2026 by rpki-client