This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: G5ctxICMMkIYx2IOCoBQ5pQkjuUB64Gvzkk3ZRssU44=
Subject key identifier: 46:B3:68:D4:01:B6:4B:AA:83:98:2C:B0:67:87:CB:05:C8:C1:9F:97
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019C2EC06FA6B42A1C9FC1F5242CFD203278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0210
Signing time: Thu 05 Feb 2026 17:01:29 +0000
Manifest this update: Thu 05 Feb 2026 17:01:29 +0000
Manifest next update: Fri 06 Feb 2026 17:01:29 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: 0x/ozGidwhEolq+YIV4tVf3omlqGSx40IGuOahn1RGY=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:c0:6f:a6:b4:2a:1c:9f:c1:f5:24:2c:fd:20:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Feb 5 17:01:29 2026 GMT
Not After : Feb 6 17:01:29 2026 GMT
Subject: CN=46b368d401b64baa83982cb06787cb05c8c19f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:76:d6:c3:ff:da:1e:ae:d9:f6:68:51:df:
04:89:56:cc:65:95:43:c4:36:84:47:3b:3f:45:fd:
0c:2c:a6:c0:43:87:30:48:30:64:d7:67:37:03:71:
50:ab:a8:af:8e:04:cb:ab:2e:b0:58:d6:9b:63:d4:
a0:d2:6c:91:e6:0d:6f:3a:9c:18:dc:33:ef:cb:f2:
7e:96:66:32:5d:1e:c0:67:ff:d1:ca:51:b2:e8:35:
c5:5f:12:35:ed:be:cc:d8:04:a4:8e:15:b4:f5:91:
3d:7f:6f:48:5d:be:2a:97:6f:69:42:b4:0e:f4:72:
f1:b7:44:d7:04:2c:b5:fe:86:9e:e1:e0:6b:b7:26:
e2:20:52:b7:54:d7:df:38:f6:d2:47:02:bd:3e:12:
f8:9e:5a:b1:f3:9f:78:43:c7:bb:14:ad:5e:34:84:
32:bd:7c:1a:e3:2b:83:f4:05:04:b7:40:f6:57:b3:
12:0a:1e:cf:88:62:ff:cc:4f:0e:95:ab:0a:3e:a9:
10:16:57:6c:e8:78:39:8e:d6:59:e1:5f:ed:ea:3b:
fe:42:58:40:be:0b:d8:1a:12:c1:ef:fe:a4:eb:2e:
3b:f8:2d:9f:8d:53:5f:08:9f:47:77:d4:b5:57:e3:
5f:da:53:a8:80:e9:c2:fc:5a:97:66:b6:ee:ac:2a:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:68:D4:01:B6:4B:AA:83:98:2C:B0:67:87:CB:05:C8:C1:9F:97
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bd:64:3c:f7:b9:15:27:7b:82:19:c8:e8:84:cf:6b:b7:be:
31:58:4a:3d:51:fa:26:a0:00:d9:72:48:36:ee:c4:e0:19:b3:
95:a3:a0:c0:c2:95:df:76:e3:d9:ac:cc:80:f5:7d:31:2b:63:
bf:90:af:96:4b:1e:25:bf:2e:c3:a8:53:af:92:17:4c:d8:d6:
c8:fe:aa:12:2a:c7:82:50:e0:6e:3d:a5:af:b4:a8:94:12:1f:
a2:c9:37:78:98:fb:32:9e:e3:14:1c:8b:e0:d9:13:ea:d5:e9:
b2:58:3d:71:5a:c6:c1:73:33:5d:a4:94:5a:c5:0b:e0:09:e8:
e8:07:a4:6e:70:ef:9b:00:63:e1:fc:23:e8:a9:79:37:72:fc:
95:af:f7:47:e9:4b:1f:01:0c:77:85:97:a3:bb:2b:16:18:94:
33:2c:11:04:1e:a1:95:56:6f:c6:94:08:ff:77:6a:53:f6:0b:
c2:ae:8b:48:c4:96:07:dc:ae:75:4a:91:8a:5a:b7:32:da:e9:
64:bf:c6:2a:e7:e4:09:0d:d3:43:4c:8c:8a:72:d5:13:8b:0b:
e2:e1:de:d2:e5:86:26:57:1e:37:eb:8f:a2:2c:69:3e:ae:45:
d9:74:b2:8e:a4:3e:f6:41:f3:ab:f0:6a:b9:58:27:2a:8b:f0:
df:01:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 00:32:53 2026 by rpki-client