This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: XUAQZOIya071CKMFSiPZYJRaKRwwKjWq7HbSM62B7ro=
Subject key identifier: D3:AF:54:FD:BC:DC:22:D2:69:55:96:C3:BF:F9:0F:01:3F:62:A0:6B
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 019C43FE190B8A4B4815080135CF114E3ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 086D
Signing time: Mon 09 Feb 2026 20:00:51 +0000
Manifest this update: Mon 09 Feb 2026 20:00:51 +0000
Manifest next update: Tue 10 Feb 2026 20:00:51 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: P8miNAbwoE6jPMz8KMi7oeVY82EPzfgToIGv11D3AKc=)
2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:19:0b:8a:4b:48:15:08:01:35:cf:11:4e:3a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Feb 9 20:00:51 2026 GMT
Not After : Feb 10 20:00:51 2026 GMT
Subject: CN=d3af54fdbcdc22d2695596c3bff90f013f62a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:ee:2a:70:26:ba:4e:f3:a5:9e:a8:f3:e6:
9f:06:52:fd:33:53:bb:4a:de:49:63:7b:9a:68:cc:
80:6c:56:59:1b:c0:45:b1:ea:74:62:90:37:66:8f:
7c:cd:dc:c4:aa:de:2b:83:ac:6c:b3:e7:22:e9:3e:
4a:e1:90:09:d2:c3:a3:76:af:0a:1f:d3:9d:4a:88:
08:e1:67:55:2a:ba:04:44:3d:cc:8e:a7:7d:14:9c:
a5:45:f9:b1:93:97:28:78:32:75:47:50:43:59:d7:
d9:11:d2:8b:bc:c1:8a:2e:30:5c:23:7f:34:6d:a5:
19:9e:28:5a:76:f8:f1:b5:c2:4f:d3:a7:5c:dc:bc:
c9:69:d8:c4:b1:89:5f:4f:84:d7:e4:64:43:fd:78:
5b:f2:54:76:40:ff:6d:bb:ab:ab:99:e5:e8:22:35:
27:50:b3:06:45:bd:6e:36:08:cf:31:96:87:af:65:
46:47:c0:f9:0d:c8:ff:b6:20:67:d4:e3:69:0d:4e:
f8:2d:58:81:b8:cb:b9:ee:4c:04:dc:bc:79:2b:f7:
81:3c:eb:e1:4e:2b:bc:1b:6b:bb:1a:c6:5e:0d:06:
18:2f:43:4c:21:6e:44:b4:c2:75:33:e7:e1:af:83:
2c:86:38:f0:f2:16:47:aa:63:7c:b0:e0:f5:39:0f:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AF:54:FD:BC:DC:22:D2:69:55:96:C3:BF:F9:0F:01:3F:62:A0:6B
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:b4:7c:80:22:fb:e5:51:2b:57:3f:dd:30:63:db:67:7f:
46:92:ed:47:e8:c9:2a:32:72:dc:d1:d6:9e:a8:4f:33:9d:9e:
92:55:a8:42:11:80:2f:d3:1e:49:e4:06:42:68:04:da:b7:97:
f3:ca:af:ec:63:38:97:f4:eb:72:2b:46:b7:68:89:61:25:1f:
1e:41:91:e4:8d:23:00:a5:0d:73:51:1e:80:24:ff:24:7b:32:
6d:e7:66:71:5b:b0:38:c8:75:5c:9b:06:37:1a:24:0a:ea:75:
6e:54:dd:de:ae:f0:80:3b:91:b4:c9:e1:e4:25:7c:8b:59:bb:
eb:e0:20:97:d6:bd:e2:98:13:51:69:1a:62:40:42:92:a6:78:
61:f2:e1:b7:a8:98:77:38:ea:aa:a6:0c:91:9f:3e:11:cf:55:
e8:e6:99:48:f2:9b:77:10:91:4b:e0:1d:5e:09:32:29:3c:8d:
01:ac:af:30:e6:4e:c1:6e:68:7f:8b:83:2d:cc:c3:06:d7:19:
d2:32:27:1c:42:4b:0a:e5:7e:f8:a9:f8:66:e5:dd:9d:ca:06:
43:de:37:d8:2a:af:13:eb:f0:e2:75:d4:7a:0b:92:a5:5e:67:
05:99:2b:94:eb:39:fa:32:ce:cb:a2:8d:fb:90:59:b5:ef:e9:
96:c9:65:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/hkLiktIFQgBNc8RTjrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjYwMjA5MjAwMDUxWhcNMjYwMjEwMjAwMDUxWjAzMTEwLwYDVQQD
EyhkM2FmNTRmZGJjZGMyMmQyNjk1NTk2YzNiZmY5MGYwMTNmNjJhMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfHuKnAmuk7zpZ6o8+afBlL9M1O7
St5JY3uaaMyAbFZZG8BFsep0YpA3Zo98zdzEqt4rg6xss+ci6T5K4ZAJ0sOjdq8K
H9OdSogI4WdVKroERD3Mjqd9FJylRfmxk5coeDJ1R1BDWdfZEdKLvMGKLjBcI380
baUZnihadvjxtcJP06dc3LzJadjEsYlfT4TX5GRD/Xhb8lR2QP9tu6urmeXoIjUn
ULMGRb1uNgjPMZaHr2VGR8D5Dcj/tiBn1ONpDU74LViBuMu57kwE3Lx5K/eBPOvh
Tiu8G2u7GsZeDQYYL0NMIW5EtMJ1M+fhr4Mshjjw8hZHqmN8sOD1OQ986QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOvVP283CLSaVWWw7/5DwE/YqBrMB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaO0fIAi
++VRK1c/3TBj22d/RpLtR+jJKjJy3NHWnqhPM52eklWoQhGAL9MeSeQGQmgE2reX
88qv7GM4l/TrcitGt2iJYSUfHkGR5I0jAKUNc1EegCT/JHsybedmcVuwOMh1XJsG
NxokCup1blTd3q7wgDuRtMnh5CV8i1m76+Agl9a94pgTUWkaYkBCkqZ4YfLht6iY
dzjqqqYMkZ8+Ec9V6OaZSPKbdxCRS+AdXgkyKTyNAayvMOZOwW5of4uDLczDBtcZ
0jInHEJLCuV++Kn4ZuXdncoGQ9432CqvE+vw4nXUeguSpV5nBZkrlOs5+jLOy6KN
+5BZte/plsllDA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:30 2026 by rpki-client