This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: P4E+zo0Zj5x5JsFsqY5oz4JgfRil+hKO69/tU6uV3yQ=
Subject key identifier: C6:F9:2F:51:79:60:36:75:29:03:5C:F6:0D:F8:93:01:A4:1A:EF:9D
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019C42EB78D991D63523D04FA953171A0EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 17A5
Signing time: Mon 09 Feb 2026 15:00:53 +0000
Manifest this update: Mon 09 Feb 2026 15:00:53 +0000
Manifest next update: Tue 10 Feb 2026 15:00:53 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: 9QQ8MLQ+YhaL+h4YzdkIk3VBPFrJfifISY4PQo3npos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:78:d9:91:d6:35:23:d0:4f:a9:53:17:1a:0e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Feb 9 15:00:53 2026 GMT
Not After : Feb 10 15:00:53 2026 GMT
Subject: CN=c6f92f517960367529035cf60df89301a41aef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:21:c8:60:8e:17:9b:60:b2:8f:fe:9c:1c:
93:3a:1b:ec:c4:ae:3b:16:94:54:8b:fa:43:15:7f:
a2:9e:98:af:9a:34:ee:d3:8e:fa:49:3d:ee:0f:06:
09:c5:27:02:d0:ce:ba:db:72:4e:b5:70:c3:bb:b2:
74:0f:2d:ee:47:2d:39:51:5d:30:0d:48:9a:9b:5e:
f6:49:e4:ad:39:7f:f1:39:58:3c:cf:8e:e3:13:5a:
45:5b:58:bc:c0:14:03:cb:63:9b:dc:ca:df:b2:45:
6a:2f:09:74:64:da:fc:90:cf:58:43:5f:42:6d:2b:
e5:4e:67:c4:37:b5:d3:45:d1:d2:00:4f:fb:87:a3:
81:5c:79:18:7d:31:00:c6:14:f1:50:8a:94:5e:f8:
60:22:ae:ce:78:cb:a8:29:3a:1b:5c:57:f8:37:47:
41:34:0d:8b:01:0a:3c:ef:5e:67:88:a9:bd:5c:2b:
e8:16:37:b9:27:b5:4a:bc:9d:a8:d1:c7:fc:1d:46:
8e:36:69:80:c6:ff:35:4e:b9:68:40:62:c2:59:dd:
76:88:d2:31:bb:bb:17:20:5c:55:50:3a:bb:b9:4b:
75:96:68:5f:0e:80:48:e6:31:a6:58:77:1d:c8:40:
27:ff:2e:23:9e:2b:bd:27:58:89:27:66:f1:56:93:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:2F:51:79:60:36:75:29:03:5C:F6:0D:F8:93:01:A4:1A:EF:9D
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:40:7f:47:ce:a1:73:2f:0f:4a:2e:8d:4d:b1:64:f5:4a:
24:94:f1:9b:1d:f2:bf:a4:95:69:36:53:ac:5e:f5:a7:20:58:
f9:03:b1:b9:6b:03:70:6f:fc:5e:fb:b3:7d:3b:27:0c:79:68:
d4:86:3b:b2:3f:7c:ac:24:7e:02:1c:90:e1:ac:21:87:24:ab:
e6:e0:8a:3c:db:e0:d3:a2:b9:f4:a4:6c:ea:13:46:f6:07:c5:
ef:d4:84:58:d0:74:21:9b:1e:98:54:35:53:20:f8:05:0c:70:
a9:c4:4b:3d:6c:d5:02:7d:85:a3:69:1c:85:b5:da:af:c6:86:
83:d3:e4:5c:b3:37:37:96:28:bf:bd:33:56:fc:6b:10:0e:1d:
0e:42:95:1d:32:98:98:a6:de:e4:f2:44:10:c0:63:4f:db:60:
c8:80:8a:0a:f2:4a:3c:70:a0:77:13:f5:33:91:79:da:82:65:
f2:b0:74:11:48:9d:82:5e:3e:ad:06:28:03:63:bd:17:f3:e5:
94:44:e6:5f:b5:35:79:be:6d:a9:0f:1d:fc:25:aa:06:f7:15:
5e:44:04:28:b1:7e:ce:ea:d4:9f:27:b9:e9:ae:ca:28:8e:eb:
00:fc:62:92:e6:8d:59:72:15:10:13:e8:6b:4a:a0:58:32:5d:
de:35:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:17 2026 by rpki-client