This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: upmKvtXSukl07p/u7Km0RRzyKzmpvx0dXRS69UPJPvI=
Subject key identifier: 6B:A4:44:42:9A:A2:EB:2D:60:97:39:4C:B2:87:A9:51:1F:61:FF:83
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019C435966BAFA6B44144F7DDC312476604D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 1545
Signing time: Mon 09 Feb 2026 17:00:58 +0000
Manifest this update: Mon 09 Feb 2026 17:00:58 +0000
Manifest next update: Tue 10 Feb 2026 17:00:58 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: acbF74uV/p/mrreN7NnQx+uBz+R1eN2kJa0sL+Ob/NQ=)
2: lVcBo5vuxQrLHVx-CazpWVzHmK8.roa (hash: vG4AHQ6D6vSRnjokMxDtiTnVibG0s89z9DApsJwgQrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:66:ba:fa:6b:44:14:4f:7d:dc:31:24:76:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Feb 9 17:00:58 2026 GMT
Not After : Feb 10 17:00:58 2026 GMT
Subject: CN=6ba444429aa2eb2d6097394cb287a9511f61ff83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:90:c6:10:f4:85:97:74:4d:67:3a:f4:6a:
22:54:c0:9e:7e:68:fc:55:95:31:e8:b7:e4:6e:8d:
23:f9:80:5e:c1:d5:ac:59:c8:8e:cc:25:3e:5e:52:
d0:e6:1e:19:31:32:ed:a4:e5:88:e5:a6:b5:e3:07:
67:6f:99:6d:3b:7f:8f:c2:a0:b4:64:28:29:ff:ec:
28:4f:31:fa:95:37:ca:10:14:94:19:52:88:06:2d:
30:c8:82:b4:88:99:b7:91:17:21:a3:87:9c:08:9d:
44:28:5e:3f:7e:70:af:3b:43:cb:ff:30:26:f4:42:
84:17:89:2b:33:3c:7f:53:df:f9:4b:c8:5e:a3:ec:
86:ec:a1:8d:c5:8c:4c:17:42:98:f9:e4:02:9f:93:
12:e2:c3:42:f2:0e:cd:4a:cd:75:dd:b5:d5:df:69:
a1:e6:4b:4d:d0:bc:5e:04:1c:8a:82:d5:52:ba:96:
f7:c9:4c:46:83:a8:1c:fc:da:5c:48:a0:b0:8b:e8:
26:be:fd:eb:13:f3:e8:76:96:f7:c0:a2:ec:6d:e6:
4f:ee:5b:a9:4e:31:bb:9c:b3:38:f3:a8:fd:b4:01:
5c:53:67:1b:4f:f8:9f:36:26:6a:b4:11:7f:8a:01:
b6:f9:01:3b:96:64:45:73:ca:74:f0:3b:df:fb:fd:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:44:42:9A:A2:EB:2D:60:97:39:4C:B2:87:A9:51:1F:61:FF:83
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:df:63:47:bf:1b:be:a1:e4:78:88:4a:52:f9:a1:31:65:
41:1c:56:c5:f5:cc:74:36:ce:9e:bc:b9:ae:ea:6a:6d:02:9a:
cf:25:ef:fe:0d:77:82:66:b0:13:a8:4e:ec:91:fc:6b:aa:7d:
38:ac:84:7d:ff:ef:db:6b:20:e0:0b:21:cc:d0:80:76:54:fe:
36:cd:59:68:06:c4:7a:bc:77:77:11:f3:2c:1e:a6:b8:b8:55:
89:60:28:9c:4a:6e:e9:a0:b4:7d:d6:bb:71:e6:1e:14:1c:4c:
97:a6:81:01:df:25:41:0f:b5:73:2f:76:a9:ee:0f:4e:12:88:
90:11:d0:da:27:e4:15:1b:35:83:13:fe:b8:f5:af:f7:98:40:
15:93:7f:5a:2c:15:a8:03:a4:c6:e5:cf:d1:94:b6:1d:d6:3d:
5b:b2:4f:1e:5d:fa:9e:b8:45:51:d4:72:fd:fa:3d:aa:95:38:
b1:4f:d3:1c:cd:60:45:d5:f9:31:e3:62:a2:30:7f:3b:5e:98:
48:f0:10:33:8f:2d:c6:3b:fa:1f:41:0b:bc:5b:90:bf:ae:c1:
e2:c2:8f:6f:c6:0b:30:9c:36:26:81:b6:c9:c1:b5:25:17:d2:
75:af:27:37:49:bf:86:6b:11:80:89:82:84:d8:41:6e:37:73:
3d:ac:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:44 2026 by rpki-client