This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier: 19s9fA8m0eIIHtvGKJNvSl3m6X39sWCxw8NUrogGFOo=
Subject key identifier: 21:28:B0:01:D8:35:04:C4:18:8C:DA:47:53:45:EC:F5:AE:C4:52:05
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 019C41D8B1BBCC60F88BECD1AD8D8666C7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number: 17DD
Signing time: Mon 09 Feb 2026 10:00:46 +0000
Manifest this update: Mon 09 Feb 2026 10:00:46 +0000
Manifest next update: Tue 10 Feb 2026 10:00:46 +0000
Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: 6mWsMb4dlSCdZGmgfhmTXxnyF96KU2S6OC1GmwIJV0E=)
2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:b1:bb:cc:60:f8:8b:ec:d1:ad:8d:86:66:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: Feb 9 10:00:46 2026 GMT
Not After : Feb 10 10:00:46 2026 GMT
Subject: CN=2128b001d83504c4188cda475345ecf5aec45205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:55:78:f1:c5:e4:da:12:a8:d9:44:d8:46:
a3:5b:aa:f4:32:7e:82:63:ae:68:02:f5:11:5f:db:
42:70:34:13:c7:63:07:7a:fb:c7:47:d3:37:d3:97:
3a:0c:fe:5c:73:08:e6:71:ee:ed:e1:49:37:16:f5:
2e:a6:81:42:ae:61:b0:f3:4c:98:8d:0b:91:65:33:
d8:85:cb:e5:2c:3d:ac:06:79:73:fe:f9:89:4c:79:
1f:57:3a:ff:30:30:9a:c7:92:10:4e:43:89:a9:c0:
72:ea:ac:9b:ee:ae:a8:a9:f7:f2:91:97:d3:fa:d1:
95:ea:9b:e2:cb:cf:de:b1:58:ae:46:51:e4:c3:c9:
45:3b:a3:d4:ec:ba:a2:45:f7:da:a4:b3:3a:7c:1a:
2c:aa:2f:72:81:78:e0:a0:22:04:de:2a:50:24:49:
3e:2c:40:99:8b:4d:11:e9:b0:4f:39:a0:57:69:56:
cb:fd:a6:8c:07:96:b4:3e:d2:5f:e7:8b:48:ef:c4:
a9:d0:64:76:fd:a2:e9:be:04:62:c4:d2:c0:a1:4c:
c7:10:45:f8:50:67:fc:09:c9:50:6b:91:88:91:ad:
41:e5:4a:1b:73:2a:f4:b5:54:21:de:e1:73:75:e9:
1f:d3:74:33:16:26:d4:4d:6d:31:7f:75:38:75:86:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:B0:01:D8:35:04:C4:18:8C:DA:47:53:45:EC:F5:AE:C4:52:05
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:52:ec:cc:7b:6c:ef:0e:fa:65:8a:9c:e6:70:09:ac:73:
80:be:09:5f:cd:b9:75:ea:2b:e5:b0:c9:ef:c7:bb:59:af:2b:
82:84:fe:59:b6:4e:a5:16:32:ce:c9:ab:63:18:e9:43:f4:4b:
1b:80:38:15:3c:44:51:09:e7:be:6a:41:fa:81:40:90:5c:84:
3a:b3:fa:d5:2c:05:fd:7c:4e:52:80:a5:f9:e6:aa:34:90:c5:
02:55:39:00:32:65:df:43:f2:8d:c6:31:f5:78:76:09:4a:d0:
dd:a9:be:bc:d1:b2:66:45:70:21:6b:63:4a:b6:92:82:80:e4:
ac:28:6d:38:65:0a:4b:64:b8:ec:79:0c:12:8a:1a:32:8d:f0:
dc:b6:db:92:19:1c:60:0c:3c:ca:5e:a3:cb:1a:a9:1b:d9:b6:
d5:17:3b:07:7b:ac:43:66:a0:50:1f:7e:77:49:8c:48:22:f5:
41:47:ca:9e:97:f9:bd:cd:3b:66:60:00:c0:ca:50:e8:ab:5c:
b5:81:84:2f:23:9c:38:0d:e7:bd:66:3a:e0:fc:58:cc:2b:e8:
ad:db:93:93:9f:40:d9:d5:b1:06:20:fe:71:2d:5e:41:a0:d6:
98:a8:cb:80:05:de:95:f3:39:43:04:e5:18:4f:34:51:52:04:
cf:f1:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:41 2026 by rpki-client