This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File: FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier: znHMnEwC0zbwjCB1ASBVc3Q0tjFSNmcbY9ehCvF2+ZY=
Subject key identifier: 4D:6F:18:20:FC:68:D4:3D:F2:1A:5C:53:53:B3:CA:8E:AD:77:CD:6F
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer: /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial: 019C40FCEB01D4CC1553A5D20C82D8A29E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number: 27
Signing time: Mon 09 Feb 2026 06:00:42 +0000
Manifest this update: Mon 09 Feb 2026 06:00:42 +0000
Manifest next update: Tue 10 Feb 2026 06:00:42 +0000
Files and hashes: 1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: uWif/VjxjCiwdLeExOKxn+LLkOR+oJyXt9Augh2n7Ig=)
2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:eb:01:d4:cc:15:53:a5:d2:0c:82:d8:a2:9e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145c4728382ec5354e106023df467a4113b49324
Validity
Not Before: Feb 9 06:00:42 2026 GMT
Not After : Feb 10 06:00:42 2026 GMT
Subject: CN=4d6f1820fc68d43df21a5c5353b3ca8ead77cd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:cd:29:06:e9:eb:b6:71:9d:bb:ae:cc:13:
80:43:a0:55:f3:ff:83:e2:1a:78:8a:6b:08:73:66:
45:10:87:41:d1:ce:05:85:f4:fa:06:a8:00:f7:8e:
3b:10:51:d3:ba:1a:a4:08:d1:c6:8a:cd:54:32:96:
a9:bb:56:1d:10:be:6a:5a:86:8d:d0:24:e2:0a:f5:
de:69:06:8b:44:cd:ca:38:90:26:1a:bf:96:1f:d7:
05:d0:7a:f5:8d:ce:c7:34:2e:23:15:dd:12:6f:4c:
85:d6:e8:a6:11:12:8c:12:f1:95:03:c1:2c:db:44:
54:ae:61:6f:b9:8d:8f:d2:86:13:b0:0f:69:ef:fa:
86:32:92:f5:8e:ad:e1:77:81:16:ee:da:3b:23:56:
5c:86:66:82:05:35:a4:ac:04:94:ce:be:9f:20:b1:
72:66:72:d7:5c:97:98:43:a3:68:bc:b3:10:06:86:
ae:df:52:4b:ae:b9:f0:5f:8a:5a:06:b2:f3:aa:49:
0f:f3:6c:1f:f7:1f:69:09:01:59:ac:60:59:10:47:
61:cd:bf:d8:b9:e2:fe:45:31:15:2f:81:bd:61:4a:
ca:75:49:8f:ae:6a:c5:6d:9e:ed:a6:52:1f:b2:7a:
bf:ea:7a:20:be:87:99:f6:d6:1b:20:52:cf:78:d1:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:18:20:FC:68:D4:3D:F2:1A:5C:53:53:B3:CA:8E:AD:77:CD:6F
X509v3 Authority Key Identifier:
keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:9d:7b:ea:62:04:f8:8b:6a:97:d4:ab:78:c4:3e:97:5f:
ce:09:e9:83:07:de:13:96:d1:03:c0:93:0c:fd:67:b3:04:7d:
d6:ec:cd:2f:4f:2f:f8:0f:e4:1c:2e:c5:dc:70:ab:4a:03:d9:
9d:f7:49:8f:cd:bb:8a:7d:59:85:6e:c9:da:11:2b:e2:55:00:
c3:dd:22:57:b7:6e:ad:b3:ab:7f:b8:10:ff:8b:ec:a7:2e:05:
37:5e:4e:d3:cc:dd:ae:f7:85:fb:62:56:5d:14:d5:59:b5:a3:
f6:53:26:cb:33:16:ad:0c:c0:60:1e:0a:ab:f0:aa:33:84:ef:
3f:5e:ba:1c:02:0c:67:dd:fa:8a:e5:bc:98:34:64:d2:21:0a:
ed:20:9e:25:e3:27:db:f6:dc:9f:e4:b7:8a:64:6b:85:a5:ea:
d1:f4:8d:6e:c5:3f:46:55:c6:46:ff:fd:a3:b5:22:54:db:96:
1d:42:78:35:f8:9d:bf:5f:a1:20:ff:9e:82:f4:75:3f:e9:10:
9e:bb:e6:b5:d7:72:1a:34:87:6d:ce:a0:35:5e:33:66:ee:30:
bc:ca:ae:27:94:8f:31:d4:3a:09:14:7f:ae:12:b1:27:05:54:
54:cb:84:4f:56:61:c5:6e:38:e8:bf:53:c6:b1:06:d3:a9:34:
90:0d:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:06 2026 by rpki-client