This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: 0/67hW9asIHfgHcN2U6M1PfSP+hq+FbVtYFp3ZhUjNA=
Subject key identifier: 61:3C:24:2C:15:C2:66:E7:54:75:14:0B:59:D6:5B:BA:C1:A3:4B:D8
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 019C4390ACD0D45DD3AF25912670A895C689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 1824
Signing time: Mon 09 Feb 2026 18:01:20 +0000
Manifest this update: Mon 09 Feb 2026 18:01:20 +0000
Manifest next update: Tue 10 Feb 2026 18:01:20 +0000
Files and hashes: 1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: 2oj3/UarEV8uFT4kGQ5NYks09m5y4Hj6wv2N1UfVOR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:ac:d0:d4:5d:d3:af:25:91:26:70:a8:95:c6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Feb 9 18:01:20 2026 GMT
Not After : Feb 10 18:01:20 2026 GMT
Subject: CN=613c242c15c266e75475140b59d65bbac1a34bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:6a:66:03:0c:69:2a:ad:d2:53:3e:ac:e2:
76:d1:53:f5:b4:0c:62:05:3c:12:8b:05:fe:3a:6d:
4e:70:3e:6b:79:20:80:fc:ac:f0:bd:e4:ca:66:69:
98:ae:8a:1b:a1:54:47:18:ba:62:2e:7a:d9:cc:50:
73:9e:ea:c0:bc:f8:e6:d6:1d:be:e5:65:74:72:22:
f0:ed:8e:25:ae:10:19:20:46:3b:0c:99:09:77:dc:
ab:82:95:b9:37:1d:19:9f:b6:2b:a4:3b:6e:4a:00:
f1:76:42:cd:62:69:1c:1f:b5:41:55:62:73:72:eb:
1e:a9:f0:09:07:a0:95:89:02:cf:55:f3:cc:07:71:
2e:40:64:e0:d1:ba:96:b2:25:72:c4:a7:e0:2b:37:
08:34:b2:97:13:21:c4:0d:15:d2:53:fe:54:a9:96:
a6:9f:f1:58:5f:0f:6e:38:42:fe:4d:e7:31:f6:05:
62:ba:ce:87:40:c9:8f:00:b6:5f:3d:2b:06:fb:8e:
9e:59:1d:b1:e3:7b:54:16:b8:9a:6e:1b:b8:45:6d:
33:f2:07:1c:c4:ed:c3:83:ac:86:03:77:87:65:1d:
c4:3a:0c:42:a5:59:16:e2:3b:ef:4d:39:ce:ae:4c:
53:93:bf:7d:29:1a:26:fb:3d:d7:9a:36:27:bf:8b:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:24:2C:15:C2:66:E7:54:75:14:0B:59:D6:5B:BA:C1:A3:4B:D8
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:be:f7:69:b1:c7:08:48:2b:35:5f:41:81:f3:c0:e4:7d:60:
5f:ca:bd:05:ad:b2:62:f0:0f:22:e7:7a:99:09:8e:31:48:cc:
92:bf:f4:75:51:6a:11:6d:d8:2d:1a:1a:8b:49:90:21:a3:14:
36:81:e9:0a:12:71:9d:d4:02:7a:89:49:dc:86:a8:39:e2:8e:
75:6f:ab:d3:00:22:1d:85:41:b7:96:ff:63:ab:82:aa:42:96:
d9:e4:ff:ae:23:02:13:de:b8:d2:10:1d:84:6c:d0:56:1a:da:
eb:45:82:e4:54:fc:fa:81:63:3f:ff:3b:c2:66:8a:97:fa:e9:
33:f0:98:13:d7:6a:d6:d5:26:4f:a1:58:73:f3:a3:0a:62:62:
83:e1:f4:49:93:b3:d9:b2:3b:ed:7a:ab:d4:95:bc:7b:3e:34:
7e:fe:b3:c0:d4:45:cc:e7:85:03:29:58:c3:84:f7:15:05:f9:
16:5c:a4:a2:4f:df:72:fa:c1:c1:81:45:e6:86:5c:f7:2f:ca:
cd:36:41:cd:df:53:a2:98:b4:d5:ad:d0:91:4d:52:e9:24:3d:
29:6a:98:4f:6a:77:ae:90:c4:2c:8a:9a:63:89:0d:f0:8f:b4:
e5:11:b6:a9:a9:3e:3c:53:27:82:16:87:90:95:cb:2f:52:10:
35:4c:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:16 2026 by rpki-client