This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: 7vNvVqiKUOX1T9gTEDpRl7Npv1FRU+o3a+LVxluVlmE=
Subject key identifier: 3D:44:FC:1B:B2:0C:86:4A:A4:AB:21:D0:F7:C9:30:2C:74:9D:F9:85
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 019C42B442D5B1D2AA25203D46377EDB330F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 09CF
Signing time: Mon 09 Feb 2026 14:00:35 +0000
Manifest this update: Mon 09 Feb 2026 14:00:35 +0000
Manifest next update: Tue 10 Feb 2026 14:00:35 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: 4sONFGs9mXT6on/sChw8/1XmpFtF3FHbtlbVGW5FKTs=)
2: GFZcD-SiqJlzeu5I4CSkb1OREjw.roa (hash: XxnmUWyfzPzcdobUtDhD16hiBtaiKFeoObHAgaQYHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:42:d5:b1:d2:aa:25:20:3d:46:37:7e:db:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Feb 9 14:00:35 2026 GMT
Not After : Feb 10 14:00:35 2026 GMT
Subject: CN=3d44fc1bb20c864aa4ab21d0f7c9302c749df985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:21:4d:7b:0b:2e:fc:27:26:09:e5:27:1d:
67:16:77:8c:82:58:8c:a5:27:2c:7d:41:38:a4:ba:
7c:61:98:db:49:e4:19:bc:68:6d:6c:df:0c:48:0b:
b5:0d:31:c2:0a:28:72:15:a1:2a:c0:2d:ae:d6:75:
e3:61:51:f1:ab:bb:4b:fa:66:04:f7:7a:f2:28:8d:
c4:9e:75:ed:21:44:da:bb:1e:82:de:2f:8e:cd:7a:
45:ce:27:9f:61:68:96:97:57:33:bb:ed:5c:b3:5b:
97:61:43:df:7b:01:59:a1:b3:9f:04:cd:c1:05:db:
0d:2c:4a:bd:a0:09:e7:b4:26:cd:62:8a:0c:68:d4:
4a:ac:ac:f2:bb:9a:82:bc:8b:9a:39:19:a2:a6:69:
79:c7:b9:df:26:95:db:4e:67:c7:ab:8f:4e:14:70:
61:f3:e0:cf:b9:7d:d6:18:d6:80:4e:08:a6:85:e4:
6c:35:42:75:50:4a:f8:ab:15:7d:b3:87:24:67:92:
f4:79:9b:8f:85:1a:47:19:b2:45:dd:e8:d8:f9:1c:
59:23:44:4d:25:c9:8c:6d:2c:69:d9:80:79:b2:0d:
d9:79:5e:86:bb:8a:de:c3:36:93:bb:eb:80:7b:fc:
da:d3:65:d9:1d:f9:73:7f:e5:ee:33:7f:00:0d:af:
88:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:FC:1B:B2:0C:86:4A:A4:AB:21:D0:F7:C9:30:2C:74:9D:F9:85
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:de:e8:3a:32:01:db:60:a6:40:a4:7d:91:ea:89:8a:04:
f2:14:ed:10:57:f6:a4:a7:e0:69:84:6e:dd:2a:53:2e:32:49:
7a:24:18:80:c2:88:59:8b:3c:ba:9c:34:99:a6:2c:51:4a:05:
d6:c3:11:0c:0e:84:9c:8e:b1:4d:23:01:9a:85:c5:d1:fa:df:
49:2e:ff:06:e3:1b:68:3c:b1:68:28:b1:77:be:af:c5:de:e0:
d2:3c:73:e9:bc:ef:3c:d6:0a:03:22:e7:64:5f:67:77:8e:a4:
58:59:08:56:d2:0e:1e:12:8c:d5:d3:31:d9:60:8c:50:36:4b:
e5:b5:ad:e3:1e:a2:13:0f:b1:8c:a4:a3:53:ff:49:a5:48:55:
2b:85:f3:a3:b9:76:2e:13:75:3a:f0:f3:b9:5b:fe:50:20:f9:
17:05:81:d7:ff:14:bf:b2:c3:97:ab:e1:fc:16:78:c3:4d:d2:
b2:e2:69:b4:ed:ca:42:6e:af:ef:9a:84:c9:5a:98:43:0e:ba:
b7:7d:02:f2:b5:83:65:d9:2b:d7:fc:ca:24:34:f6:c7:bb:08:
87:3b:b0:fb:69:32:88:e5:44:57:a0:56:09:f3:49:96:29:40:
48:a8:3d:86:f0:cd:5b:c6:ee:df:67:3f:3f:f4:bc:4c:6a:96:
9a:d0:f3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:26 2026 by rpki-client