This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: dzD8zmWxCITSK/DmtcPsbKNssTZ8fJ/NGFtBZfSZGfs=
Subject key identifier: AC:0A:2E:18:D0:50:96:50:16:54:44:3C:76:24:24:CD:A0:95:95:43
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019C4390B6D4F45C944E32B505D8B7CBC893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 0128
Signing time: Mon 09 Feb 2026 18:01:23 +0000
Manifest this update: Mon 09 Feb 2026 18:01:23 +0000
Manifest next update: Tue 10 Feb 2026 18:01:23 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: QQ6Ce4vAModW3ut8OMyOkzrvGMaKM/L13vuFrlC3hAM=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:b6:d4:f4:5c:94:4e:32:b5:05:d8:b7:cb:c8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Feb 9 18:01:23 2026 GMT
Not After : Feb 10 18:01:23 2026 GMT
Subject: CN=ac0a2e18d05096501654443c762424cda0959543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:3a:53:e5:89:b6:b5:02:2b:46:09:79:a2:
96:e5:ac:54:c7:36:de:64:76:8a:22:1a:94:97:2e:
9b:00:0c:de:ed:7f:c4:6d:1c:b7:0b:da:ab:54:be:
22:36:5c:4a:90:60:a0:03:cb:d7:8b:2a:fd:11:7a:
2c:d2:2b:59:85:c3:f8:34:03:4c:0c:05:2d:33:99:
cf:d5:80:88:b1:5e:98:bf:87:5c:06:ae:03:22:d9:
d9:60:32:88:92:fa:31:80:9e:5e:09:b2:41:e6:f4:
94:5f:05:e1:a5:c8:d2:21:22:8f:44:56:86:3a:cf:
72:2d:09:b4:f6:3d:04:20:65:58:a8:e1:0c:8a:bb:
c9:e2:3d:98:d5:6b:ee:85:0a:fc:d1:a3:15:21:a6:
86:70:f3:52:a3:4d:2d:00:bd:f2:13:8d:a6:ef:2e:
c8:fb:c2:43:c6:ff:d8:d2:b6:08:20:0e:bb:dd:99:
af:88:01:4c:79:03:0e:b8:c2:f4:e4:2c:6d:78:f1:
1f:14:78:ee:cc:23:0a:e2:40:21:50:5a:37:ab:fe:
40:6c:71:13:5e:ac:33:8b:cc:4d:27:f2:fa:17:bd:
67:22:b0:3e:39:f4:bf:70:72:0b:ab:69:63:17:4c:
0b:84:0d:05:3a:57:39:81:f1:33:a9:98:8b:ca:d2:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0A:2E:18:D0:50:96:50:16:54:44:3C:76:24:24:CD:A0:95:95:43
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:4e:a5:9f:61:b3:e4:c6:9d:23:fa:02:b1:db:43:db:04:
9a:7f:cb:cb:03:de:87:e6:fd:43:c6:ef:59:78:35:76:75:8c:
57:1e:bf:ce:4f:8f:eb:19:4d:02:23:8d:46:0f:2c:bd:39:3a:
81:c4:98:e0:f8:f8:f4:a3:38:c2:60:cf:39:bd:b3:13:93:6a:
f1:e4:d0:47:4b:a1:9a:36:87:13:fd:ef:fc:30:76:8e:34:6a:
f9:d6:99:cc:c6:6a:87:e2:55:3b:c2:5c:f0:35:4a:ef:a5:f5:
50:17:f9:52:d3:b3:6f:90:ec:24:ad:47:d1:33:8d:98:a6:2f:
72:08:6c:02:5c:f5:c7:53:d7:b3:9b:64:ca:17:b3:05:7a:e5:
c2:d6:8a:b1:82:09:56:05:eb:24:9c:c2:99:ed:26:db:85:8f:
18:4f:ba:93:43:7a:1f:f3:e7:29:9c:65:15:35:ee:08:78:8f:
57:8f:87:59:a9:68:6d:ca:8f:5d:a0:67:90:32:10:cc:23:e3:
ec:04:2a:13:20:5c:72:80:16:1e:e5:4a:02:08:5c:92:64:a8:
51:54:7d:94:fd:37:5d:7b:79:56:75:0f:81:d9:d8:b8:29:f5:
54:05:c4:3c:e8:50:58:8d:9c:b4:fa:60:9c:33:a6:34:46:4d:
c6:25:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:20 2026 by rpki-client