This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier: EArY/uudlKC/AjmIJLNhEwTXpXsLS82pqRdm5TI8GfI=
Subject key identifier: F7:A5:F2:54:27:70:A6:C3:78:24:47:71:56:B2:A3:34:7D:D6:A1:52
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer: /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial: 019C41A2529590345BF2F1CD073682EA906C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number: 02D6
Signing time: Mon 09 Feb 2026 09:01:22 +0000
Manifest this update: Mon 09 Feb 2026 09:01:22 +0000
Manifest next update: Tue 10 Feb 2026 09:01:22 +0000
Files and hashes: 1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: beO4otTR0i+F6aANJHQnptn0piMwqrIQjg+ebD6Czf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:52:95:90:34:5b:f2:f1:cd:07:36:82:ea:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
Validity
Not Before: Feb 9 09:01:22 2026 GMT
Not After : Feb 10 09:01:22 2026 GMT
Subject: CN=f7a5f2542770a6c37824477156b2a3347dd6a152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:92:26:82:13:74:0c:b9:7d:b6:94:f9:5c:35:
46:cb:fc:7e:45:0d:b5:08:31:4f:29:db:df:2a:c6:
de:17:d4:29:c0:90:0a:71:04:25:b9:6b:50:15:c4:
7c:68:f9:c4:58:83:13:d3:07:aa:41:ef:c5:1c:7b:
dc:f6:09:a5:0a:b1:37:28:18:69:36:c6:f7:e5:65:
61:f0:5a:b0:f4:04:b9:28:c0:5f:c8:d5:26:72:39:
03:f3:57:75:5c:4f:f3:53:9b:49:0d:eb:8c:a4:e3:
c9:67:7b:73:00:02:50:f1:11:35:4c:b0:73:42:91:
ca:62:d6:69:8a:ca:f8:91:2e:79:18:b3:57:3c:a4:
fb:80:89:97:c5:e0:f4:9d:1a:da:65:f5:b2:8e:5d:
7a:ef:72:04:c0:a5:b7:e9:45:0e:71:d4:a9:e0:3b:
8c:b4:a7:24:31:ae:cf:b7:e9:72:16:9e:42:58:85:
bb:e1:bd:4d:4c:32:ee:22:45:a9:cc:8e:ad:0f:d4:
a7:33:dd:ac:ac:5c:66:a0:be:77:2c:a3:83:43:b9:
68:03:60:16:5e:88:cd:da:ee:2d:07:50:09:07:0d:
7b:26:17:22:96:73:4f:fb:58:e2:5d:81:ca:b8:c7:
a2:ea:cc:aa:d9:f4:94:85:25:e1:5b:36:14:06:67:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A5:F2:54:27:70:A6:C3:78:24:47:71:56:B2:A3:34:7D:D6:A1:52
X509v3 Authority Key Identifier:
keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2d:ca:42:1f:57:fa:17:ae:9f:33:f2:4d:00:88:c2:fb:ec:
e1:eb:98:f7:2a:e5:df:e4:0a:a2:ef:af:2e:7f:be:d9:15:74:
cd:b9:40:92:db:79:49:b6:0b:42:9c:e3:38:ac:8c:7d:cf:c0:
55:3d:47:4d:41:69:0c:95:33:1d:af:50:2b:a0:6c:70:c4:54:
6f:c5:70:e7:99:85:bc:3d:31:2d:1d:e1:d1:60:70:e6:12:d9:
3b:ee:39:8d:8e:fc:e0:f5:88:91:5d:59:d9:59:87:85:d1:84:
95:ee:f1:b7:e4:54:ce:b8:d5:fe:78:9a:08:5a:63:f0:ae:60:
bd:7d:45:3f:61:f0:23:a1:bf:aa:2e:b2:d0:27:76:b6:09:e0:
55:cc:f8:eb:7d:c2:eb:3c:4c:d7:ab:0d:9c:f9:1a:67:5d:a4:
bb:0f:c5:b4:12:f9:20:28:95:00:ed:d2:04:78:21:a1:34:ff:
38:4b:c2:be:73:7b:16:6a:83:d5:e3:72:a5:d3:f4:4c:7a:70:
be:e9:77:ff:09:1e:92:9f:6b:58:4f:f9:5c:20:77:6a:41:74:
97:10:d7:b2:bc:29:0b:77:a8:0a:2c:47:e6:16:c1:b2:7a:7d:
3a:1b:99:42:5a:11:88:9e:a6:05:45:c9:35:48:94:de:1f:b6:
da:d7:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:39 2026 by rpki-client