This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: vpXMfLYeBhIrY3ASmhK/P3YtdMQT2WPCMfv3QKIgid4=
Subject key identifier: 3A:26:70:1D:A7:CA:B9:45:FC:D8:62:DE:94:68:99:CA:DD:E3:07:14
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019C427D4271601ABD13CE61C9BA8A339E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0DCE
Signing time: Mon 09 Feb 2026 13:00:31 +0000
Manifest this update: Mon 09 Feb 2026 13:00:31 +0000
Manifest next update: Tue 10 Feb 2026 13:00:31 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: TKHHDt2/BDpdme+bjlruv+aMIT0FVdR8bSRSJJqImAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:42:71:60:1a:bd:13:ce:61:c9:ba:8a:33:9e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Feb 9 13:00:31 2026 GMT
Not After : Feb 10 13:00:31 2026 GMT
Subject: CN=3a26701da7cab945fcd862de946899cadde30714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:de:5d:e1:11:a9:e5:63:0c:75:6c:07:26:
6b:37:69:75:74:2e:b6:0c:b3:4f:6c:f1:e3:83:79:
fa:26:ef:cf:4f:3b:af:24:63:45:c9:5e:80:2d:27:
00:b5:97:83:96:fa:00:46:d8:c1:80:d5:d4:6e:f4:
9b:c3:f6:38:cb:1a:3b:38:ed:4d:46:4b:d8:2d:ae:
ab:04:2f:14:0b:ee:ff:ec:f1:14:ee:61:fc:06:75:
97:09:33:78:2a:2d:ad:89:fa:4a:f2:87:72:ca:75:
08:c6:f1:ee:60:d5:8a:a7:80:b0:58:9a:35:71:19:
33:7a:ba:a6:60:20:ad:27:00:38:86:f0:7c:10:f6:
d6:2a:21:09:4b:60:9f:f4:22:25:77:2a:ec:c2:b5:
c1:4f:5d:80:17:47:da:39:12:5c:fa:3d:b3:99:6e:
26:e3:0c:17:34:40:a8:7d:e8:0a:a2:73:41:bf:2e:
8b:61:bf:c1:45:34:02:0d:21:c8:e1:eb:e9:91:95:
55:35:4f:c3:bb:2b:7a:88:80:c8:fe:3b:cf:65:8b:
7e:28:7f:a7:7f:a1:3e:44:69:c7:6c:24:fc:52:e7:
73:6f:3b:15:c8:fe:dc:f6:10:f9:48:8b:da:a9:50:
07:fb:5c:67:f7:a2:f1:2c:e1:eb:6f:d2:c1:88:be:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:70:1D:A7:CA:B9:45:FC:D8:62:DE:94:68:99:CA:DD:E3:07:14
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:c7:70:bc:20:f5:0a:d0:b3:2c:eb:bd:c9:f1:07:e2:ad:
53:45:31:eb:0c:be:6c:5f:88:fe:9d:a5:84:3d:c4:db:c1:ba:
e8:cb:dc:8b:ec:af:8d:b4:b9:24:7a:14:1d:f3:b7:79:78:22:
9a:61:eb:c0:ea:5a:3d:90:d0:2d:c9:10:e7:f1:28:ff:7a:49:
5f:8e:8e:6d:58:7a:2d:56:82:a1:27:8f:f4:ab:c3:bd:be:29:
0a:c6:fd:78:01:09:d8:6d:26:7f:f4:d0:4d:4f:21:96:56:9a:
27:1d:15:53:11:31:da:bd:2f:33:db:99:e4:40:d8:e7:08:d1:
25:1c:81:d9:ca:67:b2:2a:6b:62:a4:9f:3c:05:83:4e:5f:8a:
4e:a8:bb:56:65:f5:5d:83:00:c5:02:c5:c6:40:c2:1e:42:0e:
af:af:68:b9:6d:98:17:8f:75:20:66:b2:0b:8d:fa:03:e7:ed:
a6:eb:74:33:85:24:ed:39:e8:7b:b0:c5:ea:8d:40:5a:80:f9:
62:d1:ce:d9:2f:a5:36:02:73:40:98:26:14:cf:a9:e3:15:48:
6f:3f:f7:1b:56:42:65:53:7c:2b:17:b4:f3:a7:28:1a:7e:c9:
a5:42:43:be:8f:ab:47:4b:f7:1c:6c:b9:f3:56:49:54:c9:17:
27:40:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:35 2026 by rpki-client