This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json)
Hash identifier: aU5L8ay36RcpJGJy78leRAnbF0QndBUMVoqhW2gdoqA=
Subject key identifier: CE:20:17:10:8E:C2:83:DA:E7:28:1D:95:E2:2C:C7:0E:98:14:50:3E
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial: 019C43909B6895EFB43E92A1B67460CEF753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 18:01:16 +0000
Manifest this update: Mon 09 Feb 2026 18:01:16 +0000
Manifest next update: Tue 10 Feb 2026 18:01:16 +0000
Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: 6W+k04nIXfkhz0ojuCKS716HNbpEGbEgPlxqiWEYswo=)
2: hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa (hash: miQnkWv8mirrfM7hx7qM+NHg3ouKJ2L8VE2wiL5w/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:9b:68:95:ef:b4:3e:92:a1:b6:74:60:ce:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Validity
Not Before: Feb 9 18:01:16 2026 GMT
Not After : Feb 10 18:01:16 2026 GMT
Subject: CN=ce2017108ec283dae7281d95e22cc70e9814503e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:99:72:43:70:37:11:65:5b:87:42:54:3b:
55:07:a6:36:0e:08:3b:2c:d2:5c:5e:9e:ca:31:9d:
40:47:1e:05:44:b9:12:12:52:9c:18:48:58:52:20:
c2:a7:d3:3f:fb:b4:83:47:cb:ac:0a:c2:45:95:0e:
2e:80:89:2d:cc:40:f7:96:31:4f:dc:e1:11:0f:57:
3a:ef:d5:e3:53:3c:42:37:4a:3e:d6:40:c4:55:b0:
45:25:d3:0a:80:26:0f:00:c2:2f:bf:b0:4f:e6:0e:
f4:16:c3:1c:b0:1c:09:e8:9d:42:25:88:65:81:b7:
02:2b:54:8b:87:a3:fa:66:36:22:b7:4e:56:f1:92:
33:1e:a4:c3:3c:94:f4:d4:fe:3c:aa:6e:16:af:08:
2b:8a:2b:68:2d:87:e6:fc:34:53:31:86:75:bb:5e:
d3:7a:93:26:ee:b2:f4:59:5c:6e:0b:98:48:72:8f:
c6:04:e6:2c:eb:3f:37:d7:a4:ce:16:d5:f4:d6:ad:
18:ab:ac:4c:52:49:30:0e:e4:07:fc:ce:75:60:94:
52:a5:33:bd:bb:36:c9:ed:a8:36:f7:38:75:27:df:
9c:da:19:0a:e9:0e:83:bc:b7:05:c7:92:06:db:64:
3f:10:36:11:c1:24:fc:7a:b4:ef:73:39:8d:2d:ab:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:17:10:8E:C2:83:DA:E7:28:1D:95:E2:2C:C7:0E:98:14:50:3E
X509v3 Authority Key Identifier:
keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:2c:d6:74:bb:c4:92:62:d0:25:8a:8c:68:a4:dc:4b:68:
9b:52:e7:54:c1:47:29:65:be:94:bb:e4:14:34:d9:75:97:b9:
23:ed:bc:ed:35:05:98:a7:00:01:c7:2e:02:8f:e2:28:d8:d4:
aa:7f:47:10:dc:32:00:fa:aa:3b:e1:2f:f5:e3:c2:a5:77:26:
96:6d:53:3c:f5:92:78:6f:5e:a8:62:d9:84:5e:d2:4d:e3:49:
94:6b:a3:fa:de:38:91:a2:fb:f9:39:19:ef:09:82:75:69:98:
51:57:62:46:fe:6a:92:02:e4:e1:c3:db:25:5f:5f:b1:da:93:
03:5e:71:24:33:2c:b6:7a:8f:44:57:ba:79:5f:71:44:29:aa:
cb:31:46:9f:60:41:11:d5:6a:cd:68:aa:11:a0:fb:bb:6c:1b:
87:7d:b7:17:9c:ea:12:5d:9d:d3:53:24:4d:fd:e5:b5:a8:de:
48:4a:c3:ab:f7:b8:6f:7e:8d:94:af:d9:e7:40:29:40:58:8d:
96:96:bc:47:0e:0a:42:cf:66:54:4a:51:72:61:64:ca:b2:3e:
b4:22:5e:6d:a9:27:63:a1:7d:33:2c:83:65:9a:c0:50:59:0a:
2f:b4:ee:93:33:11:fc:60:49:69:d5:99:53:5a:0a:4d:04:cf:
b0:69:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:35 2026 by rpki-client