This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: FaE7wDENj3cNYdedQYGXtlm34OSjhmEhAwzy5DuEsg0=
Subject key identifier: E1:B5:FF:49:4C:94:AE:3D:15:39:66:B9:96:27:70:05:33:B5:EB:FB
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019C427DAEC08D50CDF67B7A557AB4A5A37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0E6B
Signing time: Mon 09 Feb 2026 13:00:58 +0000
Manifest this update: Mon 09 Feb 2026 13:00:58 +0000
Manifest next update: Tue 10 Feb 2026 13:00:58 +0000
Files and hashes: 1: BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa (hash: XPAzl9bkrz2kxf/zVv1dmu57yasth2+5TX42SAtg2YE=)
2: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: zwQaUq7pGurzEEWc5IRwG2s55Su52ZN/PA76rfFnyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:ae:c0:8d:50:cd:f6:7b:7a:55:7a:b4:a5:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Feb 9 13:00:58 2026 GMT
Not After : Feb 10 13:00:58 2026 GMT
Subject: CN=e1b5ff494c94ae3d153966b99627700533b5ebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:51:f2:56:ff:5a:12:6f:f8:8d:72:cc:75:
5a:c0:37:e8:75:0d:05:28:a0:64:4a:de:47:63:20:
e9:00:7d:73:ec:00:13:67:9e:0b:be:45:a1:3f:2a:
3c:2f:03:f5:91:01:30:0e:99:de:16:37:27:40:22:
39:ed:be:cd:d9:82:97:d8:43:24:94:8a:5f:3f:a4:
84:e1:39:3e:80:62:0c:58:9c:e3:1d:67:25:20:44:
69:11:7a:8f:96:8a:c3:25:74:6d:e5:d4:6a:05:58:
7a:78:61:b1:cb:41:c5:50:07:87:33:71:70:38:97:
cb:e6:82:98:fc:95:9b:20:9d:5e:bd:ee:fd:d6:b5:
e4:75:d3:ff:37:8d:45:60:c6:e7:ed:7d:bf:82:51:
92:fe:59:62:f0:c1:83:91:a3:ed:aa:69:69:18:fb:
dd:2a:95:0b:39:96:67:b6:6e:ca:08:a5:31:8e:8a:
28:49:cc:07:18:56:18:1c:49:93:67:c0:83:4a:30:
55:27:61:b0:3a:aa:07:25:98:e8:e8:5b:aa:7c:ba:
9d:cf:eb:be:b1:f6:a7:e6:bb:f8:b3:71:5b:c0:6e:
fb:a4:92:82:33:0a:e8:7d:ce:d0:6f:c5:76:f1:d6:
0c:c1:d8:86:74:dd:b1:3e:6a:c4:2f:54:95:85:cc:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:FF:49:4C:94:AE:3D:15:39:66:B9:96:27:70:05:33:B5:EB:FB
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:99:2e:4f:a2:4e:cc:5e:5b:28:44:a4:a0:77:e0:fc:3a:79:
01:57:3b:5d:29:79:96:14:ef:82:17:0c:1f:bc:14:00:12:c7:
8b:3b:d5:d5:86:e9:16:86:59:a1:5a:75:e1:cb:7c:4e:ab:6f:
90:47:30:90:9c:5c:d0:78:bc:81:26:64:4f:07:e9:46:b9:2c:
d8:dd:cd:fd:01:56:be:dc:e8:5b:0f:63:a2:b4:89:55:9d:84:
de:9d:91:bc:4f:9a:8e:23:a0:00:8f:b0:9b:39:be:3b:87:7f:
de:03:96:88:a3:8f:ba:75:96:00:9e:b2:3a:87:ce:ee:4a:00:
e6:ca:c3:8d:8f:6d:6e:b1:67:87:0c:dc:34:17:2c:89:7a:b5:
22:5a:e8:f7:79:60:2e:a2:88:70:1d:d6:0f:77:09:7d:71:16:
0d:88:d8:ca:c6:3d:89:93:13:3b:1d:71:2e:78:b1:57:e3:41:
c0:dc:a2:d9:4c:e8:52:73:3b:74:7d:c4:b2:c4:82:1e:0c:f8:
6d:a4:60:7a:07:29:f5:a0:91:14:29:22:b8:c3:4c:5c:0b:7b:
f8:16:43:10:3c:5b:d6:52:b5:ff:58:9a:b3:49:9c:4a:34:eb:
ae:bf:58:4e:53:4c:b9:00:98:ae:6b:6c:88:22:52:94:b2:e5:
61:f5:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:53 2026 by rpki-client