This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File: eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier: OO7f9SbHO4S+D15U1Cb4WRhqpNylS3LLzhZSO4rjL7k=
Subject key identifier: BF:84:C5:8D:5D:38:AE:F8:27:EA:88:A2:13:71:53:F8:83:CF:AF:A1
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer: /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial: 019C427D8EFE913AE7A0114F44E854B5658E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number: 04F2
Signing time: Mon 09 Feb 2026 13:00:50 +0000
Manifest this update: Mon 09 Feb 2026 13:00:50 +0000
Manifest next update: Tue 10 Feb 2026 13:00:50 +0000
Files and hashes: 1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: Jk3dCA3c7+2NcLO9nO0QmAWiDn87R7kLgOE0T5xr/ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:8e:fe:91:3a:e7:a0:11:4f:44:e8:54:b5:65:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
Validity
Not Before: Feb 9 13:00:50 2026 GMT
Not After : Feb 10 13:00:50 2026 GMT
Subject: CN=bf84c58d5d38aef827ea88a2137153f883cfafa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:f5:69:cc:0c:d5:c1:62:41:c9:0e:7f:5c:
b0:2b:41:d8:e7:10:cb:09:0e:e7:e8:ae:35:1f:7e:
c1:8b:c1:9d:e2:88:25:f3:dd:62:a2:c8:53:e4:59:
ed:9e:bc:66:a4:00:9c:b6:e5:5b:a0:66:f7:c5:03:
a3:49:d0:9b:14:08:4e:3a:d6:cb:d6:18:50:09:b5:
ab:9f:e8:ad:2b:78:ff:2d:c5:3b:61:1f:05:b8:93:
eb:0a:39:3f:ff:0e:db:ea:33:33:89:a9:8d:c3:3e:
9d:55:b6:09:7e:ae:b2:5b:2c:ce:b1:d4:0d:5b:63:
a1:f9:bd:4b:e5:3d:01:6c:62:2a:03:3b:b8:77:23:
05:d1:de:60:a5:88:11:76:f4:52:55:da:48:ec:e4:
fb:46:40:d4:98:50:dd:7a:7b:bb:92:89:ae:b4:26:
ba:68:98:e7:19:84:e2:33:94:a5:54:d6:80:41:dd:
bb:df:92:d6:47:a0:ff:03:1d:30:a6:16:eb:71:34:
3d:5e:22:5f:8d:96:3f:36:ce:90:44:d2:16:c6:7f:
86:db:49:3b:03:72:7e:92:c1:0b:68:80:c7:00:78:
2e:e6:08:d2:ac:be:0f:4f:cc:ad:df:54:be:4b:2f:
56:b3:b7:d0:40:8a:55:a9:53:4b:58:b7:9e:2d:b5:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:C5:8D:5D:38:AE:F8:27:EA:88:A2:13:71:53:F8:83:CF:AF:A1
X509v3 Authority Key Identifier:
keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:61:cd:64:cc:70:16:2c:b1:9d:4f:84:03:7e:84:c8:1e:c8:
24:9b:53:46:40:b8:0c:54:35:c5:2b:9c:3c:12:8c:b1:e6:52:
3b:86:c7:ad:39:e1:24:6c:62:88:20:fe:a1:6c:a5:2d:4d:e1:
8a:ef:84:d6:05:a0:44:85:96:29:ea:ce:07:c8:a1:6b:80:a7:
2e:d4:71:45:1d:c7:75:43:cf:ce:23:13:7d:97:70:61:c4:40:
e3:d4:98:be:cf:b1:27:75:ac:80:50:29:4e:c4:b6:72:b4:c4:
90:59:93:83:37:b8:8c:be:4e:cd:d6:7c:0b:79:1b:ce:56:d1:
21:7c:f7:d9:f8:8f:e3:18:4b:9b:1f:62:47:61:2d:06:68:2b:
09:0c:28:f8:3e:f5:16:57:2e:cb:be:9e:26:09:ff:22:13:1a:
ca:b3:3b:e4:54:95:f3:54:ce:e9:37:0f:94:7b:dc:c4:31:57:
7e:7e:ef:12:83:0e:08:18:7d:9b:10:a7:62:8c:bb:e4:cd:c5:
8f:00:8e:2c:33:8d:42:10:97:94:08:d0:1f:24:c4:94:42:da:
45:57:50:9e:cd:04:8b:73:ac:c4:7d:74:a6:69:2c:c0:c6:bd:
e2:d8:1a:9d:4c:22:6f:84:81:4b:cb:23:7e:9e:fb:08:91:43:
6f:28:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:56 2026 by rpki-client