This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: wBB1vzn5YyWSfavDnq8XCdksAIwChCPid60UY/aAxiU=
Subject key identifier: 1B:93:32:47:D4:85:3D:54:78:A7:C2:F6:DC:FD:E4:66:4C:BA:A2:76
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 019C43C6CAB7F1A02B4D78F6EAD1574A8879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 19:00:27 +0000
Manifest this update: Mon 09 Feb 2026 19:00:27 +0000
Manifest next update: Tue 10 Feb 2026 19:00:27 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: 5h7lW13G33IT6xQiV4Xf7qDTtQl0Ve8iBYEKSWFbk64=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:ca:b7:f1:a0:2b:4d:78:f6:ea:d1:57:4a:88:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Feb 9 19:00:27 2026 GMT
Not After : Feb 10 19:00:27 2026 GMT
Subject: CN=1b933247d4853d5478a7c2f6dcfde4664cbaa276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:a3:92:66:99:9a:fc:c5:f5:91:3c:fc:14:
cc:b9:5b:1d:09:cc:54:80:e9:58:e2:c8:68:b7:cf:
5d:84:e7:43:85:d7:dc:19:b7:c7:4d:2b:50:d2:bc:
0c:66:a5:d1:56:6b:ac:7c:a7:0c:65:37:6f:21:23:
24:95:19:14:33:a9:0b:ae:89:0e:4e:98:16:2e:59:
a9:95:94:c9:47:ef:18:a4:6a:78:22:be:db:84:a2:
a8:23:b8:f1:26:db:9b:c4:6a:2c:14:f0:55:08:f9:
59:70:6c:be:dd:44:91:fc:e1:12:9f:65:56:bc:88:
77:48:71:c3:5a:c9:97:a0:f1:b0:62:e2:bc:49:c0:
bc:c1:d9:6b:6a:88:30:17:fb:6f:e6:4a:c4:c6:b0:
54:65:90:c5:02:ba:0b:48:b9:d2:33:2f:a0:f7:81:
21:4e:26:db:72:ab:c8:fd:98:6d:3e:f9:77:dd:6d:
61:f5:61:93:13:6a:32:1a:8d:85:fc:54:fa:9f:6b:
73:dc:1a:f0:4f:3b:c8:05:8e:b5:8e:b3:e7:08:77:
0d:f3:9e:ef:e0:d0:71:2c:ea:29:e7:76:2f:0f:0e:
be:b9:bb:0d:19:46:3f:3c:18:cc:9d:f2:fc:f2:7a:
8d:4b:38:9e:e2:e8:49:28:19:86:31:7e:36:29:a4:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:93:32:47:D4:85:3D:54:78:A7:C2:F6:DC:FD:E4:66:4C:BA:A2:76
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:34:9c:54:bd:4b:d0:e8:2b:bf:5e:4f:1a:9c:05:cd:c1:
c9:60:ab:62:1a:2d:13:1e:70:64:e3:d9:a0:cc:78:8d:67:c5:
a8:93:76:52:73:41:82:09:13:fb:0e:a1:b6:77:d7:60:29:79:
ba:89:37:0b:fc:19:25:95:08:63:d6:8c:16:4c:04:2f:bd:de:
82:71:16:68:cc:f5:d3:d1:dc:b1:14:e3:5d:80:b0:f7:7b:b7:
f0:e6:bc:6a:52:67:ac:17:20:a4:c0:f4:26:b9:c1:df:31:83:
39:c6:0d:87:40:59:bb:54:73:1f:af:6e:d5:64:da:50:a6:bd:
fd:c4:3c:ec:41:78:ee:76:c7:7b:a6:f4:f6:b0:22:e6:d7:d7:
d9:1a:87:9d:94:2b:46:3c:79:63:c0:3c:95:40:4b:86:bb:88:
95:2c:f1:8a:2c:74:3a:60:00:9d:5f:96:b9:18:1c:f4:3f:b7:
bc:44:00:18:a8:58:87:c5:8d:35:c3:e5:5d:d4:98:28:90:b6:
69:cf:2f:57:02:e8:22:e5:ae:11:76:8f:b8:9f:87:06:3c:31:
df:f4:be:d2:06:61:87:22:ee:9d:3f:5b:51:5d:5e:0a:61:fe:
ae:f8:e4:e3:2c:4e:51:44:77:b5:25:4f:0a:e5:55:66:a7:94:
57:16:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:25 2026 by rpki-client