This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: zwqHDnWMZlvbcPRYS3w+RiZ3B47wnK3trcqPdOYHVJA=
Subject key identifier: 7E:B3:8F:0D:54:B5:CB:3F:34:1C:82:9D:75:B0:27:82:F7:BA:94:FE
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019C42465A640AD17D4062BDB8D17A2DCB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 077E
Signing time: Mon 09 Feb 2026 12:00:32 +0000
Manifest this update: Mon 09 Feb 2026 12:00:32 +0000
Manifest next update: Tue 10 Feb 2026 12:00:32 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: 6JlDUUjj0v6yaiqgqwQzqrkVagH9ImME4ePVlQdfx38=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:5a:64:0a:d1:7d:40:62:bd:b8:d1:7a:2d:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Feb 9 12:00:32 2026 GMT
Not After : Feb 10 12:00:32 2026 GMT
Subject: CN=7eb38f0d54b5cb3f341c829d75b02782f7ba94fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:0d:75:99:e7:80:76:7e:67:ef:65:c8:2e:
89:ae:e1:d0:d7:f2:97:33:a6:f1:6c:23:1a:fb:be:
59:64:b6:0e:60:56:4b:91:54:ac:e6:58:19:ad:db:
ee:61:9b:cc:34:3a:bc:9f:d6:6d:2a:b0:81:2c:a3:
c5:42:20:50:5e:94:7f:11:05:51:85:4b:c4:54:e7:
7e:05:b6:5e:17:5e:1a:13:5e:81:85:05:a3:16:3d:
24:9d:19:0a:73:a2:52:02:e6:d9:f1:40:73:55:5a:
28:f6:dc:7f:d9:f6:c4:b6:d1:3a:76:b6:4d:6d:70:
78:80:0f:a2:60:e0:4e:fc:03:04:1f:e9:fa:da:c4:
c8:15:7c:26:91:bc:9a:c3:55:08:45:40:9a:21:22:
a9:be:cc:56:ec:47:e3:32:bf:a8:22:60:96:8f:91:
4a:5a:b1:4a:c0:73:85:e9:4a:a8:eb:5c:c2:43:16:
5d:94:38:96:02:e9:b8:39:e9:7b:ae:58:2d:da:10:
bf:94:54:41:b5:81:18:9e:8e:53:8c:c2:74:79:cf:
1f:79:32:15:9f:f7:f2:cb:14:29:c0:5b:e6:df:ad:
07:d7:35:7b:bc:a9:fb:de:01:e8:e6:5b:37:ca:5f:
f6:ea:69:89:bd:8b:6b:c4:3d:25:f4:2f:6f:ad:2b:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B3:8F:0D:54:B5:CB:3F:34:1C:82:9D:75:B0:27:82:F7:BA:94:FE
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f2:6f:79:78:6a:08:07:fe:ff:7d:65:cd:37:cb:fa:cd:95:
91:84:bb:37:ed:aa:2f:c3:17:d0:49:42:1c:a2:e7:03:e8:28:
68:6e:97:39:73:bf:66:6f:8e:b2:3b:25:cb:48:9c:4c:08:d4:
36:73:f3:37:73:ff:2b:77:f3:69:6d:0d:de:5e:14:ee:2f:26:
69:f7:0e:cc:7b:91:2b:8c:fc:bf:16:76:35:f6:00:35:e0:a2:
a1:33:3d:ff:09:4e:16:82:6c:d3:d8:a4:ae:56:75:b6:f6:3f:
6f:22:ff:df:cc:f6:b4:c9:85:a4:23:30:57:c1:f2:62:e9:59:
4f:66:ce:f4:94:20:51:60:3d:66:3b:8a:f4:16:0f:bb:ae:6b:
97:6f:4b:66:ee:71:37:a7:01:e4:60:d3:4d:b1:a0:3b:ae:6d:
c8:e2:dd:a9:7a:60:7a:cc:e0:e4:16:19:21:92:6d:81:ff:75:
60:f2:f8:52:89:93:b5:52:ef:08:5c:f4:d9:a5:d6:52:a7:f0:
52:b6:57:0a:f0:fd:c1:08:47:c5:a7:87:a4:e5:7e:12:5f:46:
86:26:a4:6a:82:df:de:b7:f6:02:32:35:08:85:c1:16:13:2b:
eb:4c:44:9e:2d:aa:bd:d9:5a:b6:9f:82:79:58:ef:d6:4d:81:
8b:8e:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:12 2026 by rpki-client