This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: LSHWtOon8GF5/g3QP5s8vOELcr165+OZuohu4/U+sqM=
Subject key identifier: AE:EC:C0:04:CB:DD:AA:A5:22:18:FD:4A:F0:25:43:0C:78:03:1B:FE
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019C44A25CBBEEB5E812DC8FDE5C321370B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 23:00:16 +0000
Manifest this update: Mon 09 Feb 2026 23:00:16 +0000
Manifest next update: Tue 10 Feb 2026 23:00:16 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: ZW4zYCeNXwLxyLeCmUwNCrx+/N2LremHOj+Xax6rmoU=)
2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:5c:bb:ee:b5:e8:12:dc:8f:de:5c:32:13:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Feb 9 23:00:16 2026 GMT
Not After : Feb 10 23:00:16 2026 GMT
Subject: CN=aeecc004cbddaaa52218fd4af025430c78031bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:e2:8f:91:13:0d:e1:0d:5e:83:c1:2d:f6:
f1:30:65:d2:30:50:62:1a:6a:e7:87:80:5a:64:83:
81:95:0a:1e:47:1d:da:f9:6e:93:1b:15:bd:99:99:
17:5a:1f:79:e5:98:dc:4a:76:69:85:b5:ec:4a:4e:
b1:34:d5:a2:66:7e:24:59:08:d6:cd:f8:23:62:87:
18:84:1b:aa:c5:52:6b:f1:8a:07:a2:ac:b5:f9:a1:
aa:dd:02:c5:af:a1:9e:9f:dd:75:26:cd:99:1a:e4:
72:3c:1c:bf:4d:67:d1:bb:7c:d4:17:59:07:4d:25:
cb:11:aa:f4:fc:9f:da:cf:8d:3c:de:da:13:68:16:
a9:61:23:36:11:b7:46:b2:3b:95:91:0e:ba:ad:10:
63:fe:05:fe:a0:8f:b1:c5:be:af:77:d1:5b:aa:da:
62:86:2c:46:67:42:f1:f4:ee:7a:8c:bf:5c:8a:8e:
38:a5:32:8e:ed:7f:50:b0:98:d8:8b:91:9d:2e:c2:
56:4b:6a:6b:49:06:67:86:0d:cd:21:9b:6a:64:b6:
a0:35:b9:33:f7:71:35:84:50:78:64:7c:8e:c9:7b:
57:16:10:aa:a3:26:ce:a3:a8:68:03:bf:72:bc:29:
56:60:7d:ca:ad:de:85:f2:d7:6a:c2:5d:56:9e:77:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:C0:04:CB:DD:AA:A5:22:18:FD:4A:F0:25:43:0C:78:03:1B:FE
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d1:7b:07:67:76:bf:09:a0:5c:98:53:62:6c:25:20:f2:c4:
fb:3e:d3:a5:37:11:72:ba:f0:57:8f:39:e9:12:cd:6e:8b:b9:
2c:63:ff:59:7d:bf:8b:c2:b0:6d:f7:0a:60:d6:3e:46:62:7b:
47:a4:84:63:5c:97:a0:b6:08:c3:8e:f1:d8:27:40:c7:45:93:
c5:4f:4e:33:54:5a:8d:72:45:c2:35:a1:1f:5f:38:69:11:49:
d8:a7:96:d7:62:e3:20:1b:f9:63:05:37:3a:9c:c0:8a:bc:69:
99:aa:ec:bc:ab:18:be:47:8c:a9:14:50:08:ab:50:fb:9d:3f:
1d:7a:4a:82:d9:76:43:53:4b:c6:69:a8:09:94:7a:8e:97:a4:
28:ed:8e:f2:dd:73:4c:d6:d5:48:81:a5:10:ba:58:60:0c:66:
fe:e5:c0:a0:a2:6c:44:fc:9a:b0:6a:c9:78:37:b5:0c:f9:85:
f6:70:f1:6a:00:d4:c9:98:1f:c7:9a:0c:84:67:b5:56:eb:11:
fb:5a:6d:55:06:1b:7c:33:73:4b:d0:15:a0:6c:f6:7d:95:72:
82:98:44:bc:04:be:4f:3d:d4:a8:15:ed:90:2c:83:7d:51:69:
36:f1:bb:f2:98:af:ed:b0:94:37:99:6f:c5:9b:c3:70:37:20:
b4:80:9d:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEoly77rXoEtyP3lwyE3C5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey
ODAzN2UwHhcNMjYwMjA5MjMwMDE2WhcNMjYwMjEwMjMwMDE2WjAzMTEwLwYDVQQD
EyhhZWVjYzAwNGNiZGRhYWE1MjIxOGZkNGFmMDI1NDMwYzc4MDMxYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GPij5ETDeENXoPBLfbxMGXSMFBi
Gmrnh4BaZIOBlQoeRx3a+W6TGxW9mZkXWh955ZjcSnZphbXsSk6xNNWiZn4kWQjW
zfgjYocYhBuqxVJr8YoHoqy1+aGq3QLFr6Gen911Js2ZGuRyPBy/TWfRu3zUF1kH
TSXLEar0/J/az4083toTaBapYSM2EbdGsjuVkQ66rRBj/gX+oI+xxb6vd9Fbqtpi
hixGZ0Lx9O56jL9cio44pTKO7X9QsJjYi5GdLsJWS2prSQZnhg3NIZtqZLagNbkz
93E1hFB4ZHyOyXtXFhCqoybOo6hoA79yvClWYH3Krd6F8tdqwl1Wnnfv2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7swATL3aqlIhj9SvAlQwx4Axv+MB8GA1UdIwQY
MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt
MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl
LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdF7B2d2
vwmgXJhTYmwlIPLE+z7TpTcRcrrwV4856RLNbou5LGP/WX2/i8KwbfcKYNY+RmJ7
R6SEY1yXoLYIw47x2CdAx0WTxU9OM1RajXJFwjWhH184aRFJ2KeW12LjIBv5YwU3
OpzAirxpmarsvKsYvkeMqRRQCKtQ+50/HXpKgtl2Q1NLxmmoCZR6jpekKO2O8t1z
TNbVSIGlELpYYAxm/uXAoKJsRPyasGrJeDe1DPmF9nDxagDUyZgfx5oMhGe1VusR
+1ptVQYbfDNzS9AVoGz2fZVygphEvAS+Tz3UqBXtkCyDfVFpNvG78piv7bCUN5lv
xZvDcDcgtICd1Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:07 2026 by rpki-client