This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File: E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier: pM4sF28qC1FsCH22aqjvu3/OpZ2DPwcjdexSVXtMeZc=
Subject key identifier: 31:D6:0B:D7:0B:1F:AF:A6:F7:64:47:16:FC:5A:3C:1D:9B:53:C9:6E
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 019B76DB6F8AA074EF86132B9E74F1FEB2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number: 17AC
Signing time: Thu 01 Jan 2026 00:00:50 +0000
Manifest this update: Thu 01 Jan 2026 00:00:50 +0000
Manifest next update: Fri 02 Jan 2026 00:00:50 +0000
Files and hashes: 1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: BCRXQdEhdb0rWH5Slr4a6h/ifUi2Su2NWHD6fbTN0A4=)
2: Oi8bBj7abbUUGWgLnipKRlAWhqg.roa (hash: uBPR6lVF7mLe6knRM5SQ0/u91d8nwbpqoLhQPG3UKIM=)
3: jbGvVuouVUGuodE3wSjw_6Kl_WQ.roa (hash: 0q3TS/imhDlO4EU7lxVd1fwILuDkXznK6ePE6/PQttU=)
4: vyq7frrOZ18P3bS0LsRzkLQVayM.roa (hash: ahnDTdH2Zi2KbYKjlRjjF3km1v/4SmSVHP2tW2n0dn0=)
5: xqgSeGIVEF82G1UQzaanBBXZ4j0.roa (hash: DA3L+prbTCIOti4LbG2Ch15XaVBtWVA8dw3jHgvPOJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Jan 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:db:6f:8a:a0:74:ef:86:13:2b:9e:74:f1:fe:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Jan 1 00:00:50 2026 GMT
Not After : Jan 2 00:00:50 2026 GMT
Subject: CN=31d60bd70b1fafa6f7644716fc5a3c1d9b53c96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:47:da:e9:d8:0f:aa:cc:66:7e:0a:35:0b:
47:d7:36:c3:9c:6b:2b:69:0e:86:48:2a:d7:8c:5d:
4d:6b:f2:6f:f5:02:54:0a:65:93:df:1e:b1:73:bd:
be:92:25:82:bf:d8:b1:f9:d8:89:46:d8:e1:66:7a:
01:d1:b5:34:48:85:38:0e:92:c0:f4:3b:bc:b0:aa:
6a:0d:cf:3d:4d:69:36:3a:6a:5d:aa:d6:4e:3a:13:
e2:47:30:1d:12:1d:0d:05:77:69:27:27:7c:b5:d0:
35:f3:f9:59:68:c3:7a:f2:a4:1e:0d:7b:a1:41:d4:
2b:97:8a:78:ea:f5:6b:f6:ba:d8:9a:8a:6f:1f:41:
42:f0:fc:55:9f:2b:09:4a:72:31:78:7f:09:7a:de:
2c:8e:13:84:4b:d7:30:fa:85:ff:6d:f2:ee:cf:11:
f4:ee:f5:3a:14:02:f2:3b:65:16:14:e4:5e:9a:aa:
c8:bc:14:a4:0a:6c:cb:06:9b:93:ec:1d:df:12:8e:
f7:8e:2c:70:26:b7:9e:b1:ca:7b:b5:85:06:e4:5f:
c9:45:6b:34:93:f5:41:87:b0:c9:11:1d:6a:da:9d:
fe:d6:c4:ca:91:2c:6e:f5:6e:7b:13:e9:3f:85:28:
3a:a6:3d:a4:96:08:b1:1a:86:34:5c:63:96:1e:56:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:0B:D7:0B:1F:AF:A6:F7:64:47:16:FC:5A:3C:1D:9B:53:C9:6E
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:ed:23:bb:2a:ce:5c:9e:67:4d:70:31:78:87:52:d0:55:
58:cf:40:60:9d:34:e5:88:53:df:63:43:7b:f7:af:0a:12:3a:
bb:89:5c:81:98:1e:af:ee:f7:b2:c1:0a:7b:6a:4e:c2:d2:7d:
6e:04:6c:84:f8:01:a6:e2:d9:38:ab:48:55:9d:fc:1b:ce:35:
78:2c:88:94:98:a9:7e:63:44:91:71:3f:aa:da:b3:d2:71:fc:
b1:e7:ce:15:e8:32:58:6c:8c:f6:f9:31:82:e5:b6:0a:30:e7:
06:09:01:df:52:12:bc:76:b0:03:c0:22:2d:3b:e7:e3:36:37:
80:06:06:a0:14:3c:b0:af:8a:7e:8c:f7:2d:42:cf:48:55:63:
af:f6:5a:77:58:f3:52:19:53:42:cf:4e:98:43:29:90:af:17:
36:63:ca:99:39:52:b9:92:13:be:92:a5:d6:c9:55:1b:11:83:
7b:38:ba:08:02:ba:19:af:29:aa:21:c5:e4:26:4f:b9:79:17:
ce:95:21:85:ca:a8:34:8a:96:3d:66:b2:29:a5:3e:59:fe:54:
17:f6:b5:0f:84:17:9d:39:d9:e6:13:04:78:59:f1:7c:c5:96:
11:ba:df:5e:c6:37:ca:47:72:e9:43:b3:dc:d7:99:f9:6a:00:
a7:77:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 08:40:41 2026 by rpki-client