This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File: EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier: X4Nr6fSro7+Q29txS1BiHikSIdHPJYy1egPjrIjGbPk=
Subject key identifier: D3:5F:95:5C:E7:85:76:60:1D:88:F4:E2:3C:14:14:70:C6:D1:99:3C
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer: /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial: 019C438FC6AF56F3C57BA0E76375F0A203B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 18:00:21 +0000
Manifest this update: Mon 09 Feb 2026 18:00:21 +0000
Manifest next update: Tue 10 Feb 2026 18:00:21 +0000
Files and hashes: 1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: K8XFv1U8D5JrhQRO4FN49ikA0y7+BaXWAz7EEMHonVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:c6:af:56:f3:c5:7b:a0:e7:63:75:f0:a2:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Validity
Not Before: Feb 9 18:00:21 2026 GMT
Not After : Feb 10 18:00:21 2026 GMT
Subject: CN=d35f955ce78576601d88f4e23c141470c6d1993c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:95:07:6a:24:94:e2:a4:c4:a8:d6:e9:ef:
eb:43:5d:bc:6a:4b:2a:8e:87:02:d4:7a:25:e8:ff:
6b:13:b1:29:ab:87:b3:82:ac:94:d7:e0:a7:fb:c2:
be:b1:fa:ac:82:ea:fa:42:50:a2:98:47:3c:70:30:
eb:17:03:ae:d8:97:0b:be:50:07:98:64:c6:c6:0b:
71:44:7d:86:c3:32:53:5b:73:b2:75:db:74:50:e7:
fc:a5:eb:f7:58:b7:4f:66:45:44:d5:04:15:95:85:
7c:2a:4f:28:cc:40:34:2a:5d:23:97:68:4b:a6:05:
24:70:9b:13:f8:72:7e:af:c5:fd:71:79:bd:09:f1:
4d:94:ea:0b:b9:c6:51:d9:b6:ee:7f:40:9c:ad:7c:
64:4f:00:aa:9f:91:6b:bb:fa:42:1a:b8:6a:22:46:
ad:65:85:0e:0c:de:2e:ea:ba:ac:7b:f9:50:be:a7:
5c:52:a6:47:be:81:49:85:95:94:08:c4:2f:08:f2:
4a:7c:ac:0b:0d:3f:df:fe:89:ef:ed:b2:5b:1c:5e:
86:9e:0d:73:3c:ea:f8:5f:db:d1:cc:91:de:61:49:
b1:9c:97:59:9b:ee:6e:97:1b:18:a5:ca:1d:50:04:
3b:b3:07:02:6d:d7:cf:01:2c:7f:a9:59:55:53:12:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:95:5C:E7:85:76:60:1D:88:F4:E2:3C:14:14:70:C6:D1:99:3C
X509v3 Authority Key Identifier:
keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:8f:74:78:86:ff:18:35:0d:0f:8c:07:51:6c:8d:55:f0:
49:d7:f9:06:16:4a:24:4c:14:e8:4a:e5:f8:b3:39:00:75:97:
55:6c:cc:81:4c:8c:55:18:21:ba:25:1b:fc:cc:89:32:0c:a5:
1a:2e:dc:33:58:64:ef:ab:e3:1f:ea:73:af:aa:e7:04:30:2e:
f7:e8:cc:99:59:99:6a:22:d5:28:7f:96:41:e9:29:84:38:66:
c6:0d:fe:6d:8e:39:e1:11:39:0e:23:21:f3:65:58:ba:eb:a6:
0d:5d:06:3c:d4:0a:35:e9:3f:9e:3b:5e:7a:60:21:0c:85:d8:
c1:05:78:f3:a9:5a:5b:d4:64:0e:8d:85:4a:17:3e:89:ea:13:
e8:9b:95:cc:6a:82:ef:83:96:a2:73:e5:d3:b6:ef:68:ef:7b:
43:f7:2c:01:9a:1d:a5:e9:e4:ae:c1:69:b3:e7:56:4f:e4:67:
f6:a5:78:14:f5:e8:ee:0a:4f:cf:dd:b5:61:02:7e:3b:ae:4f:
8b:95:38:0c:30:ed:a9:6e:2f:53:41:c3:ef:cd:52:0a:4b:9f:
82:bf:37:7d:4e:8e:ea:7d:1b:08:9a:64:0c:9f:2a:dc:f1:e4:
32:fa:1f:06:08:51:a7:ec:21:2b:65:27:1b:7b:fc:92:25:68:
98:7f:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:01 2026 by rpki-client