This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File: EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier: 3D6+yZS2W8cQZzDlpaumGgqFpMtvJ4AVAkHnqQITDVQ=
Subject key identifier: 96:2D:A0:A4:B8:8B:C6:D6:FB:EF:A3:10:5B:9B:C8:61:F8:34:59:75
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 019BF83F761225500623381ABC67726173E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number: 17ED
Signing time: Mon 26 Jan 2026 03:01:06 +0000
Manifest this update: Mon 26 Jan 2026 03:01:06 +0000
Manifest next update: Tue 27 Jan 2026 03:01:06 +0000
Files and hashes: 1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: TrYDmhRLi8bK1LtWPYZf2C9nKquoRE7XEmjBjjelpGQ=)
3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:76:12:25:50:06:23:38:1a:bc:67:72:61:73:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 26 03:01:06 2026 GMT
Not After : Jan 27 03:01:06 2026 GMT
Subject: CN=962da0a4b88bc6d6fbefa3105b9bc861f8345975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:b3:67:6c:40:1f:93:0a:fb:ef:d4:ad:fb:
4c:32:7a:ed:6c:56:fa:eb:7e:26:8a:ea:37:c6:a7:
c0:7b:9f:ae:45:f6:25:b7:5f:80:af:00:1f:5e:28:
ec:be:41:7c:b5:20:87:bd:0d:16:00:b0:9f:23:f2:
5e:ad:1a:66:a5:e8:85:73:81:f0:11:88:74:18:d2:
55:56:1b:01:fa:4a:f5:5f:c4:b6:da:fb:b3:1a:c4:
48:56:7d:ff:a9:1a:b2:1c:5c:a0:92:b3:dd:d2:0f:
54:24:c5:7c:a8:36:15:ed:58:3c:6f:39:43:33:3c:
d3:4d:34:e8:6b:7b:d7:42:f1:c6:ca:da:f8:be:2f:
d9:2b:92:50:48:cb:52:43:20:49:2e:7f:32:08:8a:
cd:43:08:f3:60:e2:38:9b:82:84:ae:bc:30:8c:ea:
25:22:fb:cf:91:bd:8d:d3:68:71:66:ec:14:87:5e:
7c:ec:26:7d:80:64:53:5e:3e:70:c6:aa:0b:0d:9c:
ff:72:9a:78:64:50:b4:77:e4:f7:4d:7e:c8:a0:ff:
c3:d4:87:d6:86:5a:0c:6d:bc:e3:15:ba:26:bb:73:
5e:be:00:6b:e1:8f:72:d1:4a:e0:cb:0a:4b:7f:f8:
81:6c:fb:c0:a5:fe:bf:49:26:1b:16:75:ac:89:13:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:A0:A4:B8:8B:C6:D6:FB:EF:A3:10:5B:9B:C8:61:F8:34:59:75
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4e:40:45:47:41:cb:88:87:51:fb:6e:e6:c9:1b:db:da:a8:
68:68:93:88:e7:14:97:a0:60:94:aa:9c:d4:8b:ab:e3:bc:50:
30:74:fe:b0:14:33:6c:0b:71:ce:9d:83:40:aa:8a:1e:be:ce:
4b:78:82:ee:fe:b9:30:e4:38:35:ec:10:b3:da:e2:85:5d:6f:
24:69:cb:80:40:8c:9f:cc:f0:e4:cd:97:81:3b:49:17:a6:ce:
e5:b3:81:5d:82:d0:97:63:56:6b:74:69:24:42:24:14:bd:5a:
cb:87:7e:2f:36:f0:ac:95:f9:7b:63:13:fa:be:d0:45:79:7c:
c6:36:5c:36:b8:01:8f:f6:78:39:e2:84:2a:33:cc:69:15:e7:
ce:92:34:57:6e:a3:bc:2c:bd:6c:91:21:15:3c:54:2a:b4:3b:
e7:f1:b6:01:a5:48:94:35:31:8e:85:6a:c4:90:fe:0d:42:0c:
79:b5:c0:0a:39:fe:36:b7:59:72:24:7c:8b:3e:5c:23:94:5b:
72:0d:c3:f2:82:14:d8:e1:2d:76:05:23:21:d4:83:f7:b6:98:
5d:ab:e6:fa:91:51:14:03:2a:cd:ba:b6:26:4e:b4:09:cd:6d:
6f:3b:56:b3:e0:73:57:41:4b:3e:f7:4e:cc:df:7d:17:51:35:
4f:e1:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:17 2026 by rpki-client