This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: mGxLrgexBUARRDw73pjSdCk7TJfALMDvjEh+KgfAoUM=
Subject key identifier: 32:18:47:43:E1:A1:FE:03:BA:68:FD:50:D1:47:4C:0B:B2:91:E1:5F
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019C42EB74CF2AECE23F5E08272A9FB47DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 07BB
Signing time: Mon 09 Feb 2026 15:00:52 +0000
Manifest this update: Mon 09 Feb 2026 15:00:52 +0000
Manifest next update: Tue 10 Feb 2026 15:00:52 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: AKGvB+EjAowQ2Ut/D2aLtDwpRFM+L5z9GCXjUu6WOZI=)
2: cvsVj4Nxvo824NrKadr7CqxaETo.roa (hash: 6GdZp9tVQFM/JG4iIzlhh+KgWjJbdYXxpM8R/v3gqEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:74:cf:2a:ec:e2:3f:5e:08:27:2a:9f:b4:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Feb 9 15:00:52 2026 GMT
Not After : Feb 10 15:00:52 2026 GMT
Subject: CN=32184743e1a1fe03ba68fd50d1474c0bb291e15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:cb:35:73:cb:e0:e2:2a:23:90:7a:e9:63:
af:89:7c:e0:b7:cb:c7:ab:3d:7a:a0:f7:32:d7:12:
ab:77:d3:72:db:50:a3:f2:35:15:af:67:4b:48:64:
e4:20:d7:b7:87:43:01:77:25:49:5b:b8:93:27:2e:
48:64:76:93:40:e0:c6:63:f9:0a:af:23:32:4a:ba:
b6:41:5e:29:1c:c9:f3:98:4a:c0:aa:cd:c2:f7:21:
54:fa:67:08:c2:d0:ea:aa:a1:51:02:9c:2f:18:e6:
4c:33:ed:a3:ca:da:dc:a4:b6:c4:07:d4:8c:da:df:
f9:da:2b:62:9f:bc:65:89:ff:bd:81:4f:af:84:d2:
2a:df:4e:69:49:d1:6c:a5:7d:5a:ea:27:38:2e:69:
70:76:0b:56:97:da:5b:f3:d0:18:d9:b3:12:65:73:
3b:8e:bf:f8:6a:a5:8d:14:f3:68:4d:e7:53:64:62:
a6:26:0c:a5:54:9a:3b:25:a5:c7:50:4c:6b:bd:17:
70:d3:26:89:b1:0e:d4:42:b4:45:3f:4c:57:fc:9b:
55:d7:d7:a4:0a:9d:bb:c2:f9:4c:51:a8:c1:e9:39:
ac:50:f3:65:94:4b:be:55:8b:14:b0:b7:e4:c1:11:
13:27:3c:73:55:78:3c:b6:91:c1:f9:6e:6d:49:e0:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:47:43:E1:A1:FE:03:BA:68:FD:50:D1:47:4C:0B:B2:91:E1:5F
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:33:07:e3:27:10:0b:9e:73:1f:03:a5:c7:83:5e:e1:01:22:
70:47:23:0b:fb:0d:5e:4f:51:6d:e9:9c:d7:97:6d:8b:80:8f:
f8:22:17:a3:47:d0:c8:5c:6c:0b:7d:58:8f:34:79:39:f0:e2:
d5:ea:8f:52:b3:30:02:8d:5f:08:f9:c9:61:ff:47:69:aa:56:
c9:18:6a:fd:e1:cc:28:d8:1a:1b:bb:28:bc:fe:ae:29:b7:de:
8b:d8:10:92:96:8a:40:b2:6a:22:d2:5e:e6:fc:ca:c7:c9:fa:
be:5b:ba:d2:31:05:0b:1c:26:47:8d:33:98:a2:23:7d:cb:a1:
6d:d5:24:1e:12:0b:28:43:9a:aa:da:95:17:64:c5:f7:ab:5f:
53:02:99:d2:8d:e4:d0:2d:cd:4f:f3:ec:67:f0:f2:2a:57:ea:
de:b0:3b:8a:79:62:ee:58:48:6b:5f:c7:90:c8:30:c0:38:5a:
38:35:84:2a:e4:04:fd:ca:f0:be:a7:8d:77:c5:dc:6b:54:21:
f9:80:67:1f:4b:a3:96:6c:02:fa:bf:46:a1:06:64:2b:d7:47:
cb:f2:3f:fa:9b:5b:2d:e6:38:da:e2:59:0f:d9:45:74:b1:3e:
dd:20:b6:d0:0a:57:49:6e:48:e1:18:7b:53:a8:53:83:cb:21:
2b:e7:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:23 2026 by rpki-client