This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: LyNxrNpiX+PiK8V1oIZsvCf05nCyljwserkdwwNBcww=
Subject key identifier: 85:49:83:0C:1E:8C:B2:AF:89:11:69:4A:66:96:3A:BD:11:FB:27:1A
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019C42EBA01FA3CD3C8310FC5C2EF500693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 15F9
Signing time: Mon 09 Feb 2026 15:01:04 +0000
Manifest this update: Mon 09 Feb 2026 15:01:04 +0000
Manifest next update: Tue 10 Feb 2026 15:01:04 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: JVhrjigDXD7NIWuthIWJBH+MngObfcS70kfhPodfRQg=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:a0:1f:a3:cd:3c:83:10:fc:5c:2e:f5:00:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Feb 9 15:01:04 2026 GMT
Not After : Feb 10 15:01:04 2026 GMT
Subject: CN=8549830c1e8cb2af8911694a66963abd11fb271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:dc:50:1f:80:42:2e:83:94:9c:5d:b5:65:
63:ca:71:bd:d9:51:19:61:4b:91:76:8e:f8:fa:a8:
e3:a4:e3:45:0d:02:e6:96:76:f9:44:9b:95:0e:9b:
db:35:24:c5:39:51:42:de:57:84:e0:a7:de:8e:13:
34:ba:b9:6d:be:e1:fb:7a:0a:ca:db:3a:f3:fc:f0:
37:0c:48:5b:f0:0e:2a:7f:56:04:61:61:17:6f:92:
80:e6:cd:fb:be:87:db:90:a4:74:6d:db:5d:f6:e0:
00:81:2a:f6:75:d5:37:2e:61:4b:38:f6:07:40:e7:
5c:5e:4c:92:37:e7:87:de:2a:45:2a:ef:67:05:b3:
79:38:04:b8:c8:f6:db:e0:0f:b6:62:2e:69:f6:9f:
98:10:1e:4c:5e:54:d6:f9:c5:61:26:2b:9f:7d:aa:
db:ae:9c:66:20:40:a5:98:11:68:ee:0f:ec:56:93:
66:2d:f1:d9:3a:d3:c9:3d:32:70:d0:af:cd:6e:60:
99:15:5e:4e:f4:5d:d4:82:eb:db:ed:cc:db:0d:bd:
90:a2:08:56:49:8a:6c:66:ac:c5:dc:f4:3c:c5:89:
6b:40:18:d4:67:fe:7d:21:26:f0:37:bf:83:c6:99:
cf:f2:31:2d:52:47:b3:7a:f6:5e:39:51:b2:6a:5c:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:83:0C:1E:8C:B2:AF:89:11:69:4A:66:96:3A:BD:11:FB:27:1A
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:79:ed:de:41:03:81:f6:bc:7b:58:61:b5:47:00:ae:c1:18:
3b:6e:81:df:fa:4f:97:a2:10:20:7a:ff:30:1a:a2:e9:45:b1:
68:29:54:49:05:67:5a:79:fc:71:7a:52:6f:c0:4b:c8:a3:db:
55:60:5b:d9:98:3c:ee:5e:f7:6e:d4:dc:63:cd:b8:8c:04:56:
19:4d:0e:85:27:0c:69:f2:6b:25:13:9f:79:0d:7f:8e:64:b5:
ab:4f:ee:81:89:8d:df:e3:ed:c5:e1:04:3c:03:58:24:cc:d4:
3e:13:7d:d0:3a:e2:82:74:aa:29:f8:1d:fd:fc:3e:5c:d2:7e:
29:e0:9c:b1:34:1a:47:cf:c9:d2:b7:9c:cb:78:52:98:eb:64:
82:af:3c:ff:dc:fb:ba:e4:2f:96:ab:19:1c:f6:74:43:28:8b:
91:cb:0e:fc:cc:e4:0f:ee:59:99:22:bc:3d:f0:59:66:cd:c5:
d9:2b:7a:07:70:68:e1:e1:6d:69:4c:95:7f:f4:d6:2b:b9:82:
4f:c5:b4:71:54:9a:a7:73:97:6a:94:ff:61:c7:a2:b0:41:a5:
d8:0f:79:bb:e1:6b:e0:58:ae:c9:af:4e:4b:82:1e:68:09:51:
0d:cf:16:50:ef:a3:b3:e3:8b:56:d3:f9:58:57:09:4e:1b:8a:
8e:5a:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:16 2026 by rpki-client