This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File: ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier: 3qpAM2Edz1O3D+cb5M3SvqXkHSOoWkK0uAfT/Ox0++8=
Subject key identifier: 9F:0E:80:92:6D:F3:D8:AF:86:AA:A0:A0:7A:AF:D9:1A:0A:91:07:B1
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 019BFA9C4C1E8E581C60AA2C53AF3FD05552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number: 073C
Signing time: Mon 26 Jan 2026 14:01:45 +0000
Manifest this update: Mon 26 Jan 2026 14:01:45 +0000
Manifest next update: Tue 27 Jan 2026 14:01:45 +0000
Files and hashes: 1: ArkmqC5cV4rKHjFzE81Ldao0sEs.roa (hash: hEg6+Nvrfwd2KymAJ5TeuyiIIA0Jz1wye1KL+ASCfyU=)
2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: IKv8bhMzQAF5gLbJcbXKAhgJs6FYvyQuWlFC3gl/z6U=)
3: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
4: QgtZQ0805OCM2cokT2qKD6cPctM.roa (hash: DavE4PxcjRUDAkMRKuUWGBvO9WpwG+932yjIkhXYMNA=)
5: ZhB3SHNyZsayrfOH0UW61vc7vmA.roa (hash: mWJxQJcBLaSuCYVydxxPxheALcOefDmmGX4VM1mnW5w=)
6: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:4c:1e:8e:58:1c:60:aa:2c:53:af:3f:d0:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Jan 26 14:01:45 2026 GMT
Not After : Jan 27 14:01:45 2026 GMT
Subject: CN=9f0e80926df3d8af86aaa0a07aafd91a0a9107b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:41:32:ba:46:cc:8d:21:68:31:d3:e7:58:
68:67:7a:9e:a2:dc:3e:e4:9c:7d:9e:98:1f:f2:5b:
c7:0c:7f:2a:8d:33:fe:07:9a:23:43:75:d1:d9:9a:
63:93:65:a2:9d:83:e3:ea:d7:ff:f9:51:1f:01:ea:
18:2a:88:14:a9:66:1f:e1:f1:e8:d3:5b:77:fa:39:
cf:38:c1:44:5c:1a:02:34:e9:a8:ed:42:aa:1c:d5:
f1:45:af:24:f0:07:9d:65:cf:84:43:7c:d9:67:6a:
0b:bf:94:68:11:25:84:78:2b:03:a8:48:91:65:0e:
ce:88:86:55:4f:c4:5e:c5:4e:a7:38:c7:7c:4a:33:
03:54:04:fc:5e:58:19:05:0f:89:b0:ff:2f:42:9b:
52:1b:1d:69:ab:30:83:b2:e6:b1:46:91:e9:ae:50:
4b:36:df:af:2d:46:c6:b9:07:5a:7b:38:60:f4:3c:
67:db:a9:7f:a5:29:2b:2e:fa:84:c6:41:4e:4c:f3:
ac:f9:ef:1b:cb:5d:ed:60:19:5b:ff:a9:eb:49:0d:
53:32:d7:6c:c1:91:1b:eb:63:33:ad:73:84:a7:40:
2b:61:0b:0e:99:f2:64:57:f4:7e:85:8a:9c:83:9c:
0d:05:85:1c:2d:79:fb:7d:9e:f1:2d:0d:45:04:21:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:80:92:6D:F3:D8:AF:86:AA:A0:A0:7A:AF:D9:1A:0A:91:07:B1
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5b:09:8e:18:7d:59:03:30:f0:03:96:e3:b1:a3:ed:31:2e:
03:fe:1a:d7:93:3f:7b:e1:b1:ca:73:51:8f:30:a5:ae:15:e7:
92:6c:f3:00:95:a5:cb:cc:ec:b2:ad:85:a2:96:c3:7e:de:e8:
00:bd:cf:b9:5f:55:d2:19:5b:10:df:0d:78:f1:8b:36:7c:f3:
e3:53:71:70:29:f4:c0:1b:7e:96:d3:55:7a:72:27:4b:9d:2c:
88:6b:d8:c8:c3:7f:8e:26:8a:d4:b0:05:1f:f8:e6:53:cc:cd:
3c:3e:c2:d3:fc:0e:bd:d5:df:b6:a1:63:7c:d4:41:05:6f:6d:
b6:45:0b:9a:85:e3:28:1a:e0:84:4c:0a:26:02:c9:e0:50:3f:
aa:12:18:06:4f:9d:86:96:fb:6c:bd:eb:d7:46:bd:c2:9a:5b:
be:29:ba:ec:2e:ac:ca:2c:b5:e8:33:4c:e9:88:7b:28:9d:bd:
e2:12:06:0a:47:ec:11:ec:99:f5:2d:80:f1:71:8a:de:8f:e7:
93:8a:18:ac:2e:1d:94:16:e8:8a:0d:19:f4:a7:32:2d:07:4f:
7e:da:54:06:31:e4:34:be:c6:83:c8:c5:ec:9c:01:f7:60:bb:
58:25:6e:a8:ec:f8:09:d5:38:32:98:29:c1:6f:04:f2:fe:31:
93:a0:a6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6nEwejlgcYKosU68/0FVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4
NDlkMTcwHhcNMjYwMTI2MTQwMTQ1WhcNMjYwMTI3MTQwMTQ1WjAzMTEwLwYDVQQD
Eyg5ZjBlODA5MjZkZjNkOGFmODZhYWEwYTA3YWFmZDkxYTBhOTEwN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZNBMrpGzI0haDHT51hoZ3qeotw+
5Jx9npgf8lvHDH8qjTP+B5ojQ3XR2Zpjk2WinYPj6tf/+VEfAeoYKogUqWYf4fHo
01t3+jnPOMFEXBoCNOmo7UKqHNXxRa8k8AedZc+EQ3zZZ2oLv5RoESWEeCsDqEiR
ZQ7OiIZVT8RexU6nOMd8SjMDVAT8XlgZBQ+JsP8vQptSGx1pqzCDsuaxRpHprlBL
Nt+vLUbGuQdaezhg9Dxn26l/pSkrLvqExkFOTPOs+e8by13tYBlb/6nrSQ1TMtds
wZEb62MzrXOEp0ArYQsOmfJkV/R+hYqcg5wNBYUcLXn7fZ7xLQ1FBCE/IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8OgJJt89ivhqqgoHqv2RoKkQexMB8GA1UdIwQY
MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt
OWRkOTk3ZWVmNGVmLzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm
LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVsJjhh9
WQMw8AOW47Gj7TEuA/4a15M/e+GxynNRjzClrhXnkmzzAJWly8zssq2FopbDft7o
AL3PuV9V0hlbEN8NePGLNnzz41NxcCn0wBt+ltNVenInS50siGvYyMN/jiaK1LAF
H/jmU8zNPD7C0/wOvdXftqFjfNRBBW9ttkULmoXjKBrghEwKJgLJ4FA/qhIYBk+d
hpb7bL3r10a9wppbvim67C6syiy16DNM6Yh7KJ294hIGCkfsEeyZ9S2A8XGK3o/n
k4oYrC4dlBboig0Z9KcyLQdPftpUBjHkNL7Gg8jF7JwB92C7WCVuqOz4CdU4Mpgp
wW8E8v4xk6CmLw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:11:13 2026 by rpki-client