This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: OQWNXCQSpxxi5DkWXKw1VoBQ5WbAJbPctChG8tA8eus=
Subject key identifier: DB:25:63:FC:4D:DC:5D:96:31:7E:EE:79:AE:55:C4:36:80:F6:93:B7
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 019C427DCAC47D3A4101CC8D9B856EB62662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 08A4
Signing time: Mon 09 Feb 2026 13:01:05 +0000
Manifest this update: Mon 09 Feb 2026 13:01:05 +0000
Manifest next update: Tue 10 Feb 2026 13:01:05 +0000
Files and hashes: 1: 1-CcdGpM9DcuLRpqwbiMu3odID9g.roa (hash: pKdfKPtLXW/w7Hq1cLOFELO9jRtinOQ6Uq5RI4M/bWQ=)
2: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: dnJzL3f4AyDZ7jUAaneNGWVdtBMiTplOv5SlwuBEUzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:ca:c4:7d:3a:41:01:cc:8d:9b:85:6e:b6:26:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Feb 9 13:01:05 2026 GMT
Not After : Feb 10 13:01:05 2026 GMT
Subject: CN=db2563fc4ddc5d96317eee79ae55c43680f693b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:ea:61:48:b4:9f:ad:d0:ca:c8:32:de:a8:
39:62:cd:4f:b8:45:b5:95:8f:c7:cf:46:fe:ca:f0:
54:ca:fa:98:9e:99:44:53:59:21:6c:f6:c1:b1:c7:
d4:8c:46:ab:fa:9e:0a:aa:1c:d7:11:ae:31:41:6b:
58:29:ad:fa:7c:29:8a:f2:ee:21:e6:71:88:f1:19:
70:e9:70:44:06:5a:90:a3:56:1c:51:d0:fb:b6:93:
61:be:4a:b0:f7:80:ee:1b:49:b1:be:5c:4e:f8:98:
a7:65:0f:e6:ac:26:ad:73:d0:86:be:7b:12:99:32:
f0:c4:4c:58:dd:c7:d1:39:22:1f:1f:2c:bc:9e:1c:
9f:a2:f6:f4:e0:b5:99:00:6d:5a:03:c8:43:a5:9d:
53:3b:14:a6:e4:4a:a9:32:8c:ed:66:c4:96:d0:c9:
65:85:b4:fc:e0:25:9e:4d:02:f5:a5:69:64:15:19:
54:90:eb:cd:8f:c5:c1:41:64:82:d3:5b:3f:d5:b0:
e8:c2:51:73:43:69:d9:d2:10:b0:12:39:9f:42:4c:
bd:b1:67:28:79:35:91:f4:d2:9d:1e:06:ff:75:29:
df:56:4e:92:da:0e:dc:ad:9e:2d:21:94:0e:04:7c:
a3:46:3b:ea:c3:4e:63:4b:f4:70:48:fa:bc:9f:50:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:63:FC:4D:DC:5D:96:31:7E:EE:79:AE:55:C4:36:80:F6:93:B7
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5a:86:5f:08:11:c0:b8:0d:86:f3:7c:92:14:e5:6d:4c:29:
a1:8b:6c:b1:5a:b4:71:0b:ee:eb:a0:60:38:71:07:b1:6c:40:
1c:d5:63:de:02:89:91:a8:5c:83:25:fc:39:a6:04:4f:07:c6:
10:40:c5:99:d5:f7:99:96:b6:93:3d:16:7f:9b:18:8b:85:ad:
0b:31:db:8a:0e:ae:f6:22:e7:1b:38:29:c5:5c:cc:17:18:31:
b2:ae:f3:48:b2:7e:b5:0a:3d:6b:97:e8:33:c0:d2:96:00:61:
5c:6f:bf:bf:27:4c:9d:b9:ed:f8:b5:a6:cc:30:11:1e:7d:58:
d3:61:ef:53:14:5e:41:64:23:7c:20:fe:ce:4c:12:28:ce:bc:
ae:59:5b:d5:41:bb:f2:86:b2:cb:cf:8b:90:60:6a:72:49:d5:
ec:a8:3d:97:37:2d:67:f4:5c:c6:88:19:1b:16:76:40:22:8d:
4c:f0:70:0a:87:ad:9e:9b:ad:f8:4f:8b:63:3b:12:53:46:4c:
4d:a0:cc:d6:23:ac:8f:51:29:9d:f2:db:f4:30:f9:83:09:38:
9e:e9:c5:84:62:20:5b:3d:14:ef:e0:91:93:d1:88:c9:85:b0:
cf:fe:2d:36:71:48:0f:d1:4c:0b:a6:e0:62:fa:10:c3:7b:03:
d8:6c:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:00 2026 by rpki-client