This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier: gywSF4DvQG0Eu6o5wEFL23q3tHLFulM3ZOGNsghSF0w=
Subject key identifier: DF:84:7C:54:7D:05:B3:8C:6F:B6:92:D7:68:E8:8D:19:38:4B:2E:58
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial: 019C42B46E389AEEC99C4273AE0480B395D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number: 0CEF
Signing time: Mon 09 Feb 2026 14:00:46 +0000
Manifest this update: Mon 09 Feb 2026 14:00:46 +0000
Manifest next update: Tue 10 Feb 2026 14:00:46 +0000
Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: pIocuIVZ25IYKPbf/GOddLHGncyAUg6k7Ab8MQRs1xE=)
2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:6e:38:9a:ee:c9:9c:42:73:ae:04:80:b3:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Validity
Not Before: Feb 9 14:00:46 2026 GMT
Not After : Feb 10 14:00:46 2026 GMT
Subject: CN=df847c547d05b38c6fb692d768e88d19384b2e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:f2:f4:b7:a8:2e:2a:a4:39:8b:36:79:f4:
93:17:ac:39:ab:f0:6f:5e:24:4b:5d:f0:8b:b8:28:
c7:37:4d:b6:2f:13:a6:8d:e2:2a:05:db:d8:4f:39:
e3:b0:00:8d:26:91:b2:01:49:75:f6:e2:23:2e:bf:
57:d8:ee:55:ff:f7:9c:15:87:95:69:fb:15:d6:34:
45:95:37:a4:3c:c4:50:ba:57:d2:c0:49:7d:fe:60:
e4:15:62:c8:4a:fe:20:25:4f:35:18:60:e5:06:5f:
5b:be:a9:71:59:6e:9d:f3:55:10:b0:c3:e9:1a:8d:
28:b3:fa:e4:f4:3d:e7:67:a3:58:1c:f7:33:9e:f5:
74:1d:cf:6c:8a:14:3e:be:3b:07:1b:ce:15:c4:87:
54:c1:e5:89:ba:61:e8:05:e9:2b:95:f3:e2:b8:21:
74:6f:74:81:2f:51:82:6f:35:ea:e4:20:55:dd:d2:
56:cf:df:80:77:42:dd:91:a8:77:73:18:2d:be:15:
b9:00:29:5e:c0:02:13:21:ae:13:8e:44:75:3c:9f:
e2:e5:d3:41:27:f2:2f:f9:72:91:55:00:69:ba:c9:
70:2a:df:1d:c4:e3:bf:a2:84:8e:8c:2b:9d:18:2a:
36:98:92:9e:4c:d5:5e:03:00:b6:b4:9f:51:b8:e1:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:7C:54:7D:05:B3:8C:6F:B6:92:D7:68:E8:8D:19:38:4B:2E:58
X509v3 Authority Key Identifier:
keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0c:a0:1c:d0:19:77:19:80:ae:44:2a:fe:06:12:54:58:74:
b1:50:bd:7a:33:4f:19:98:7e:b0:b6:e8:fa:3e:3a:df:a7:1d:
c5:9a:ac:66:16:99:45:84:3f:7f:6b:9f:2e:d8:8c:66:a0:65:
d7:80:a2:af:be:9f:1c:3a:eb:dd:63:3e:5c:2a:3a:ff:0a:f2:
e6:c5:bb:cd:d1:d5:57:dc:80:b3:17:2b:6c:bd:46:ba:d7:b9:
b7:6b:cf:6c:8a:23:90:92:08:8c:c3:9c:51:96:a9:4d:50:13:
c5:49:0c:c4:9b:d3:3a:f7:48:68:25:ef:e7:63:72:20:35:dd:
56:c3:f2:e1:1c:67:bf:21:87:7f:10:62:5f:c6:b3:0c:87:e7:
b4:ea:ff:0f:39:31:2d:99:63:cf:d3:b7:5c:c2:13:08:b0:cc:
00:8c:a5:bc:bc:6c:70:41:c0:b6:a0:42:83:ad:9e:59:cc:36:
ac:92:8f:b6:be:0d:d8:43:3f:8d:bc:76:99:bc:a2:63:b4:fb:
c5:b2:59:b6:5e:2c:72:c6:ed:04:20:22:35:c2:99:2a:33:4c:
95:d1:41:77:43:5e:6d:74:c6:12:4f:e3:59:04:c5:11:2a:1e:
db:fb:02:80:5d:56:87:1a:a1:c4:f6:b8:70:f1:54:fc:0a:ed:
53:f3:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:25 2026 by rpki-client