This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: OKADkjy2wNpt6//HGv0RqLqB+Lw03KfwahS5zb9uoN8=
Subject key identifier: 18:26:EA:B9:C7:08:CE:0B:2F:D7:06:CA:EE:B5:81:5A:1B:12:60:0B
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019C41345DDC5D1AACA8A3A9263653E0E0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 14FB
Signing time: Mon 09 Feb 2026 07:01:16 +0000
Manifest this update: Mon 09 Feb 2026 07:01:16 +0000
Manifest next update: Tue 10 Feb 2026 07:01:16 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: EmcuYZpVfgGKN1G5POMVnCfOYKXAzRkT2f7TjDXUpng=)
2: KlixQVOZPwj2P7IsU6UK6TEAtrI.roa (hash: sDFOAzJVALs9ccbx12fQTxrUvz7R6MdVGJZt6nowTYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:5d:dc:5d:1a:ac:a8:a3:a9:26:36:53:e0:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Feb 9 07:01:16 2026 GMT
Not After : Feb 10 07:01:16 2026 GMT
Subject: CN=1826eab9c708ce0b2fd706caeeb5815a1b12600b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:3c:ad:6c:78:a6:5c:a0:14:c6:bb:35:07:
cb:9f:8d:0b:dd:90:d5:ef:11:0e:e3:f7:f6:14:da:
ad:7c:0d:d0:a7:ec:58:5c:12:75:80:bd:13:01:3c:
00:04:46:0e:b1:2b:1b:3c:2a:86:85:7b:56:fc:8f:
2a:ca:d2:27:67:34:c2:6f:a3:f7:31:03:1b:7c:4b:
ee:50:11:3d:38:da:bf:42:cc:66:c6:58:3f:e5:b4:
e7:33:86:7e:cf:83:e9:c8:4b:6f:84:40:de:ca:80:
b8:a1:30:c9:a0:30:df:58:d7:88:d8:05:bf:6e:c6:
4e:20:c4:de:f3:bb:af:e4:2d:0c:4a:ef:47:a2:f6:
35:b7:7d:18:5e:07:5c:1e:92:d6:21:ad:f6:45:a9:
8a:45:71:3a:06:9d:f7:e8:47:38:85:8a:0f:d1:17:
f5:c0:9c:4f:de:fc:7d:7c:fe:15:4a:b4:d7:97:34:
c2:61:ef:b5:36:45:20:4f:e7:08:cb:23:d3:35:8c:
4c:b5:55:55:e5:ae:6f:c2:7f:7f:5e:fc:17:94:7f:
3a:d0:eb:6e:03:75:cf:c0:4c:1b:ce:51:79:e0:b2:
c3:7f:e6:6c:e3:80:e2:dc:42:bc:4c:e9:21:7c:85:
d2:e4:52:b0:17:c2:90:dc:fc:6d:76:a6:22:bd:9a:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:EA:B9:C7:08:CE:0B:2F:D7:06:CA:EE:B5:81:5A:1B:12:60:0B
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:10:6c:e5:b1:f1:af:da:10:a0:8c:70:c0:a3:25:ab:0b:4b:
33:ba:8c:a7:68:a6:d9:64:7c:de:f6:1a:be:e9:ef:66:14:e4:
71:51:45:dc:42:c1:a4:30:bc:4b:ef:f6:79:e5:89:9e:b0:7b:
76:ce:ba:b2:b0:27:11:4d:da:b8:ff:68:fb:72:6b:dc:a9:f0:
a4:68:e0:ff:11:ae:16:cd:a2:fc:d0:02:30:28:97:2d:8b:b9:
b9:72:0e:3e:d3:d9:1d:5c:50:9d:10:00:8b:76:85:a8:b7:c1:
bb:5f:ff:3d:83:85:45:08:1f:41:dd:aa:e8:e6:aa:95:81:e4:
08:41:aa:81:95:db:5c:cc:94:53:9a:f3:5a:0d:16:ef:7e:e6:
ac:b6:08:d7:b9:79:24:2b:b4:3b:57:0a:c0:42:80:50:6f:00:
6e:e9:bf:66:a8:aa:a4:48:eb:e2:0f:b4:55:bb:f8:71:5a:29:
d2:56:41:95:cb:21:a2:05:dc:77:40:20:d6:eb:d1:dc:f1:48:
a8:3f:35:d4:fa:71:33:78:44:95:73:d6:3f:87:74:e0:48:28:
0d:3a:b0:4d:57:77:d6:3f:8a:02:4f:6c:d5:ab:e5:9a:95:62:
81:01:2c:fb:9d:38:1b:96:b0:1e:58:d3:11:11:45:9c:58:6d:
61:1e:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:40 2026 by rpki-client