This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: milCVlelZ3yKKaHWgB20uIPotReO5DfP5Yae3905Q+4=
Subject key identifier: AE:36:7E:58:4D:3E:CD:9F:8A:E3:57:86:3A:95:AE:AC:1B:C2:84:50
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 019C41A1806885ABD37A57BC7CEE02110F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 06D5
Signing time: Mon 09 Feb 2026 09:00:29 +0000
Manifest this update: Mon 09 Feb 2026 09:00:29 +0000
Manifest next update: Tue 10 Feb 2026 09:00:29 +0000
Files and hashes: 1: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: RbSJq96PcjyB9K0hl0wjm8zCwM2KUufYwaRQAZKu814=)
2: jjcLF7vH_6kvhdbuJiucTbxqBvg.roa (hash: 9CdEC+k58JtQfXt8cCMHjsV9l0T5+udg+CTuc06zGlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:80:68:85:ab:d3:7a:57:bc:7c:ee:02:11:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Feb 9 09:00:29 2026 GMT
Not After : Feb 10 09:00:29 2026 GMT
Subject: CN=ae367e584d3ecd9f8ae357863a95aeac1bc28450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:41:e6:e3:fe:fa:ac:0c:bf:b2:15:62:00:
8f:26:0b:9b:c4:26:03:a5:ef:f2:bc:b0:3e:3b:b8:
dd:c6:6e:62:84:1c:c9:b4:6e:79:9d:01:38:a5:37:
87:60:22:0d:41:6d:7a:00:ed:9e:8e:be:cc:bf:3f:
3b:42:e9:e3:a5:53:1f:35:8e:86:75:69:c5:9e:22:
34:6d:4e:7d:7c:a1:5d:08:32:b7:ad:0a:44:89:85:
e6:5c:cd:f1:78:8c:d7:cd:f7:67:9a:ce:50:2b:db:
33:22:25:8f:83:81:b2:33:c4:99:7d:76:26:bc:90:
00:59:32:82:32:92:3e:6c:58:36:6e:ba:d8:05:53:
16:b1:d2:53:8b:58:6e:90:01:b6:19:45:2c:b6:94:
3d:5f:5d:33:38:e7:1b:e7:08:d5:5f:be:6f:07:ca:
25:87:2e:c8:83:4d:0b:95:b7:66:b8:97:3a:2d:ec:
23:e6:fe:54:3e:e0:6c:9b:7d:b8:f1:51:6e:05:41:
28:7e:4c:e1:3d:06:14:2a:95:85:e6:6a:b7:55:2a:
a5:d8:ca:c5:c3:b6:06:f4:da:79:7c:83:6b:7d:15:
5d:92:c0:c3:ee:3c:75:ee:3d:66:67:0f:32:cd:76:
bb:40:3c:61:d1:bc:c1:1b:4f:bb:bf:72:38:ae:57:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:7E:58:4D:3E:CD:9F:8A:E3:57:86:3A:95:AE:AC:1B:C2:84:50
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:87:d3:8d:4a:4a:d8:f5:a0:89:20:c1:f8:79:61:b6:22:ba:
f7:be:71:79:d8:3e:39:85:25:7f:5c:c7:48:22:c2:a9:6b:eb:
df:d1:e8:03:5e:14:ab:53:b2:29:a9:23:fa:f6:cf:e8:cb:e5:
cf:cb:c4:33:db:8c:81:e7:4f:40:31:08:16:6f:fc:38:18:7a:
ed:17:08:44:f4:27:50:21:1e:15:e8:78:e8:e4:f6:a6:da:90:
83:16:e2:a8:e3:c5:4c:a5:0b:5a:23:f1:93:c4:66:00:f2:33:
3f:4e:65:c3:4a:71:87:62:2c:b7:ef:05:df:b1:7f:17:6f:bf:
1b:a2:d1:0f:a9:14:05:fe:95:83:95:38:18:e0:7c:9d:6a:bd:
e7:ec:e0:da:91:71:01:93:eb:ec:b8:ec:09:32:ca:82:ed:45:
d6:52:ab:03:c6:5e:77:73:cb:ee:92:97:37:d4:d3:e9:b4:8f:
99:e5:aa:c4:86:e5:fe:63:76:98:55:44:f1:05:78:93:55:99:
a1:61:49:b5:72:e7:7a:5e:d6:03:7d:e9:26:c0:39:0a:50:f8:
85:3e:23:55:fc:28:83:6c:a9:ed:2b:2c:8a:57:61:9b:c4:b3:
7d:f0:ec:a7:1b:04:0c:d8:cf:0e:bb:ec:8f:b3:7c:9a:88:7c:
05:c8:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:54 2026 by rpki-client