This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: QjrVtzHruoKO+qx+NiH75i5njmPvW5grlrP5/7+sjbQ=
Subject key identifier: 85:8B:C8:5F:47:4B:F3:D6:23:90:86:2D:FD:FF:0D:62:1E:C4:1B:8D
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 019C42B43E7F57042C9F44B71E1157636718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 0EF8
Signing time: Mon 09 Feb 2026 14:00:34 +0000
Manifest this update: Mon 09 Feb 2026 14:00:34 +0000
Manifest next update: Tue 10 Feb 2026 14:00:34 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: XHU5BBMfXcws+BPKP3rRefhUEPQ74MWy27SQg+23jH0=)
2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:3e:7f:57:04:2c:9f:44:b7:1e:11:57:63:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Feb 9 14:00:34 2026 GMT
Not After : Feb 10 14:00:34 2026 GMT
Subject: CN=858bc85f474bf3d62390862dfdff0d621ec41b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:2a:b4:c0:3f:a3:ac:a5:63:5a:01:82:44:
da:23:c6:e5:23:6e:13:79:7d:cf:61:09:9c:1b:96:
bc:2a:42:10:72:96:dd:85:2c:a4:42:80:3e:a9:1f:
55:34:10:ba:09:66:3c:ce:e0:1f:ae:61:0c:ef:5c:
a4:f5:c4:bf:4f:7d:ef:c1:5e:36:f3:b1:7b:86:e3:
31:a0:8a:84:a3:39:b1:f1:c1:86:13:41:3e:cb:19:
63:61:1f:58:e6:f5:62:00:62:e2:34:cc:4a:71:c2:
94:94:7a:cd:51:b4:dc:84:c8:af:ab:e8:a7:bf:d6:
ee:44:32:91:70:e6:d1:4e:87:68:94:4f:6b:b5:56:
b9:94:1f:be:a5:e9:31:2c:14:c2:fc:0f:5f:83:39:
96:50:63:21:7e:bc:4e:b9:60:a3:b1:eb:44:a7:4f:
33:e3:0c:6e:24:10:a0:89:f5:5c:9f:5d:ef:3f:c1:
da:e0:a8:63:52:0a:07:e4:60:56:63:68:cc:e6:36:
5b:78:b2:40:51:53:0f:f4:74:79:fb:fc:82:ad:df:
00:f8:a7:1b:75:6f:e6:cb:ce:11:f5:5e:01:58:86:
20:96:16:3a:1d:30:fe:77:a8:4c:aa:f9:c4:6d:2c:
c4:1f:d5:db:39:10:07:64:e1:5f:ea:83:6c:e5:66:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:C8:5F:47:4B:F3:D6:23:90:86:2D:FD:FF:0D:62:1E:C4:1B:8D
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:bc:87:23:9b:79:e6:58:e1:00:d1:6b:8e:7a:04:58:b9:
33:01:65:61:dd:57:d9:d5:04:89:0c:24:e4:c2:d3:e3:95:01:
35:7e:93:f2:c1:62:41:01:8a:ab:15:1a:22:83:76:05:be:4d:
d5:ca:19:69:c7:51:9b:e8:08:47:08:37:32:75:f1:bf:73:7e:
91:30:a4:73:28:ed:d4:7f:da:a6:92:01:96:5a:b1:e5:7b:8b:
42:02:fc:e7:48:fa:d2:7b:04:c1:29:7d:fd:a7:7e:da:95:31:
45:60:bd:05:9b:d0:ef:9a:7f:99:f3:c3:24:3a:72:e4:04:3e:
83:78:e1:4e:55:f3:80:a8:b2:1b:5e:de:90:92:e9:f2:e9:b0:
8c:03:13:ee:20:63:5e:6d:79:1d:d1:10:cc:f6:c4:8a:7c:9f:
33:c3:0f:ed:9b:bf:72:2f:99:64:0e:69:66:d6:19:4d:6a:58:
af:3e:8c:0c:72:95:44:7e:75:a8:c6:bd:db:b1:f0:01:65:e6:
bf:90:2b:6f:96:24:ec:f8:fc:55:60:f0:38:9d:16:86:5a:47:
0b:e7:6a:46:59:66:dc:09:7f:3a:9b:90:d5:44:b7:c3:8c:a1:
db:1f:2c:fc:09:92:ed:15:96:9a:47:c3:12:3b:95:44:c9:6d:
78:2e:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:36 2026 by rpki-client