This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: Ci9aLfs+rzugLE2YSuVup5t7kdOgdrNHNQ4xR5/Zpac=
Subject key identifier: 3C:A3:19:E6:23:F6:06:2C:A4:42:FD:BB:7A:21:05:ED:27:99:79:83
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 019C4246B7E18C820FD2745C601B30587CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 12:00:56 +0000
Manifest this update: Mon 09 Feb 2026 12:00:56 +0000
Manifest next update: Tue 10 Feb 2026 12:00:56 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: AQE32M9NpJFJ6oCibFXCNfvZIAdTMbJgCFPCM1n/1sA=)
2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:b7:e1:8c:82:0f:d2:74:5c:60:1b:30:58:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Feb 9 12:00:56 2026 GMT
Not After : Feb 10 12:00:56 2026 GMT
Subject: CN=3ca319e623f6062ca442fdbb7a2105ed27997983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:28:9c:18:f4:e8:37:19:cd:4e:e4:f2:aa:
8d:28:6d:b9:5b:ea:dd:af:99:da:89:c7:75:79:de:
ec:31:77:48:25:22:7c:86:6d:e0:d9:10:c1:d9:f3:
23:c5:5b:62:1f:64:3c:bb:40:f3:4e:8d:17:d8:6d:
ce:83:ca:20:e9:d5:d6:60:4a:fd:8d:05:2d:9c:8a:
77:7f:e0:69:53:e9:24:6d:a8:90:7a:07:78:e7:61:
e3:44:f6:22:60:9a:7e:39:5e:0d:fa:fe:97:c9:d0:
fa:96:bc:b1:f4:e2:44:e6:ed:84:da:7e:79:d6:6b:
05:5f:c8:69:70:27:fd:dc:53:a7:a3:a6:1a:bf:2f:
1e:f7:21:ec:c2:b4:40:94:13:af:0e:60:77:ab:59:
1b:a9:d4:78:73:02:63:6a:7e:9b:ac:df:07:eb:ad:
e1:3d:85:59:0d:9d:61:ae:59:58:5c:fd:9c:e8:68:
30:e4:51:d2:1b:8b:cf:98:7e:23:39:03:95:d2:75:
79:c1:4b:62:3f:5a:95:08:22:54:29:6b:a2:fc:16:
72:ab:7b:53:bf:87:85:c0:86:c8:a2:e1:19:16:7e:
bb:4d:86:16:bc:cd:2e:87:a9:6c:39:49:cc:08:cf:
df:e2:0c:23:5e:a2:ce:63:41:4b:20:94:4b:cd:60:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:19:E6:23:F6:06:2C:A4:42:FD:BB:7A:21:05:ED:27:99:79:83
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9f:94:d6:b7:22:d1:02:26:1a:c8:25:d5:d1:88:6d:f5:d8:
28:d5:d4:ed:0d:a4:4b:47:69:b8:d1:74:d6:70:db:c1:2a:8d:
24:ac:49:d5:a3:c1:3b:18:6a:33:e9:fa:b2:4e:d6:1b:f0:10:
53:76:ff:77:26:31:e6:01:d6:2e:01:1c:3e:ad:08:a1:e0:22:
7b:5b:dd:4d:25:be:25:3d:46:33:67:38:f2:74:7d:88:3a:ca:
b6:c1:4e:dd:e5:c8:04:4a:a0:bd:a0:68:3e:ee:c0:1f:58:83:
4d:79:fb:1d:92:a0:4d:88:c9:58:97:9d:a3:05:5a:ea:ae:22:
bf:62:f2:f4:ce:d6:da:8e:7d:bf:ec:c4:73:f7:48:77:7f:36:
d4:0e:69:25:4c:72:3e:99:56:fc:61:01:42:b9:52:d8:13:64:
55:57:78:ea:b0:d1:82:7b:36:59:1d:2e:5f:11:7e:83:41:5a:
b5:1b:4b:74:91:03:ae:d8:43:68:bd:41:56:cb:8a:e4:a3:9c:
6c:e8:68:a4:d0:d2:40:ad:ac:ee:cd:93:85:a6:20:87:4b:6a:
6b:1a:aa:6f:63:f7:64:2e:a6:5d:89:1e:a4:f1:9d:7e:84:60:
58:bf:b7:7f:b2:1f:7e:b9:a6:a8:a3:04:9a:bb:8e:f2:a3:40:
b5:17:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:32 2026 by rpki-client