This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File: EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier: RQFiRiMQEDQ+Cs0sH2INdyEARxstcZ2SA6BJib6UkXU=
Subject key identifier: 9B:9D:E5:E4:D5:C3:19:59:FC:04:0F:B8:82:1E:61:96:4F:43:EB:DB
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019C427DE13C78C6666BD2E608587D54AD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number: 1830
Signing time: Mon 09 Feb 2026 13:01:11 +0000
Manifest this update: Mon 09 Feb 2026 13:01:11 +0000
Manifest next update: Tue 10 Feb 2026 13:01:11 +0000
Files and hashes: 1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: ztyBf9jUs/jikvUDjUBXORKOpzPc4F2COwO6CMgt95I=)
3: J7GPCuP-10SpSyVCFlPlKa7j_TQ.roa (hash: C/Bmm1uex1v5gT0sTjxxNFMaiLu5ZTn+YiphEqVg8Ag=)
4: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
5: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:e1:3c:78:c6:66:6b:d2:e6:08:58:7d:54:ad:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Feb 9 13:01:11 2026 GMT
Not After : Feb 10 13:01:11 2026 GMT
Subject: CN=9b9de5e4d5c31959fc040fb8821e61964f43ebdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:aa:0c:79:f3:b9:f9:0b:b4:36:1e:8b:cc:
b9:d5:fa:54:94:c3:e2:0a:56:1d:0f:4b:db:70:9c:
43:7e:b5:1b:56:eb:ac:b2:e3:56:87:cb:07:0d:0e:
bd:19:c5:27:ad:ca:dd:3e:a1:3d:5d:80:e2:69:ab:
0c:5b:5d:bd:ce:e2:1c:ea:0f:a2:ab:e3:76:1c:91:
80:74:fe:cf:19:79:8a:1e:1b:2a:e3:41:14:58:3c:
0b:98:d0:57:d9:0f:c3:8c:a7:50:cb:b4:bb:c2:8b:
ef:9a:1a:ed:91:44:d7:f0:43:cd:51:6c:e0:34:14:
70:c6:05:21:33:b8:61:47:ed:2e:04:b1:d0:bd:f5:
90:dc:74:ad:a2:7c:92:e6:08:71:da:64:0a:5c:b8:
58:4b:a4:e5:6b:89:99:79:11:03:f3:6c:4e:57:61:
b7:03:cf:3d:a1:e6:a7:65:f3:df:c8:95:3b:da:b9:
77:2e:f6:78:b6:07:c4:26:87:6e:ee:71:23:64:12:
20:4f:30:07:ae:db:90:d2:55:0f:ee:a4:e1:40:c3:
6d:32:db:65:66:d1:27:c9:3c:53:21:c0:3a:ec:1b:
c9:69:e5:75:9c:6b:c7:45:dc:38:46:f9:2b:f0:a1:
2b:0a:1e:9a:fe:76:5b:a7:6d:47:5d:0e:89:4a:a7:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:E5:E4:D5:C3:19:59:FC:04:0F:B8:82:1E:61:96:4F:43:EB:DB
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:56:7d:54:05:fd:07:cd:4c:e7:26:42:3f:1b:e7:b7:d0:e0:
12:8b:33:f0:22:9e:c2:c6:0f:43:91:cc:5a:90:87:14:69:7e:
a6:5a:7b:34:c7:13:f3:b6:ab:b8:0d:1b:c1:54:8e:10:f5:09:
bc:56:9d:98:fd:6a:62:c2:f1:3b:79:fe:f8:47:0c:ad:df:9f:
9f:04:16:7b:1c:96:e5:08:d8:df:9f:81:f9:fd:0c:d2:4c:9f:
20:e2:02:88:e0:72:57:4e:1b:d8:b5:81:67:a8:97:e1:a9:1d:
47:d0:e9:59:fd:2a:a5:f5:f2:99:f2:93:d9:d4:e6:75:98:0c:
e2:b7:42:44:eb:10:31:4c:8b:fa:22:b9:61:12:10:f2:26:8f:
d3:66:6f:9c:22:d0:28:31:7e:9a:16:43:35:05:6a:8c:b4:b1:
66:0f:96:55:e2:a0:6a:81:96:45:78:e0:7e:68:9c:68:00:2d:
9a:5a:19:36:03:f1:aa:f6:22:c1:51:b0:c7:15:66:81:82:57:
d9:ce:a0:b2:da:f1:20:82:c2:86:21:d3:8d:66:cc:95:1e:ad:
06:e4:2b:ef:a7:9e:c9:aa:d0:22:b0:81:64:5d:21:88:4e:57:
9a:47:a2:5a:b7:1e:86:8f:1e:89:20:9f:53:ec:ed:d8:64:60:
6f:31:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:39 2026 by rpki-client