This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: uGn2n56Pd+KotftUDdM7QuCEBEPzZYqdTaJpuRIKvJQ=
Subject key identifier: 33:99:C4:49:8E:C9:2B:22:45:92:CE:3C:E4:CC:78:F8:02:7B:13:9A
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019C43221943A5EB4707A1754DD696968BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0D6B
Signing time: Mon 09 Feb 2026 16:00:33 +0000
Manifest this update: Mon 09 Feb 2026 16:00:33 +0000
Manifest next update: Tue 10 Feb 2026 16:00:33 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: 4Kl0FEybGDFDc5QjExvZ5nN5qaf6UNWBWGXwPj42dEg=)
2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:19:43:a5:eb:47:07:a1:75:4d:d6:96:96:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Feb 9 16:00:33 2026 GMT
Not After : Feb 10 16:00:33 2026 GMT
Subject: CN=3399c4498ec92b224592ce3ce4cc78f8027b139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:30:65:82:5e:c0:3e:a1:6e:c6:f8:7a:90:
03:df:34:99:2a:cb:56:49:a6:93:fd:17:8b:5d:ce:
f0:18:24:cb:3f:fc:7f:15:da:29:d5:4e:01:58:08:
3c:d6:e5:74:3d:c5:44:05:98:d5:69:f3:8c:ae:87:
6c:10:0d:24:0f:2c:ea:cd:d2:b7:80:1f:6a:08:15:
29:58:7e:32:3e:f7:a4:5d:8f:40:c2:9d:02:8e:68:
26:20:91:98:5d:e9:d6:1d:68:be:97:08:c2:9d:70:
4d:77:51:da:59:f6:34:d6:41:4d:11:23:eb:e6:18:
03:6d:3a:23:af:6e:d1:10:bd:f4:17:86:36:a9:ad:
11:e5:37:45:7f:82:3d:c6:6b:e5:9c:1f:bb:77:8b:
47:c9:5e:f0:b4:bd:cb:46:02:9f:6c:60:d4:8d:d5:
62:e2:18:c9:46:8c:54:fb:39:fd:10:8c:8e:a8:75:
9c:a4:9c:25:f9:0f:b3:88:1f:f6:79:e5:c1:44:0f:
55:8d:28:ab:b4:b6:4f:e0:bd:bd:6a:83:94:0f:d5:
99:8f:33:f6:27:4d:c4:fb:42:de:fe:be:d9:38:23:
65:da:21:96:f1:85:50:de:ae:75:ea:71:cd:5b:ff:
1f:a2:87:cb:e1:c2:aa:4f:1c:1c:85:49:19:e1:f3:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:C4:49:8E:C9:2B:22:45:92:CE:3C:E4:CC:78:F8:02:7B:13:9A
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:56:92:d7:7a:51:03:ee:48:bb:40:a7:33:d6:37:99:24:27:
d1:b5:9b:50:f9:e2:2c:8b:80:cf:17:06:4a:cd:6b:3d:ba:0e:
c2:b1:a4:d1:fa:62:57:c2:03:dd:e0:24:12:bb:80:33:3d:1b:
55:94:4f:a9:2c:95:f9:8e:41:5b:ac:cc:57:c5:e5:97:ee:99:
1c:16:f2:38:03:50:84:c8:e5:2b:93:1e:f2:97:ec:1a:1a:1d:
0c:79:53:f2:d7:9f:21:55:82:a1:d1:be:57:a5:20:b0:b9:d8:
a0:b9:7a:70:89:7d:76:54:5a:45:24:ca:5e:12:be:e8:dd:c8:
fe:23:58:ff:0f:34:94:b3:f3:ea:25:55:39:93:15:62:af:9d:
37:dc:1e:fa:7c:9c:aa:ac:07:0e:80:93:b6:98:08:56:d2:16:
88:ea:56:98:91:98:82:9b:8b:a4:51:90:1a:3e:1b:eb:5b:4b:
23:52:77:e5:1e:88:b2:24:24:31:9a:5b:17:26:9e:0f:d7:e6:
aa:30:ca:c9:5d:e1:28:2e:3a:9a:2b:17:3c:df:7c:e1:32:c5:
d7:1f:2e:fa:41:9b:65:f1:85:cc:5f:f6:a4:be:28:82:fc:d7:
16:c6:ce:fd:52:dd:a1:0c:a2:9d:dd:c4:09:5e:49:d3:c0:6a:
ba:02:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:08 2026 by rpki-client