This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: Rikz3vgnn0h9h/FGb2VhHDDZSS4dQBPzLRzEFHfeLxA=
Subject key identifier: 58:29:A5:E5:AA:31:8B:00:10:8A:3C:73:5A:A3:83:1A:60:31:B1:AD
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019C420FFF96E0F7510B2A55DE2690F4B8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 1825
Signing time: Mon 09 Feb 2026 11:01:10 +0000
Manifest this update: Mon 09 Feb 2026 11:01:10 +0000
Manifest next update: Tue 10 Feb 2026 11:01:10 +0000
Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: j1PDt52Lc1VlC6Nf83lrSsvID44hzQ1MtTzCwJz+1gI=)
2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:ff:96:e0:f7:51:0b:2a:55:de:26:90:f4:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Feb 9 11:01:10 2026 GMT
Not After : Feb 10 11:01:10 2026 GMT
Subject: CN=5829a5e5aa318b00108a3c735aa3831a6031b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:32:dd:78:2b:98:26:03:01:1c:09:16:17:
e6:a8:cb:57:90:8c:76:5a:15:01:c7:95:5e:26:0d:
2c:51:da:8f:be:8e:fb:24:04:2c:e7:3a:eb:eb:95:
eb:e4:1b:34:9d:dd:5c:d2:06:7f:19:f0:5e:79:24:
86:d6:40:39:b2:f6:83:44:b5:1f:8b:4e:c1:b0:73:
82:54:d5:8e:71:c2:57:f5:f8:ae:2c:01:b9:b1:62:
3a:62:8b:fb:b8:ec:d4:52:9c:db:c4:50:18:af:50:
27:71:73:05:e7:94:78:19:f2:b2:47:e9:c2:55:79:
51:e0:90:f1:d8:f5:4d:1d:44:aa:4f:99:ac:88:51:
66:c0:27:55:6e:8c:77:e9:f8:fd:ef:f3:ea:53:0b:
13:79:26:ac:79:aa:49:77:d3:d9:d7:87:88:70:58:
d7:2b:13:b7:57:20:21:58:18:dc:54:ff:0d:2a:c8:
65:0b:19:91:3d:cb:21:91:be:f4:0b:f3:a8:47:04:
96:5a:08:24:da:e5:0c:2f:29:da:df:43:3a:9c:96:
6a:fc:8b:91:ff:74:8a:c0:5f:4f:76:69:b7:97:f7:
af:6e:d2:0b:65:81:d4:ca:42:80:b8:6e:b3:c4:67:
59:b5:95:cd:fb:68:69:be:45:c4:f6:d9:f1:c5:f4:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:A5:E5:AA:31:8B:00:10:8A:3C:73:5A:A3:83:1A:60:31:B1:AD
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:60:48:d2:67:fe:ce:a5:2b:42:f2:14:b8:f7:ee:0a:01:7e:
7e:da:ff:a1:59:44:4a:b8:d1:42:8c:ad:3d:2b:96:21:29:1c:
36:20:47:48:4f:58:14:56:8f:e7:47:28:a0:ae:87:3f:b8:02:
ae:bd:ff:10:5a:3d:a3:61:87:d5:a2:30:d7:53:96:bc:55:d8:
97:65:1c:0f:f3:2f:97:0d:be:54:90:0d:b8:cf:9d:42:9c:0e:
8d:27:c1:6d:56:0c:bd:8e:07:82:9a:2d:6c:94:5c:c3:4d:d2:
01:bd:35:f2:83:1d:90:4c:2f:69:9e:98:eb:34:04:f6:3a:d3:
a9:69:8e:15:a2:54:0e:65:7f:4f:60:a8:88:a1:c6:b5:f9:55:
68:e7:25:f1:32:81:e0:4b:58:fa:01:5a:87:3a:e3:de:5c:5c:
b2:a3:c0:86:c4:48:e6:1a:e2:2c:7d:7d:1f:95:d0:2f:2d:a9:
f3:90:6f:41:50:7c:af:87:12:06:45:21:ed:3d:e7:db:6c:4f:
98:28:f5:bd:a7:75:7d:9f:81:ea:98:bc:04:a5:f3:aa:2a:6b:
20:41:fa:2a:47:74:e3:9b:c7:a3:f1:ef:e5:12:d6:5f:cd:0b:
03:3c:ed:e5:0b:d5:0e:af:cb:19:88:db:c6:cd:61:b0:5d:13:
b4:6d:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:51 2026 by rpki-client