This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: 0sIdM7G8+Lkog0ca98UPi0bKdz+7azFeQbKxiW7RiU4=
Subject key identifier: 98:B6:60:81:41:1C:77:B0:78:66:6A:44:FA:F3:97:3A:F8:2E:5A:34
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 019C41D8E05B0045117ED76914383E98705E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0D5C
Signing time: Mon 09 Feb 2026 10:00:58 +0000
Manifest this update: Mon 09 Feb 2026 10:00:58 +0000
Manifest next update: Tue 10 Feb 2026 10:00:58 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: Gqv1//DL4OIdLi7HvsPfUsq9OZiSrJ8BZ9MfCluYDfw=)
2: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (hash: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:e0:5b:00:45:11:7e:d7:69:14:38:3e:98:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: Feb 9 10:00:58 2026 GMT
Not After : Feb 10 10:00:58 2026 GMT
Subject: CN=98b66081411c77b078666a44faf3973af82e5a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:a8:2c:73:01:e4:16:2d:6a:22:53:b4:24:
9c:53:7c:90:c7:bd:f4:08:3d:40:4f:5d:cf:a4:4e:
4e:4e:61:cf:16:af:f4:cf:06:00:17:e7:0a:6c:3b:
25:d9:73:18:84:ae:24:0c:82:09:4e:32:c3:d5:ef:
6c:da:b9:30:98:22:d8:40:5d:50:8f:db:cd:97:3f:
c6:fb:5d:4d:51:12:f5:4a:39:29:f0:a5:33:a3:4e:
1c:7b:8a:8c:ef:b8:ec:a7:70:7b:fe:61:d2:dc:3b:
a9:8c:59:01:2f:27:75:39:f9:85:1b:8f:9a:5e:7f:
5f:7b:cc:53:11:4b:34:69:70:8b:4e:19:e1:b6:63:
e2:e2:b5:02:9a:03:0c:d0:4e:9b:e3:c1:e9:79:80:
d0:68:77:33:4f:7a:b1:ae:ff:4a:43:e0:be:4a:14:
d5:e5:57:bc:9f:39:9d:dc:88:4a:34:ef:dd:cd:18:
26:6b:c7:2d:03:10:7d:fe:1d:b5:47:86:48:45:72:
08:3f:c1:06:83:02:00:27:e3:1e:d7:26:fc:02:1a:
06:33:ef:40:65:5b:58:e0:65:f4:4d:60:2d:ce:a1:
b1:4c:2f:8b:6d:f3:fd:b7:76:ce:29:3e:7f:42:27:
f9:fd:20:f7:9f:d1:9b:b1:8c:95:b5:fa:b0:46:a6:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:60:81:41:1C:77:B0:78:66:6A:44:FA:F3:97:3A:F8:2E:5A:34
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:85:6c:1e:47:ba:e6:db:6e:2a:f2:47:aa:fc:19:13:f1:0b:
54:d4:69:1b:52:c9:1e:15:b0:b2:c6:bf:9b:e2:48:45:e0:48:
15:ea:80:63:40:c1:c2:b7:13:d9:6e:16:db:0a:ef:29:89:fb:
e5:1d:1a:6f:9f:ea:47:80:6e:3e:81:2c:9f:00:d0:54:da:ae:
9f:85:f3:e6:8f:06:6d:4a:57:de:a4:41:1e:2c:e2:19:56:c3:
37:ce:36:99:3f:bc:70:02:d4:fa:b0:c6:8d:00:7d:88:05:b6:
8b:4c:67:45:5c:68:6b:d1:24:e4:1d:6c:d4:86:6c:f4:a9:3b:
73:64:53:21:62:ae:f7:ab:00:29:eb:ef:83:bf:a9:c0:3d:cb:
28:5a:59:5c:c2:98:da:23:40:f4:4f:93:21:1d:a5:13:87:66:
7e:49:6f:62:ad:73:f2:52:b7:63:d8:66:8f:f4:f0:a5:2d:4d:
93:70:4a:de:7b:13:c4:5c:79:aa:44:b1:ee:cd:ff:19:fc:35:
df:6a:5b:1c:a9:e4:cf:7b:8a:52:b0:5b:67:63:c2:83:2f:c0:
4c:71:fd:89:6c:4b:93:b7:ac:89:0d:e2:60:e7:86:81:7a:3a:
f2:50:04:22:25:c4:03:ca:e7:5e:45:a4:f6:58:e2:9b:c1:4a:
c3:d3:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:52 2026 by rpki-client