This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: q0vKurUlJYMB945VAq3/eBU0/DUMBu/CHE4+xb/2/Bs=
Subject key identifier: 33:79:32:DE:2B:59:9B:17:02:A3:12:24:97:4A:F8:B6:95:0E:15:E4
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019C4358DC708F3B7DB49B7D6A9E2BA8D100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 129C
Signing time: Mon 09 Feb 2026 17:00:22 +0000
Manifest this update: Mon 09 Feb 2026 17:00:22 +0000
Manifest next update: Tue 10 Feb 2026 17:00:22 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: lUyaSYUnmuB1PIaFinXoZYWOXLGfhzfCwlvCrLkb10M=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:dc:70:8f:3b:7d:b4:9b:7d:6a:9e:2b:a8:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Feb 9 17:00:22 2026 GMT
Not After : Feb 10 17:00:22 2026 GMT
Subject: CN=337932de2b599b1702a31224974af8b6950e15e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:40:31:d5:49:ab:f7:0a:e5:f7:3a:37:49:
22:4a:23:c5:2a:b0:80:66:2b:17:a2:22:75:70:13:
05:0e:1a:0c:7f:e0:8e:99:01:83:6c:b7:5d:1b:31:
47:c8:06:74:58:89:5f:fd:fc:62:a8:d1:a2:02:c2:
70:f5:0c:4d:d4:51:70:39:09:12:b0:f4:c7:6e:4e:
31:2c:da:36:7e:92:d2:73:14:48:a1:59:bf:2c:b4:
e0:b9:c0:da:f8:46:8b:b6:59:21:76:30:2f:23:89:
11:de:dd:90:0b:26:72:47:a9:29:22:23:f4:86:79:
60:5a:ec:89:da:fd:9c:73:2b:3c:fe:01:92:75:71:
9a:f5:31:04:6a:8e:44:8e:59:49:88:70:59:10:8a:
1d:17:cf:de:f2:04:c0:c2:80:6b:ec:8f:36:e0:44:
59:b8:6c:5a:55:fe:74:7d:a4:fc:59:83:c0:4b:70:
8e:69:bc:89:92:db:58:52:6a:9f:7c:ff:7f:5e:cb:
4b:33:e2:72:2e:28:85:35:dc:e3:3c:d9:26:c1:73:
f7:1c:8b:95:dd:e5:49:7e:56:ec:6e:d7:db:cf:99:
2b:c8:d0:10:2e:d7:13:d2:3b:01:16:f6:68:1f:a2:
90:b7:e1:52:bd:72:6c:7f:6f:e4:a7:77:8e:0d:7c:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:32:DE:2B:59:9B:17:02:A3:12:24:97:4A:F8:B6:95:0E:15:E4
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:5a:7a:02:c4:23:f9:78:50:7c:e9:53:5c:1c:80:7e:05:
9c:f0:2f:3a:5a:0f:4d:90:af:dc:6a:51:32:28:ef:1b:e9:89:
59:6d:35:b9:0d:7f:b4:b6:89:57:ea:e1:f2:5a:0e:b7:32:1f:
14:fe:b7:4f:c3:43:54:d2:15:f1:d5:c4:6a:df:a6:66:ad:d5:
a8:3a:91:51:df:42:69:bf:72:08:9b:c3:fa:08:94:d3:e1:5f:
b8:92:10:10:30:b1:93:59:7b:48:f5:2e:ea:35:7a:c2:c9:96:
23:e7:3a:a2:e9:61:b1:17:d8:84:6e:8c:f7:d3:18:53:da:2f:
9d:ab:96:91:15:64:73:f5:01:02:70:99:ed:a8:43:d9:0e:d6:
9a:57:5d:51:9d:0b:46:c0:71:24:17:b2:be:90:69:8b:7c:e7:
1b:50:9b:90:5a:88:94:af:99:ed:18:d9:51:5f:9a:b2:04:62:
c9:7a:54:26:90:12:0e:14:a5:0d:34:58:ac:93:96:87:e6:7b:
20:73:c1:85:32:af:82:e2:b8:76:71:6c:8b:b9:e1:e7:f0:65:
99:6a:4a:62:bb:95:ed:8f:67:ad:b5:b9:dc:05:42:ef:a6:0f:
01:b4:cc:c7:6a:db:9c:cd:b9:0f:d7:02:99:e6:95:6e:ad:49:
76:5e:32:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWNxwjzt9tJt9ap4rqNEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjYwMjA5MTcwMDIyWhcNMjYwMjEwMTcwMDIyWjAzMTEwLwYDVQQD
EygzMzc5MzJkZTJiNTk5YjE3MDJhMzEyMjQ5NzRhZjhiNjk1MGUxNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DNAMdVJq/cK5fc6N0kiSiPFKrCA
ZisXoiJ1cBMFDhoMf+COmQGDbLddGzFHyAZ0WIlf/fxiqNGiAsJw9QxN1FFwOQkS
sPTHbk4xLNo2fpLScxRIoVm/LLTgucDa+EaLtlkhdjAvI4kR3t2QCyZyR6kpIiP0
hnlgWuyJ2v2ccys8/gGSdXGa9TEEao5EjllJiHBZEIodF8/e8gTAwoBr7I824ERZ
uGxaVf50faT8WYPAS3COabyJkttYUmqffP9/XstLM+JyLiiFNdzjPNkmwXP3HIuV
3eVJflbsbtfbz5kryNAQLtcT0jsBFvZoH6KQt+FSvXJsf2/kp3eODXw3qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN5Mt4rWZsXAqMSJJdK+LaVDhXkMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmhaegLE
I/l4UHzpU1wcgH4FnPAvOloPTZCv3GpRMijvG+mJWW01uQ1/tLaJV+rh8loOtzIf
FP63T8NDVNIV8dXEat+mZq3VqDqRUd9Cab9yCJvD+giU0+FfuJIQEDCxk1l7SPUu
6jV6wsmWI+c6oulhsRfYhG6M99MYU9ovnauWkRVkc/UBAnCZ7ahD2Q7WmlddUZ0L
RsBxJBeyvpBpi3znG1CbkFqIlK+Z7RjZUV+asgRiyXpUJpASDhSlDTRYrJOWh+Z7
IHPBhTKvguK4dnFsi7nh5/BlmWpKYruV7Y9nrbW53AVC76YPAbTMx2rbnM25D9cC
meaVbq1Jdl4yZQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:08 2026 by rpki-client