This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: RJ4hEY7K/Vq7rsQXGqya/qSRlTOeT/lKkug2JUf5MqY=
Subject key identifier: 2A:47:76:2C:C2:7D:6F:04:60:DB:80:AB:C5:8F:E7:DF:DA:73:E5:CA
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 019C4322FD78AF3FC868694277F118F52027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 100D
Signing time: Mon 09 Feb 2026 16:01:32 +0000
Manifest this update: Mon 09 Feb 2026 16:01:32 +0000
Manifest next update: Tue 10 Feb 2026 16:01:32 +0000
Files and hashes: 1: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: JZkOrc60yIx4bItMEz6jK5pAzH0fEP6dr0KcsT2Ik3Q=)
2: oxAaTJm6w19ZYAezwM2Bse1zk-k.roa (hash: UmiPLqYirI4eFKMHzTXAkfjhckK4NXBAKqDlpgaTmlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:fd:78:af:3f:c8:68:69:42:77:f1:18:f5:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Feb 9 16:01:32 2026 GMT
Not After : Feb 10 16:01:32 2026 GMT
Subject: CN=2a47762cc27d6f0460db80abc58fe7dfda73e5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:3b:24:c6:34:16:07:2a:3f:62:6e:8b:58:
ec:d0:20:a3:15:29:08:d5:4f:78:f3:6f:c9:23:9d:
03:d8:9a:7a:31:50:08:b8:42:ea:54:d5:11:2c:58:
c8:5e:72:d2:92:e8:cd:2e:c2:3f:b5:05:4a:ac:3e:
9d:c7:fa:f0:6e:47:db:13:0c:7e:58:30:49:88:7b:
05:38:37:78:d3:66:3a:9f:c3:cb:61:5a:20:17:a3:
67:ca:79:71:b1:cd:e1:1f:38:aa:57:70:21:43:54:
2f:77:7a:d0:ff:cd:24:92:38:3a:f3:fc:66:a8:d8:
51:e5:3e:90:e6:f6:99:89:73:24:46:22:15:cc:8e:
4f:58:23:aa:6d:49:37:12:ea:98:bd:61:a0:15:5b:
bc:ed:87:aa:2c:ff:58:7d:0c:00:e6:84:34:c9:a4:
65:b5:90:f6:f6:24:6e:8b:36:a5:bc:9c:fa:d6:bb:
d9:cc:3b:0d:fe:f4:83:77:e5:4f:0b:9d:c4:30:c8:
45:48:ea:b7:36:b5:af:d6:73:d2:5d:c1:a4:ec:14:
7e:c8:04:cc:2b:14:fd:db:19:23:9a:03:99:bc:20:
46:85:ac:b8:bb:fa:bf:32:49:9c:9d:00:34:46:3e:
23:c7:d9:58:05:7a:52:37:93:46:fa:68:e2:ab:74:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:76:2C:C2:7D:6F:04:60:DB:80:AB:C5:8F:E7:DF:DA:73:E5:CA
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:12:c0:34:12:29:e7:f3:1b:22:ae:b2:b0:6c:dc:09:f7:40:
3b:af:f1:25:41:fe:f6:34:a5:5e:39:a2:14:c6:86:73:74:66:
0d:e1:bd:a9:1c:91:55:93:f4:b4:6c:31:43:66:d2:dc:e9:5f:
d2:1e:91:8b:ca:36:3c:46:b1:f3:56:fd:7d:fe:92:22:e8:b6:
62:c5:19:c8:86:fb:56:e3:f2:f5:df:e2:b3:2a:c2:d2:e1:de:
22:7a:58:65:5f:f6:9d:a7:89:1e:c1:e6:aa:9e:6f:3e:96:8d:
15:4a:ea:15:05:5d:c2:24:48:b6:67:0c:79:8c:9e:56:ea:32:
f6:1f:19:ea:a0:99:8e:f0:69:bc:67:87:ff:95:23:7b:a7:b8:
a6:12:7f:e3:0a:77:76:76:d4:35:3e:c4:15:a6:dc:72:7d:f7:
93:f8:13:ff:20:39:64:56:72:ce:cf:d8:52:37:0d:93:37:47:
42:1a:40:89:1b:02:82:c8:a3:e9:e6:b1:45:79:ce:ba:86:80:
96:5d:2d:d7:79:df:92:6e:22:ca:65:0c:8c:9f:2a:31:09:86:
d7:61:15:8b:f8:b3:c9:35:0f:b6:1f:07:d0:5f:24:f9:d8:d0:
57:58:94:b0:b1:5b:f0:82:6b:d1:5f:53:44:b7:03:ae:10:df:
63:e7:12:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIv14rz/IaGlCd/EY9SAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0
ZGNlYTMwHhcNMjYwMjA5MTYwMTMyWhcNMjYwMjEwMTYwMTMyWjAzMTEwLwYDVQQD
EygyYTQ3NzYyY2MyN2Q2ZjA0NjBkYjgwYWJjNThmZTdkZmRhNzNlNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgA7JMY0FgcqP2Jui1js0CCjFSkI
1U9482/JI50D2Jp6MVAIuELqVNURLFjIXnLSkujNLsI/tQVKrD6dx/rwbkfbEwx+
WDBJiHsFODd402Y6n8PLYVogF6Nnynlxsc3hHziqV3AhQ1Qvd3rQ/80kkjg68/xm
qNhR5T6Q5vaZiXMkRiIVzI5PWCOqbUk3EuqYvWGgFVu87YeqLP9YfQwA5oQ0yaRl
tZD29iRuizalvJz61rvZzDsN/vSDd+VPC53EMMhFSOq3NrWv1nPSXcGk7BR+yATM
KxT92xkjmgOZvCBGhay4u/q/MkmcnQA0Rj4jx9lYBXpSN5NG+mjiq3QjaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpHdizCfW8EYNuAq8WP59/ac+XKMB8GA1UdIwQY
MBaAFHrGI++/wSRxIWIkDLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3Zjgt
NDNhYTRjY2UzZjQ4LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4
LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxLANBIp
5/MbIq6ysGzcCfdAO6/xJUH+9jSlXjmiFMaGc3RmDeG9qRyRVZP0tGwxQ2bS3Olf
0h6Ri8o2PEax81b9ff6SIui2YsUZyIb7VuPy9d/isyrC0uHeInpYZV/2naeJHsHm
qp5vPpaNFUrqFQVdwiRItmcMeYyeVuoy9h8Z6qCZjvBpvGeH/5Uje6e4phJ/4wp3
dnbUNT7EFabccn33k/gT/yA5ZFZyzs/YUjcNkzdHQhpAiRsCgsij6eaxRXnOuoaA
ll0t13nfkm4iymUMjJ8qMQmG12EVi/izyTUPth8H0F8k+djQV1iUsLFb8IJr0V9T
RLcDrhDfY+cS3A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:12:56 2026 by rpki-client