This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: 2Xr0VKtMZNT7tbA/hTnpj14nvHZhoPeM4q2Ydc8Prl0=
Subject key identifier: AC:41:95:86:3E:8D:4A:46:80:5B:82:9A:60:8F:6D:FB:68:94:75:E2
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 019C427CFF24201F3BC1F4C82B1F10E6A1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 14B7
Signing time: Mon 09 Feb 2026 13:00:13 +0000
Manifest this update: Mon 09 Feb 2026 13:00:13 +0000
Manifest next update: Tue 10 Feb 2026 13:00:13 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: UMJlDcuJBnXNQroD5gosetheVJO82PJLHaxBw3DsEiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7c:ff:24:20:1f:3b:c1:f4:c8:2b:1f:10:e6:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Feb 9 13:00:13 2026 GMT
Not After : Feb 10 13:00:13 2026 GMT
Subject: CN=ac4195863e8d4a46805b829a608f6dfb689475e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:c9:1e:25:6c:0a:99:5f:a0:18:63:32:d7:
14:e7:71:b6:de:e9:46:e9:b4:95:2f:9a:c2:1c:17:
6f:91:19:e8:f5:8f:2d:c5:bd:62:54:0a:91:c8:01:
41:a0:b3:2e:3b:a9:8a:05:e5:7a:c4:d7:25:da:c2:
7e:ca:7b:3e:e5:d7:75:2c:b9:4e:55:6b:56:31:0d:
28:17:b6:29:fc:9c:64:5b:f5:7d:19:b5:43:df:bd:
93:e6:51:28:cf:51:66:9c:a8:98:20:6a:6a:f4:c3:
ec:3f:e5:7f:41:7c:a2:ee:36:be:76:9e:ba:f3:62:
45:5d:25:08:a7:65:f9:7f:3b:88:4e:cc:79:09:35:
6f:01:a2:d3:84:f9:97:e7:73:ef:85:c0:30:ca:10:
81:8b:92:58:84:80:b1:17:49:67:95:88:eb:95:0f:
c4:fa:bd:46:e1:c1:1d:e2:6d:36:a3:7f:db:8f:39:
64:80:25:58:40:e8:a4:48:a7:75:fd:21:be:6e:71:
2b:87:9c:87:b8:a6:83:44:40:11:eb:0e:f1:c7:91:
2d:f9:83:94:e2:b6:4f:f3:3c:85:bd:77:78:48:68:
f3:1d:fe:04:65:fe:14:94:6b:64:18:34:79:57:66:
88:39:1b:d5:37:ea:fc:3d:fd:5e:00:8d:a2:af:b5:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:95:86:3E:8D:4A:46:80:5B:82:9A:60:8F:6D:FB:68:94:75:E2
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:90:5a:3b:20:97:2e:7c:17:dc:dc:34:10:51:aa:af:18:f6:
74:33:6a:58:2a:bc:ba:f2:79:26:8e:87:67:00:bb:b9:86:d0:
33:95:33:1b:0e:ff:f6:0c:78:c4:cf:88:ee:13:06:07:ea:05:
a7:c1:9f:2d:21:33:84:68:d7:3d:f4:76:f5:c1:65:df:e1:b4:
55:68:9e:da:50:55:56:8b:b7:f6:72:36:6b:9f:6c:da:f9:94:
81:98:0b:f1:31:44:6d:e6:b8:c0:7b:d8:ed:96:30:d6:11:9c:
b8:fc:e7:0b:c9:41:5e:e7:80:6b:41:5f:a0:9f:18:fc:a2:e3:
30:3e:89:fa:b9:2f:a6:6f:45:1a:55:c5:32:91:aa:15:4e:47:
5a:25:26:bb:88:43:f0:67:08:81:d3:82:55:35:aa:c9:37:5d:
65:1e:22:de:5f:22:cc:ae:7e:44:30:dd:e7:5f:a7:83:1e:69:
12:92:63:2e:e1:8d:64:af:d2:5c:49:63:a4:8a:cd:39:67:8b:
af:ab:8b:96:0b:83:bc:3c:24:55:a4:3a:24:f3:2f:7b:5e:40:
57:62:a3:06:12:0f:77:5c:17:04:e9:83:cc:c8:34:45:ae:ef:
a6:6a:20:3c:fb:5b:5f:18:7c:84:a7:a6:ef:cd:be:f0:20:af:
e5:87:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:25 2026 by rpki-client