This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: zK74yLMi8b0idTp3YnjuD5H3wWEKhPjTXEaA1+8Xax8=
Subject key identifier: D0:47:EC:B8:9A:EC:17:7F:81:3D:05:3C:77:86:BA:AD:2E:E1:0A:0A
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019C43FDD4FE3856BDD707356EEE0688E094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 0792
Signing time: Mon 09 Feb 2026 20:00:34 +0000
Manifest this update: Mon 09 Feb 2026 20:00:34 +0000
Manifest next update: Tue 10 Feb 2026 20:00:34 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: CoxWyVmVodQMs8a8iKrl4CY732Ri+tpRcjn6jSu4/28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:d4:fe:38:56:bd:d7:07:35:6e:ee:06:88:e0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Feb 9 20:00:34 2026 GMT
Not After : Feb 10 20:00:34 2026 GMT
Subject: CN=d047ecb89aec177f813d053c7786baad2ee10a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:68:a7:bb:45:b3:38:b7:ee:4f:6e:a3:b3:
66:ee:57:4c:c3:8a:72:0f:4a:57:c6:7f:2e:41:ed:
75:61:d1:e5:b2:be:98:c9:99:6e:2e:e1:cb:b2:08:
5e:57:51:a9:33:4c:e8:8b:a2:ce:69:35:0b:96:84:
4e:4f:13:7e:26:02:4a:bc:10:03:be:81:1b:1d:73:
89:45:ed:d1:02:7f:23:ea:ad:f2:ab:4f:08:db:ab:
36:09:ca:a2:f3:18:e1:8e:0e:4f:63:cf:35:13:ba:
2d:67:b1:bc:03:a2:dd:a2:9b:9f:7a:39:cc:24:f1:
95:04:3b:8b:8b:73:85:aa:39:c7:02:f8:c0:6c:70:
9f:8b:01:39:96:98:7b:07:9b:7d:76:7a:de:e9:26:
5b:cd:f2:8a:f3:88:87:d3:e1:2b:10:25:6f:3f:53:
15:a1:08:62:05:1b:fc:84:53:d3:e6:48:37:f6:6b:
6b:aa:5b:fa:33:bc:95:ab:3c:a7:47:9e:a4:63:f6:
e9:1b:de:30:0b:6e:bf:f9:9e:f5:3c:24:c7:86:1d:
70:1f:4b:88:9b:e4:77:79:47:50:84:a2:5c:be:07:
d5:e7:04:ba:d4:12:56:9b:79:58:73:b0:54:41:b9:
76:d9:14:8d:9e:19:6f:02:de:b7:84:57:31:8a:b0:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:EC:B8:9A:EC:17:7F:81:3D:05:3C:77:86:BA:AD:2E:E1:0A:0A
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:36:af:ca:1d:1f:4c:d1:95:41:d9:c5:5e:61:99:a9:4b:
43:a7:b4:0e:ed:a7:61:45:60:ce:93:14:41:b8:83:2d:3a:66:
da:04:72:b0:96:e0:09:79:08:8e:e6:e3:0d:9c:fa:e2:89:88:
7b:12:a0:c9:db:f2:d5:1d:9a:ca:49:d0:4a:d4:b3:8b:10:bc:
19:96:51:5e:53:b9:0c:9a:63:c5:70:61:b4:3c:78:85:c6:0c:
f1:60:ca:c3:a8:66:83:23:85:32:93:ad:b3:8c:0a:74:d4:ee:
b4:9e:22:f7:55:0e:c1:91:3c:7d:3f:63:e3:4c:51:87:d7:61:
25:df:a4:22:40:d1:c4:a6:79:51:5a:03:53:ab:b9:01:76:16:
c6:9c:35:f9:1e:6e:3c:c1:ee:d0:22:da:5e:c3:0b:c8:a9:32:
40:89:23:58:b1:a0:60:f3:60:a7:6d:c2:f7:89:92:80:0e:73:
cb:30:b5:ce:22:3a:52:2e:70:e4:a6:4b:b1:c8:75:e2:f6:63:
78:30:1c:c0:b6:9d:42:c5:37:9a:9c:3f:15:34:d6:7c:89:85:
9e:45:fa:fa:29:07:fe:4a:fa:c3:5b:c0:7c:79:a9:62:1b:3e:
e5:d5:04:75:2c:eb:d4:3a:ce:67:ac:e3:93:89:3c:05:ad:8e:
60:1d:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:17 2026 by rpki-client