This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: /Nk/bElbbVwd4dG/nBzsWjSZe1z0sAynNZA4FTOPWCE=
Subject key identifier: 33:64:4C:6D:D4:26:7F:18:99:AD:A2:EE:61:C6:DD:17:DA:01:16:AF
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019C42EB52938E341C8941A491C16E62C288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 14C0
Signing time: Mon 09 Feb 2026 15:00:44 +0000
Manifest this update: Mon 09 Feb 2026 15:00:44 +0000
Manifest next update: Tue 10 Feb 2026 15:00:44 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: 7dLWZtrZsTxhq9YTRQLxLO8bh1kNgHA9dsAkTb0rn3U=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:52:93:8e:34:1c:89:41:a4:91:c1:6e:62:c2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Feb 9 15:00:44 2026 GMT
Not After : Feb 10 15:00:44 2026 GMT
Subject: CN=33644c6dd4267f1899ada2ee61c6dd17da0116af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:01:3c:66:22:34:5d:a8:26:82:56:1c:13:1b:
0b:42:d0:0f:d0:4e:4b:a9:db:1b:fd:d3:a8:5f:01:
15:20:4f:bf:00:dc:07:c8:eb:1b:20:ff:73:3b:c0:
26:7b:fc:1b:c4:96:3d:12:25:69:dc:c4:da:12:16:
bc:01:99:a9:e9:e8:ac:7a:e8:ec:3f:aa:73:27:c3:
e4:78:78:0f:0d:e4:d1:83:93:c9:36:dc:9d:00:38:
d8:84:8c:26:02:ca:09:c4:8f:f8:52:a4:d4:8b:65:
96:94:07:f7:1f:1e:bc:10:c9:b7:5a:68:dd:7b:4f:
cd:15:78:a9:1b:53:16:38:5e:fd:d8:bb:25:f2:11:
5b:8a:da:ab:47:1a:1c:53:d1:3d:cb:3c:e9:4e:5f:
3a:95:e6:cb:17:2e:7c:68:12:e2:34:6b:a7:25:53:
64:35:36:9b:8d:b4:f3:49:38:d7:91:86:ea:ff:7b:
24:8c:c3:92:23:ce:4d:89:c3:ad:c7:d0:81:d0:d1:
90:0e:15:46:7f:51:d2:3a:77:df:fa:81:c7:f5:af:
a9:e4:62:7c:c0:14:eb:9a:d6:b7:91:64:c0:73:2b:
7f:9c:2d:0d:6a:ed:be:fd:a3:c2:83:68:5a:76:f5:
8d:9e:6d:67:19:1d:31:c9:8e:5e:32:6b:60:61:6f:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:4C:6D:D4:26:7F:18:99:AD:A2:EE:61:C6:DD:17:DA:01:16:AF
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:9d:48:c9:36:07:8d:ea:16:41:a6:85:03:76:65:a7:07:
5e:b2:6f:75:44:fe:78:45:5c:57:46:ec:4d:19:f0:4e:ea:a1:
26:c3:e2:8e:34:0e:80:7e:79:e6:c2:80:51:9a:03:8c:57:03:
b6:0f:0e:06:07:59:c9:3c:a2:dd:3b:74:44:72:80:62:1d:35:
d1:7b:d4:9d:37:fb:e2:63:f5:38:c2:29:89:65:fd:9d:ef:a5:
3b:c3:fe:3e:60:a8:07:b4:d6:77:e7:8f:9e:f4:4d:5c:87:32:
8b:88:c7:0d:6c:76:eb:8c:e5:74:2e:b7:28:0d:cd:e4:da:52:
26:71:3a:c0:89:d6:20:c3:bd:ee:a2:59:1a:ca:ec:70:6f:07:
3e:89:0d:c0:39:06:82:2b:a6:0e:e3:03:0d:0a:6c:30:a5:56:
5c:1f:08:e2:a6:e5:59:a7:c6:aa:70:c8:f9:35:85:33:06:cd:
fd:87:c9:17:a7:7f:1b:79:74:00:a4:64:ec:af:ca:4b:1f:c8:
9c:4d:16:53:c3:52:5f:69:e2:b6:46:de:5e:77:cf:58:d9:4b:
be:75:ef:e6:42:03:ab:8a:4f:c8:7d:0c:dc:3a:5f:dc:90:d7:
06:b5:ee:17:18:aa:09:f8:92:c6:d9:10:c8:8e:1e:e2:a2:6a:
a7:8d:e9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61KTjjQciUGkkcFuYsKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5
MmZjZTkwHhcNMjYwMjA5MTUwMDQ0WhcNMjYwMjEwMTUwMDQ0WjAzMTEwLwYDVQQD
EygzMzY0NGM2ZGQ0MjY3ZjE4OTlhZGEyZWU2MWM2ZGQxN2RhMDExNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AE8ZiI0XagmglYcExsLQtAP0E5L
qdsb/dOoXwEVIE+/ANwHyOsbIP9zO8Ame/wbxJY9EiVp3MTaEha8AZmp6eiseujs
P6pzJ8PkeHgPDeTRg5PJNtydADjYhIwmAsoJxI/4UqTUi2WWlAf3Hx68EMm3Wmjd
e0/NFXipG1MWOF792Lsl8hFbitqrRxocU9E9yzzpTl86lebLFy58aBLiNGunJVNk
NTabjbTzSTjXkYbq/3skjMOSI85NicOtx9CB0NGQDhVGf1HSOnff+oHH9a+p5GJ8
wBTrmta3kWTAcyt/nC0Nau2+/aPCg2hadvWNnm1nGR0xyY5eMmtgYW80JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNkTG3UJn8Yma2i7mHG3RfaARavMB8GA1UdIwQY
MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt
ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3
LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp6dSMk2
B43qFkGmhQN2ZacHXrJvdUT+eEVcV0bsTRnwTuqhJsPijjQOgH555sKAUZoDjFcD
tg8OBgdZyTyi3Tt0RHKAYh010XvUnTf74mP1OMIpiWX9ne+lO8P+PmCoB7TWd+eP
nvRNXIcyi4jHDWx264zldC63KA3N5NpSJnE6wInWIMO97qJZGsrscG8HPokNwDkG
giumDuMDDQpsMKVWXB8I4qblWafGqnDI+TWFMwbN/YfJF6d/G3l0AKRk7K/KSx/I
nE0WU8NSX2nitkbeXnfPWNlLvnXv5kIDq4pPyH0M3Dpf3JDXBrXuFxiqCfiSxtkQ
yI4e4qJqp43pfQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:53 2026 by rpki-client