This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier: 9cSsyBqDFsJ331h1ag0pvfo1Ivmd0ad+wjjixxZn87E=
Subject key identifier: A6:D3:8E:9A:55:79:5D:F0:1E:D6:B6:59:05:0A:E1:B7:72:6F:F1:30
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 019C42B48556F00AAAE0391012E2B99DEE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 14:00:52 +0000
Manifest this update: Mon 09 Feb 2026 14:00:52 +0000
Manifest next update: Tue 10 Feb 2026 14:00:52 +0000
Files and hashes: 1: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: 470yA68+V7v2zGUZjkx317oq3dZ/DQAtnt7yrvfLfRo=)
2: XlhDxzIhUvinzN4Wshw_Pb0yfKo.roa (hash: lG2+m8ftby0SMpU+m+8zptGeDfMbsZpbhzdVyHzX6eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:85:56:f0:0a:aa:e0:39:10:12:e2:b9:9d:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: Feb 9 14:00:52 2026 GMT
Not After : Feb 10 14:00:52 2026 GMT
Subject: CN=a6d38e9a55795df01ed6b659050ae1b7726ff130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:31:ae:c0:2b:3f:48:92:6f:53:76:bd:32:
6b:b0:5e:ad:a2:1b:8c:39:db:8b:5b:ff:7a:eb:cc:
10:c4:4f:0f:c7:ad:ac:01:b7:f9:85:e0:12:e7:32:
5b:7c:c0:a9:5d:5d:7e:27:fc:4a:85:41:34:eb:c5:
73:25:1a:7a:ef:52:16:10:d6:57:12:bb:8a:0b:c4:
88:f8:53:a5:f3:aa:9a:d3:dd:aa:a9:1a:63:7d:b8:
11:7d:8a:ff:7e:03:f2:ff:2c:d7:2e:05:d3:4f:d0:
b5:83:bf:d8:72:18:4f:a1:51:fb:29:94:da:7a:11:
48:43:6d:e8:a8:34:43:60:a0:7e:24:24:aa:00:6f:
3e:49:60:52:35:9e:e9:1c:6b:ad:dc:d2:cd:06:98:
9f:e0:3d:0c:f3:e0:da:5a:2d:19:5f:55:3f:df:d9:
fb:4f:19:97:b9:fc:34:6a:04:65:29:fc:40:fe:c4:
6e:99:5e:07:7f:82:d0:a1:7a:7e:a1:b3:81:d2:27:
74:f0:bc:36:3d:40:87:c0:15:a0:1f:25:34:4e:a6:
10:55:d8:4c:7e:10:2c:34:4f:21:2f:cd:36:33:4a:
f0:f1:35:ee:d9:01:63:5b:a6:d4:51:3f:dd:78:c8:
ff:2c:2f:0e:3f:8d:69:b3:de:8d:5e:40:a8:d1:a6:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:8E:9A:55:79:5D:F0:1E:D6:B6:59:05:0A:E1:B7:72:6F:F1:30
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:c8:2e:56:87:09:5d:92:21:4e:0e:ed:d2:1d:1a:f8:8f:
fc:f7:a8:7c:2d:03:dd:c0:1d:8c:c6:ef:06:5f:b6:38:54:3c:
80:65:b6:bf:73:be:4c:2d:ee:86:06:b6:b2:d0:f5:4e:b7:57:
d4:c9:e3:cb:14:cc:cf:c0:71:19:6f:fc:c3:46:b4:8b:22:14:
d4:0f:65:d1:1f:df:c2:b5:1c:f8:5e:00:ae:41:75:d4:67:3b:
19:48:26:79:00:ba:13:3d:37:dc:14:24:ac:d5:2b:5b:bb:39:
6d:74:04:71:90:98:9a:22:7e:b7:c9:22:97:3f:68:11:38:c9:
2b:dc:dd:78:47:6b:32:f7:f9:d6:e8:4a:94:b4:17:a2:ff:8b:
c5:89:c4:c6:55:85:2f:fa:d3:43:b9:cb:08:f8:d7:72:bb:f2:
3b:80:e7:7f:b3:20:4f:d1:ce:36:5a:93:86:8d:df:2b:13:e8:
61:80:f3:d1:10:65:32:4c:ed:72:a8:07:43:cb:74:7f:0d:00:
14:10:fa:df:92:82:c0:5e:e9:7d:b7:9f:16:ce:13:9a:9f:b0:
12:bb:29:79:a0:1a:9e:8f:13:81:04:db:4d:4c:8c:be:35:1a:
6f:b4:8c:a0:7b:d5:27:2b:39:13:f4:c2:d3:14:16:b1:6b:98:
bb:08:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:33 2026 by rpki-client