This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: 30LXZ4BV4i1QluiZAXWfZPc8r3+ThtHq6mc05ET8gVk=
Subject key identifier: 09:20:A6:5E:10:D7:2E:B2:20:2A:BA:A6:5B:62:F8:23:B1:F2:00:CB
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019C3E3270FCEB1EC00FD25FDA6C96527DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0EC7
Signing time: Sun 08 Feb 2026 17:00:18 +0000
Manifest this update: Sun 08 Feb 2026 17:00:18 +0000
Manifest next update: Mon 09 Feb 2026 17:00:18 +0000
Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
2: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
3: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
4: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
5: alg23em52u81qKf3TWMm9rQtp00.crl (hash: EeH8L3Un4YrI6idZx1nEntbMPto7UV5UPZe5YtQv0Xg=)
6: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
7: kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa (hash: bg1mLEhoNQt0f/1o3/ZGweSMPbQj7CpwZeH2NuHMIpw=)
8: o_YC-Jv8AASDzsSCCW50AzSTP5Y.roa (hash: A7gc2Z0AbWWUYELEKT6Vntch2aYN/I7m2iW5/JasCNI=)
9: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
10: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
11: ydHPynA-WZZzBfRpPoH9bBYJVFI.roa (hash: zUJBbBQ6fg/i/CM/EnQ7Y0w1oc/UoPQfcnnHrN+aTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Feb 2026 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3e:32:70:fc:eb:1e:c0:0f:d2:5f:da:6c:96:52:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 8 17:00:18 2026 GMT
Not After : Feb 9 17:00:18 2026 GMT
Subject: CN=0920a65e10d72eb2202abaa65b62f823b1f200cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:59:29:b6:bd:46:ed:67:81:f3:6a:46:8d:
66:3d:4e:88:ba:bc:1d:56:bc:2f:2e:45:f4:9d:b6:
d6:9d:65:48:7c:73:5c:d8:1c:09:8b:4d:4d:7e:32:
d8:17:60:88:50:22:da:66:eb:e7:d4:d4:d9:35:50:
d7:3a:b4:db:0c:f9:95:10:f1:1c:e2:3d:2a:d1:f1:
44:71:a3:0a:f4:65:fe:21:fc:ff:07:6e:1f:da:54:
fc:54:8c:d3:2d:71:05:70:bc:c1:2a:d2:46:9c:f6:
c7:4d:62:06:60:e4:2f:89:66:79:2a:ac:14:d0:2c:
7b:f2:b2:11:77:b1:16:cd:0b:bc:c4:38:07:81:82:
ca:15:72:24:64:93:26:97:7b:66:6a:e5:04:68:50:
2f:2e:e6:92:da:e1:69:85:40:59:9c:75:aa:c3:fa:
44:23:7e:98:12:e6:11:65:ee:e5:4d:b0:75:ba:e6:
ac:03:b4:86:9b:c7:b8:a7:1b:4d:20:25:6c:73:6b:
49:69:bf:78:71:da:aa:d7:86:ec:ea:ac:fb:1a:11:
55:d8:9b:47:0c:78:39:ac:e8:55:94:5c:06:c9:50:
86:44:a8:0b:97:9d:9d:7d:f0:3d:dc:de:1b:50:1d:
dd:6e:83:87:02:01:7c:aa:e8:d8:bd:c4:92:51:05:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:A6:5E:10:D7:2E:B2:20:2A:BA:A6:5B:62:F8:23:B1:F2:00:CB
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:cf:53:c7:cc:81:2f:27:e2:c5:8b:45:dd:a9:e1:e7:b0:
39:e8:9f:d8:04:ea:8c:88:f8:3a:0c:2b:c1:80:17:05:90:68:
f5:ce:14:10:c7:51:26:63:fc:91:c1:74:4e:91:7f:df:52:cd:
9a:0b:3b:4a:ee:7e:c8:3d:ef:ec:93:25:7d:6b:7f:8f:7e:0c:
45:30:3e:1c:5c:9a:31:0c:1d:d8:f1:98:68:ec:7a:c1:5b:d2:
80:8b:01:a8:08:63:79:e7:55:9e:fd:67:71:27:dc:09:c4:cf:
e5:48:78:c7:ab:4b:12:96:e7:89:97:0b:f7:f6:8d:ae:80:1c:
99:64:40:ab:13:15:2d:79:25:9c:d2:7a:dc:81:6c:a4:3c:d6:
d8:90:1a:84:d8:a5:0a:06:62:0a:90:48:d3:f3:c9:83:a6:ba:
ca:56:65:3b:1d:51:1d:56:5b:78:f8:e6:e9:d0:00:d7:6c:6d:
8d:b2:01:d5:1e:30:8a:39:c6:4a:23:bd:06:dc:15:e4:ab:58:
a3:5a:8e:a5:18:2c:b7:8e:ce:dc:24:10:f5:2a:ef:32:35:7e:
9d:7c:69:f1:ec:d1:a0:bc:42:e5:c7:40:e4:1b:d5:10:ee:a6:
b9:98:d5:fe:9b:af:6c:4d:a6:bf:c7:c5:bc:3d:5b:1e:50:19:
78:f9:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 21:38:49 2026 by rpki-client