This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier: F/W+nxDbU3oX6TdC3AIPw7Iv8tbf+K7VzFSdCE6xIKs=
Subject key identifier: 7A:D0:B8:9A:EC:74:6A:88:AC:B6:1E:31:57:9E:75:E9:06:12:B5:9C
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial: 019C427DA855F0492453D45AD3A27E514DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 13:00:57 +0000
Manifest this update: Mon 09 Feb 2026 13:00:57 +0000
Manifest next update: Tue 10 Feb 2026 13:00:57 +0000
Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: i3lApyPl0LILK5YYXwmqeyHCqsOWqjkH0myTBkK2EjY=)
2: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (hash: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:a8:55:f0:49:24:53:d4:5a:d3:a2:7e:51:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Validity
Not Before: Feb 9 13:00:57 2026 GMT
Not After : Feb 10 13:00:57 2026 GMT
Subject: CN=7ad0b89aec746a88acb61e31579e75e90612b59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:9c:e5:b9:40:d8:ea:4f:23:d1:0b:61:71:
3a:1e:16:52:b1:f7:f2:4b:4e:5f:51:f7:61:b8:e2:
f9:34:4e:0c:11:41:51:69:13:2a:0e:de:d9:5f:30:
56:14:91:be:d9:f2:07:22:e4:88:40:e9:ef:76:3c:
45:64:f0:c7:29:35:e2:d6:d3:d8:bd:7f:7b:0c:ab:
82:4b:a6:2b:db:32:de:78:a0:74:6d:83:f8:d6:17:
26:22:2a:62:20:40:1c:6a:6c:41:e1:cf:06:3d:b0:
ea:b0:fe:7c:f1:b1:d7:82:45:09:11:4c:f1:41:85:
8f:f9:9e:fd:09:97:c4:50:10:63:ae:1d:85:9b:22:
06:5d:5a:2e:ea:fd:f7:56:a1:fb:b6:12:3d:37:14:
fa:71:bd:12:c4:90:db:58:47:23:b9:f9:c6:61:0c:
f4:b9:74:99:8f:42:46:29:fa:a8:20:a8:83:19:b1:
97:2b:58:c8:2c:3b:23:43:d7:25:dc:a3:02:65:35:
af:21:48:99:d8:9c:50:50:c7:69:e3:e5:b6:b7:e6:
d4:06:71:a2:f8:e7:fb:65:0b:09:00:77:14:5a:a3:
fb:4d:b9:62:01:d6:27:af:d4:2a:07:78:24:be:18:
55:40:ab:4a:98:0d:6f:66:5f:40:12:b9:7c:1e:c3:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:B8:9A:EC:74:6A:88:AC:B6:1E:31:57:9E:75:E9:06:12:B5:9C
X509v3 Authority Key Identifier:
keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:05:73:86:45:c1:d1:cc:57:fa:1d:f7:08:3d:01:af:3c:
11:b6:54:c7:93:92:40:b1:80:6f:41:a1:15:b4:c7:d7:2f:60:
1d:0a:8b:e5:28:b9:7d:04:01:ff:35:cf:76:53:54:f9:49:4c:
d7:ef:0d:ed:23:ac:ae:d2:ff:b5:d6:26:42:61:22:07:c2:f1:
de:7a:7d:25:25:e4:50:51:73:42:1d:0c:43:9d:df:91:a5:f8:
c8:d7:fd:d4:64:a0:4b:96:d2:c5:4e:92:c6:45:51:8f:e0:84:
ce:3e:1f:30:1a:a9:a7:b6:a2:64:39:6b:14:fa:46:78:b1:dc:
ea:56:41:64:6c:1b:c4:bb:e8:1f:07:fb:52:38:1e:c8:6d:fa:
c5:57:f0:9a:01:b7:4c:b6:9e:21:1d:be:5e:1e:b0:2d:0f:65:
bf:83:eb:dc:54:35:ee:39:38:a9:90:ef:89:c7:56:15:86:cd:
80:88:f5:9b:b2:fe:20:9e:31:a4:86:49:82:bf:7e:13:be:c4:
e6:6d:b1:49:b4:e7:0a:9e:30:1a:67:3f:90:42:40:3d:6b:66:
38:30:5d:aa:f0:33:7e:90:1b:d4:85:79:42:fd:16:85:5e:a4:
58:e6:f5:a7:2c:e4:02:f4:79:50:42:33:5b:d8:7e:1a:32:f3:
9c:d5:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:10 2026 by rpki-client