This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File: EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier: 0sil5epWF7XXFcYGhzytVh32D54PCXNMXOOR+HXmhNM=
Subject key identifier: EA:E3:75:67:DC:A0:07:10:1A:59:E4:3E:4C:68:35:D0:86:28:AB:CD
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 019BFF54519CAB3750CCE3F87B5308526799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number: 17F2
Signing time: Tue 27 Jan 2026 12:01:14 +0000
Manifest this update: Tue 27 Jan 2026 12:01:14 +0000
Manifest next update: Wed 28 Jan 2026 12:01:14 +0000
Files and hashes: 1: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (hash: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784=)
2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: xHmRNEWGsmCF9atkAuyApjW2vCwQjZ00qjCWON1t8DM=)
3: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (hash: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU=)
4: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (hash: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo=)
5: plhSuqqJa0jwOYQK5HTONg70a4M.roa (hash: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco=)
6: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (hash: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:54:51:9c:ab:37:50:cc:e3:f8:7b:53:08:52:67:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Jan 27 12:01:14 2026 GMT
Not After : Jan 28 12:01:14 2026 GMT
Subject: CN=eae37567dca007101a59e43e4c6835d08628abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:94:13:16:f9:7b:91:db:f5:e7:61:cd:59:
94:00:72:bf:5e:21:1b:90:01:e0:55:12:13:09:1f:
8a:49:69:6d:bf:f9:71:08:f0:8f:b8:63:b4:32:dd:
47:62:09:2e:b3:a2:64:0c:3b:5f:75:33:2a:46:fc:
81:49:3f:c1:71:61:53:3b:d1:25:15:b4:c2:41:0e:
75:3e:a1:20:14:40:a4:d8:92:80:9b:d2:3c:c7:c9:
bd:ff:68:04:24:0b:7e:ad:95:c4:8e:f6:11:66:95:
d9:7c:fb:02:a2:1b:35:60:8c:19:87:61:db:0b:05:
ad:96:84:62:d4:3a:ed:86:ef:87:0a:7f:82:52:be:
ce:47:96:c7:8b:41:f5:9f:60:9d:ec:65:bf:ad:e6:
29:8e:77:91:c9:5f:44:30:9c:38:65:69:d1:ec:27:
b4:6e:1a:d2:e7:56:fa:9d:0a:0f:ac:61:5a:b2:cc:
5d:06:49:e7:f1:21:6b:f5:a3:3a:35:30:bb:89:36:
77:bf:84:9c:87:c9:1f:59:6d:76:9a:5e:04:32:a8:
a5:39:2e:e9:aa:85:82:97:f0:12:7d:23:d2:2c:9a:
9a:32:2d:84:6d:48:a7:e6:ab:69:70:4c:2e:64:91:
8f:20:42:27:40:d5:90:95:b7:d9:4f:89:9b:10:4a:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:75:67:DC:A0:07:10:1A:59:E4:3E:4C:68:35:D0:86:28:AB:CD
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e3:7e:a2:7b:5c:84:b5:36:10:55:53:2f:1e:55:da:f2:75:
fc:74:d4:45:85:f8:00:d1:05:8d:4f:6f:f2:de:27:1b:98:9a:
b4:3c:58:1c:87:0f:89:7a:59:85:f7:33:f9:02:5d:df:fb:07:
ee:8a:09:22:dc:dd:58:fa:79:d5:d9:e6:5b:ec:32:3b:bb:30:
84:39:2e:0a:8b:58:64:e0:fb:a5:c5:8c:7a:30:7b:79:50:47:
d9:1d:90:16:4a:bc:3e:e6:df:e3:a2:a9:8f:df:42:db:46:00:
2b:ed:b3:16:28:03:e4:f0:8f:0a:fe:01:12:22:69:99:99:bf:
d5:94:35:39:b3:11:6d:9f:6a:5a:30:00:0e:5c:a6:28:16:40:
ac:ab:3b:5a:b0:cd:0a:6c:40:45:d8:a7:2a:13:e9:34:d8:b4:
d7:d9:f6:20:8e:ce:8e:03:62:66:9e:14:35:1c:29:e9:3f:60:
31:2d:ba:ac:7a:79:ad:c7:dd:91:49:3e:7d:d1:b3:9c:4c:ab:
69:10:12:3f:fa:5b:f8:15:bc:75:6a:f0:06:96:24:99:74:90:
15:6d:7d:fd:d2:b3:55:53:71:f1:50:c1:8d:5e:f6:23:6f:10:
93:e8:2f:5d:8f:66:c9:e7:8e:3a:c0:7b:2f:8d:f5:57:45:35:
c4:0d:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:19:25 2026 by rpki-client