This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File: E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier: 7Il4QeD+ABXwj5P0+k/iCr4VyoAcllTFsjno6ACPl6I=
Subject key identifier: 00:1F:D7:FB:7F:D4:EA:95:94:D1:19:C9:D4:DB:94:8A:75:68:5E:5E
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial: 019C42B41B6AEA417B447EEA45771E60ED4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number: 0581
Signing time: Mon 09 Feb 2026 14:00:25 +0000
Manifest this update: Mon 09 Feb 2026 14:00:25 +0000
Manifest next update: Tue 10 Feb 2026 14:00:25 +0000
Files and hashes: 1: CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa (hash: 5ttQMFlBuHqp4mBzNOycaLf8j5C57Lnf42hbj8hxe2g=)
2: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: 3QRhcbdz4eLoFkLjDI0FhiVP30iSouBGBbLPnKBHrt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:1b:6a:ea:41:7b:44:7e:ea:45:77:1e:60:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Validity
Not Before: Feb 9 14:00:25 2026 GMT
Not After : Feb 10 14:00:25 2026 GMT
Subject: CN=001fd7fb7fd4ea9594d119c9d4db948a75685e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:8d:bd:e1:02:21:95:4e:c1:c3:51:ff:a9:
82:15:0f:5c:42:40:31:03:d6:9b:9a:40:bc:42:b8:
ad:61:4e:19:55:81:0b:92:39:2b:c7:65:db:4c:b4:
2c:6e:5a:9a:4d:3d:ff:8c:50:20:f8:a0:57:70:af:
e4:51:6e:6c:fc:ed:fe:7e:fd:c7:79:32:22:ec:d1:
3b:d2:45:d6:29:e2:a9:07:1f:6e:f7:e0:a2:3f:49:
fc:c7:cd:5c:11:36:c2:dd:3a:87:49:b6:c0:9c:67:
90:6e:e9:5b:cd:98:71:69:62:09:ae:5f:4c:6d:e3:
3e:c4:9f:d0:3b:1d:8f:96:f0:1f:75:07:ec:37:d4:
f7:cc:65:db:11:fb:a5:97:6a:80:04:89:89:5f:5d:
84:d2:45:07:fc:b8:08:87:79:0f:1d:67:2a:c9:a2:
9a:4f:d0:8d:f0:4d:ac:ee:ef:50:d0:53:ce:6c:1f:
44:29:8a:f8:48:35:30:a2:c6:ec:a8:be:1a:0f:69:
2b:f9:2e:dc:1a:d9:65:8a:36:0e:36:96:41:ca:83:
b5:cd:ee:d6:5f:b6:57:6f:61:38:8b:9d:bd:a4:91:
19:f7:8e:06:74:c9:95:4e:f1:5a:78:a3:7e:b5:14:
21:8e:05:98:f5:a8:39:dc:ad:a5:aa:62:95:8e:4b:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:D7:FB:7F:D4:EA:95:94:D1:19:C9:D4:DB:94:8A:75:68:5E:5E
X509v3 Authority Key Identifier:
keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ee:cd:d3:5e:34:f2:d8:22:d2:68:cb:2f:0f:78:6d:27:01:
05:20:a1:e0:f9:b8:35:b3:8e:20:a8:c8:59:29:de:09:a5:9f:
b4:27:db:57:40:25:4d:fc:0c:3c:46:cd:11:0c:58:06:b2:81:
26:74:e7:72:f0:21:6c:d7:fd:4f:77:2c:4f:72:82:64:68:c3:
28:92:b4:4c:35:3d:b7:7e:46:d9:18:79:4c:7e:8a:9a:af:de:
ea:3a:a4:e0:da:3c:71:2c:f2:e0:c2:a5:af:86:ac:ad:22:53:
43:45:76:84:82:51:47:94:19:b4:67:c9:43:c8:d9:b3:5e:0f:
92:b6:cf:35:c3:b7:ea:47:43:83:47:f2:cf:f6:e3:6a:08:d3:
00:00:a8:a1:39:62:64:40:c1:f7:97:8a:2e:b8:46:15:ce:4e:
b1:3d:a9:19:a5:45:6e:a8:3d:0d:c2:82:27:58:f5:20:29:d3:
bc:39:32:c8:e0:2a:fb:e1:db:5c:7a:0b:41:c8:67:20:e7:1c:
92:7d:cc:d9:f3:8a:e3:42:66:76:52:fe:40:3f:dc:d9:0f:df:
2a:64:4f:cd:e8:4f:d8:73:0f:c4:fc:1e:0a:3b:a9:47:b1:ce:
a9:c7:38:44:55:91:8d:a1:2c:32:08:6c:79:7a:49:76:78:dd:
eb:a1:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:38 2026 by rpki-client