This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: EYoarC1Q6ETqcwsyXCsVfGp+Fi0BAp8Or0Alum7efOk=
Subject key identifier: BE:EE:88:7E:8B:6A:D5:05:E4:74:3A:FC:F8:EC:74:90:97:0C:E9:0B
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 019C43C6F17DED59F04C220DCE82F7AD0DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 1555
Signing time: Mon 09 Feb 2026 19:00:37 +0000
Manifest this update: Mon 09 Feb 2026 19:00:37 +0000
Manifest next update: Tue 10 Feb 2026 19:00:37 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: Obb/MK+R28SPJ7qD/FV9SQOby81VKkDWJF4SjUKbMB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:f1:7d:ed:59:f0:4c:22:0d:ce:82:f7:ad:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Feb 9 19:00:37 2026 GMT
Not After : Feb 10 19:00:37 2026 GMT
Subject: CN=beee887e8b6ad505e4743afcf8ec7490970ce90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:a2:2c:a6:bf:10:e1:19:e9:6e:4f:f8:03:
6d:8b:47:f8:a5:0c:4c:0b:c7:5a:8f:8c:d0:f0:a1:
8b:17:65:96:98:0a:e1:c4:aa:23:85:d9:06:bb:87:
76:c4:bb:d8:59:0b:d1:8b:6a:08:93:c2:db:1c:70:
5d:83:3d:a8:5e:3c:78:1b:12:c6:2f:3b:7a:1f:20:
10:44:33:90:0a:2d:1b:f9:67:6e:5a:b9:62:07:ad:
74:26:0f:d3:cf:48:3e:35:b6:a2:db:df:2a:29:1b:
73:8f:1d:f1:f8:ae:6d:9e:10:67:9d:2c:85:0c:d7:
34:09:ed:e8:cb:49:0a:ab:e7:a5:f7:c4:3e:1f:e8:
ca:fe:4e:73:b6:6b:41:49:f1:ee:c9:45:9d:50:13:
ad:d3:d0:eb:30:07:76:37:99:65:4c:c8:a1:24:05:
3b:b4:b6:ce:57:05:1f:d6:25:4c:54:1a:1b:e2:9b:
96:29:1a:d4:5e:0e:a9:be:31:08:f9:e0:88:61:30:
b8:2f:6e:c7:df:94:d1:fc:c9:01:e1:ee:72:b7:76:
15:6b:73:05:82:f0:01:52:51:ad:aa:4e:85:c0:c7:
a7:e4:c5:91:5a:b0:c9:8d:b6:b4:b3:37:db:b1:51:
ac:5c:2e:c0:a8:aa:c6:40:5c:82:71:33:28:ad:b9:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:88:7E:8B:6A:D5:05:E4:74:3A:FC:F8:EC:74:90:97:0C:E9:0B
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:12:db:90:7e:24:21:a2:e1:5f:5c:6b:3a:27:e1:9a:a7:
e0:7e:55:51:31:14:78:b8:de:b9:45:89:0e:18:5d:cf:d6:fb:
50:11:fc:c8:51:2c:b6:49:cb:8e:87:0a:62:19:e2:44:2b:64:
b8:ad:1a:1a:46:8c:78:eb:58:6d:88:5a:43:88:4d:15:11:c3:
91:e0:60:db:f9:fe:a9:75:06:82:37:27:01:26:83:e6:33:a6:
98:ea:b7:97:68:ef:ca:d0:53:88:54:a6:26:3c:e3:d3:48:44:
d3:68:c7:8b:75:38:29:89:12:4d:47:a4:6f:30:3f:84:65:35:
a3:aa:90:0a:fd:ca:5f:b3:71:5a:de:bc:d7:6d:c6:28:b8:1f:
12:0d:4e:3b:89:51:26:1a:44:10:26:b0:f2:44:db:c4:46:00:
b5:97:79:c3:72:11:04:72:7f:15:3e:5e:61:c2:ae:69:54:d0:
b4:96:7b:ed:5e:6d:c6:e6:c2:f8:f0:2c:41:2d:a6:51:8e:cf:
4c:8f:4c:6d:f7:66:93:5f:bf:f0:27:7e:d5:e4:e4:f2:e0:78:
83:f6:f0:2e:3c:dd:82:20:8a:4c:d0:14:32:f9:d7:d5:02:7b:
17:7f:ae:f1:11:15:a7:61:3b:1d:91:15:90:a4:82:64:f4:e5:
18:3d:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:30 2026 by rpki-client