This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: 0LCrVJ/ehs+O5L5HzdWvrSvk6oE4jzlY1tCiutOdEK4=
Subject key identifier: 7E:17:38:C2:E3:6F:6B:D3:23:72:1B:6E:23:4D:44:7E:69:96:10:BE
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 019C44A2BD48D080009A58E018A61C7B373C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 23:00:41 +0000
Manifest this update: Mon 09 Feb 2026 23:00:41 +0000
Manifest next update: Tue 10 Feb 2026 23:00:41 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: oCifLN00HED6dgaXqiX6CDDLtQQAjDIvWDgvFNArFTM=)
2: YqBJj4QOZe_mJKDs248c4_DsF6s.roa (hash: ZDFKOurRRaHh8voy0j7Npo5QmnZr2B2qAZU5jtYcJks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:bd:48:d0:80:00:9a:58:e0:18:a6:1c:7b:37:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Feb 9 23:00:41 2026 GMT
Not After : Feb 10 23:00:41 2026 GMT
Subject: CN=7e1738c2e36f6bd323721b6e234d447e699610be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:52:4c:0e:84:7f:68:36:b5:10:35:d7:1e:
3c:bc:91:20:53:0d:7f:06:b3:d6:66:72:97:2e:ec:
05:f4:ab:0c:07:be:4d:c5:6c:30:3a:04:ee:e7:a8:
90:5f:0f:19:85:8d:47:cc:cb:d7:79:76:14:c9:42:
94:81:a5:aa:a4:76:1d:7e:0c:ef:86:ce:3a:6c:83:
6a:50:df:25:47:f6:ec:9d:13:72:14:7a:ec:b5:e8:
07:2d:ae:17:ff:1c:7a:6c:36:38:94:29:df:fb:90:
75:b5:6e:13:cd:39:76:9e:a5:23:c2:b8:34:05:e6:
ed:2b:4f:dd:ca:e8:ea:8f:7f:ce:a5:ce:f6:70:91:
d9:88:e6:5a:2e:40:ec:aa:46:5a:fe:8f:e5:8c:52:
f1:37:46:d5:75:b1:e8:40:3a:8a:03:75:a4:d0:ba:
47:38:e5:e4:b1:97:a1:3c:2e:a2:1b:99:0a:48:20:
7c:1a:05:f6:2c:20:f8:e2:fa:77:5d:25:78:8d:ab:
81:29:24:6d:b5:2c:de:dc:0d:fa:4f:66:7a:82:f2:
f0:21:46:fb:77:2e:16:38:b1:cd:9b:54:99:47:f0:
4f:83:f9:3c:5b:4a:b1:35:d5:7f:6e:d3:1b:21:54:
ce:04:73:91:50:88:6a:7d:da:a9:7f:f4:90:38:2c:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:38:C2:E3:6F:6B:D3:23:72:1B:6E:23:4D:44:7E:69:96:10:BE
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:c0:57:c0:f3:23:7c:0f:cf:aa:5d:92:f9:02:80:22:f5:
78:29:7b:ef:0a:3c:b0:df:f1:6f:31:fe:f0:3e:88:7a:9f:8a:
ec:1f:aa:c9:5a:49:f5:a1:45:e6:51:21:3a:99:69:17:63:83:
13:d5:fe:f7:1b:c3:0b:fb:08:4f:88:0c:6f:8c:5e:53:3f:4a:
80:0e:f5:41:46:e2:cd:59:fe:57:6c:ae:f1:88:1e:bf:b0:70:
f0:70:51:8a:b8:0a:7a:df:94:e9:fb:b8:81:96:44:44:f6:f3:
ba:46:84:f5:fa:fb:b8:55:0a:27:1d:a8:58:6d:bb:e9:df:5c:
2b:26:c6:fe:fa:6b:3a:06:db:da:6b:70:9a:2c:cd:39:9d:99:
84:a0:eb:76:7a:c2:26:d3:d7:76:5a:f9:d8:94:31:e6:d1:e5:
81:02:69:b2:96:02:bd:bc:ca:bb:0c:9f:3b:7b:f4:42:3d:b4:
ef:d8:a9:a8:38:c4:d8:50:5b:53:43:f7:4b:05:f0:50:ad:81:
92:ab:a5:23:53:83:71:36:6e:3e:fe:c2:c1:31:71:d3:a2:f7:
a4:40:b2:97:16:33:af:21:d8:33:8c:d5:10:ab:b2:06:d1:37:
44:68:e9:22:61:3e:56:66:c5:91:2c:69:7e:a2:73:84:e2:69:
fd:87:dd:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEor1I0IAAmljgGKYcezc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDEzZDM3NDFlNGIzZjNhM2EzZTM0NzIxZjEyNDZlNGIy
N2M3YTYwHhcNMjYwMjA5MjMwMDQxWhcNMjYwMjEwMjMwMDQxWjAzMTEwLwYDVQQD
Eyg3ZTE3MzhjMmUzNmY2YmQzMjM3MjFiNmUyMzRkNDQ3ZTY5OTYxMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsixSTA6Ef2g2tRA11x48vJEgUw1/
BrPWZnKXLuwF9KsMB75NxWwwOgTu56iQXw8ZhY1HzMvXeXYUyUKUgaWqpHYdfgzv
hs46bINqUN8lR/bsnRNyFHrstegHLa4X/xx6bDY4lCnf+5B1tW4TzTl2nqUjwrg0
BebtK0/dyujqj3/Opc72cJHZiOZaLkDsqkZa/o/ljFLxN0bVdbHoQDqKA3Wk0LpH
OOXksZehPC6iG5kKSCB8GgX2LCD44vp3XSV4jauBKSRttSze3A36T2Z6gvLwIUb7
dy4WOLHNm1SZR/BPg/k8W0qxNdV/btMbIVTOBHORUIhqfdqpf/SQOCz8RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4XOMLjb2vTI3IbbiNNRH5plhC+MB8GA1UdIwQY
MBaAFO3RPTdB5LPzo6PjRyHxJG5LJ8emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ODA4YmMtOTc2ZC00MjEyLWFkMmYt
MWE4ZjIzZTJjZWJiLzEvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84ODA4YmMtOTc2ZC00MjEyLWFkMmYtMWE4ZjIzZTJjZWJi
LzEvN2RFOU4wSGtzX09qby1OSElmRWtia3NueDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh3AV8Dz
I3wPz6pdkvkCgCL1eCl77wo8sN/xbzH+8D6Iep+K7B+qyVpJ9aFF5lEhOplpF2OD
E9X+9xvDC/sIT4gMb4xeUz9KgA71QUbizVn+V2yu8Ygev7Bw8HBRirgKet+U6fu4
gZZERPbzukaE9fr7uFUKJx2oWG276d9cKybG/vprOgbb2mtwmizNOZ2ZhKDrdnrC
JtPXdlr52JQx5tHlgQJpspYCvbzKuwyfO3v0Qj2079ipqDjE2FBbU0P3SwXwUK2B
kqulI1ODcTZuPv7CwTFx06L3pECylxYzryHYM4zVEKuyBtE3RGjpImE+VmbFkSxp
fqJzhOJp/YfddA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:00 2026 by rpki-client