This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: il+7Nn5BltBfKzGpqOENFw9cIjh7lstM8G/u6TCRfg4=
Subject key identifier: 54:58:4A:6A:C2:D6:F9:33:3D:56:16:B6:42:39:98:66:73:37:64:FC
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 019C4321E374770D4697B1218821491630B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 12E8
Signing time: Mon 09 Feb 2026 16:00:20 +0000
Manifest this update: Mon 09 Feb 2026 16:00:20 +0000
Manifest next update: Tue 10 Feb 2026 16:00:20 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: 6+Z2k93LWJlze94iJv5Jlg7w5ZshxPlUfGI48349sTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e3:74:77:0d:46:97:b1:21:88:21:49:16:30:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Feb 9 16:00:20 2026 GMT
Not After : Feb 10 16:00:20 2026 GMT
Subject: CN=54584a6ac2d6f9333d5616b642399866733764fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:89:34:cf:ae:71:ba:52:82:46:04:86:2d:
93:d8:34:bd:70:b2:aa:db:04:a6:75:e2:d1:50:5f:
b2:20:34:85:96:8d:88:f6:0f:9b:39:d9:b9:28:51:
b3:ea:a8:d2:14:d1:73:14:83:96:a8:8a:91:9a:40:
5d:08:bf:b2:c0:93:f3:83:03:bd:b8:4d:85:c9:6c:
f5:4d:3e:7b:1d:80:e0:ad:fb:8e:95:2a:93:00:7b:
3a:a4:e0:22:ab:fe:5d:4b:72:c0:f8:6e:e3:41:37:
14:2e:f5:0b:fd:65:53:71:ae:d6:22:af:ae:b0:ae:
b2:71:16:3e:9b:00:2b:d3:ed:4a:b4:47:74:9e:f8:
bf:3f:0e:fb:22:8b:9f:23:cf:18:83:b9:ba:fc:6a:
c5:f0:7b:28:59:b6:52:db:33:97:c5:6a:3e:45:b0:
6c:b4:e2:b1:f4:1e:5d:72:4e:e9:a0:4f:5e:37:24:
d1:1f:5d:52:ac:b1:fd:79:ff:43:4d:9e:e4:53:c7:
ad:08:fb:08:f8:82:0f:b6:c4:bb:45:6d:b0:74:95:
6c:4f:31:55:9e:22:af:0e:de:c6:44:1e:5d:73:60:
40:c6:6b:14:12:5b:bb:44:f4:01:ed:33:54:1d:32:
a5:12:ce:14:1d:1b:9e:c1:55:7f:79:c9:81:8f:25:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:4A:6A:C2:D6:F9:33:3D:56:16:B6:42:39:98:66:73:37:64:FC
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:ec:aa:88:c7:f4:69:cd:09:d8:ca:6d:56:40:d7:4d:bd:
71:3c:40:98:ed:ea:17:b6:58:ed:b3:58:f4:4b:f5:00:3c:5e:
6c:f6:0e:10:8e:ed:b5:e3:1a:78:c8:43:12:48:97:a9:9b:77:
66:c6:43:30:b7:7f:f8:0a:db:cc:64:b3:91:cc:0f:c9:a6:39:
bf:1d:d3:1b:f8:bc:80:f0:ef:df:30:9a:a4:ea:b4:47:76:3c:
0d:1b:54:c8:d6:87:ef:37:0e:35:69:31:df:73:4a:4c:10:27:
34:f5:03:2f:69:26:7e:61:4b:d9:2e:a1:3c:6e:d3:6d:51:1f:
cf:61:83:e9:79:37:30:51:50:e0:57:ac:b9:5a:8f:d8:7a:ca:
7b:d5:4e:63:a9:4b:1a:ac:91:f9:f9:01:ef:5b:5a:24:b4:33:
52:fa:aa:af:f1:55:fe:d0:7f:fa:46:e7:b5:be:04:40:a3:e3:
12:bd:99:9c:61:cf:75:19:ac:c3:40:51:e5:9b:40:3c:95:ba:
6a:22:7d:3d:89:65:ff:39:25:2e:90:6e:27:b4:47:f3:7c:f4:
08:44:5a:24:fc:6b:09:38:e1:d5:c8:95:54:75:c6:1e:3f:4b:
4c:f8:69:d7:f0:ef:a0:2b:f7:f6:d8:27:b7:e8:8f:5c:81:59:
cd:c0:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:16 2026 by rpki-client