This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File: E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier: wmoxGUjuFO26PE0PYt5MWT3NIQ1FFlpa7KC2GV5jMO8=
Subject key identifier: 22:D0:8E:74:5E:49:E9:42:12:BA:F8:0A:42:B0:60:7A:26:B1:5D:1C
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial: 019C438FC040EC51D5619F8D61F2C8A6E151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number: 0749
Signing time: Mon 09 Feb 2026 18:00:20 +0000
Manifest this update: Mon 09 Feb 2026 18:00:20 +0000
Manifest next update: Tue 10 Feb 2026 18:00:20 +0000
Files and hashes: 1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: EzbfX28raQW0M4Uxf4/rmN+d6Mqr9H4AwZ1chkxc/gE=)
2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:c0:40:ec:51:d5:61:9f:8d:61:f2:c8:a6:e1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Validity
Not Before: Feb 9 18:00:20 2026 GMT
Not After : Feb 10 18:00:20 2026 GMT
Subject: CN=22d08e745e49e94212baf80a42b0607a26b15d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:c4:44:17:8a:6d:02:fd:6a:39:7c:83:78:
25:dd:29:9d:f5:f9:30:34:07:3e:11:15:c2:f1:c9:
ce:69:c1:e6:b8:03:81:65:e9:f8:b3:ed:b8:91:40:
24:40:3e:32:72:0c:44:57:64:11:2a:59:b2:11:c0:
84:3a:61:0d:00:63:82:26:f9:96:34:b3:f9:65:04:
8f:43:fa:ce:e5:b7:3f:c4:a9:37:da:83:85:85:61:
0a:5f:22:df:9d:12:ae:57:f7:1e:29:83:aa:30:e0:
27:7d:39:97:8f:42:42:aa:46:87:d7:67:4e:4a:07:
60:d6:31:95:61:46:58:93:2a:e5:75:28:84:07:21:
07:38:1f:6e:a2:b9:2d:69:df:99:02:dc:25:a1:77:
bf:46:53:1c:ed:03:a7:21:10:5a:f1:4d:81:1f:0b:
a4:be:54:71:b6:33:93:bb:12:af:2a:8b:cc:ac:39:
33:48:c5:bd:ae:07:62:fa:a0:3a:6c:1f:7e:93:d7:
4d:d5:72:7e:b8:ac:40:da:b9:10:14:60:f4:a3:55:
bd:14:36:4e:8f:8f:06:b9:8b:9d:a5:51:73:3b:4d:
01:fd:13:62:8e:dd:a5:67:14:16:87:7d:9a:5f:a7:
3b:0f:91:2b:ef:41:30:b1:c7:52:20:91:33:0c:0a:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:8E:74:5E:49:E9:42:12:BA:F8:0A:42:B0:60:7A:26:B1:5D:1C
X509v3 Authority Key Identifier:
keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:ec:b4:f1:5a:7f:d5:d9:c2:a4:8a:7b:af:b0:5b:0d:78:
cc:21:2e:ed:82:e2:52:f0:df:b7:30:13:d9:95:4a:33:3f:c3:
47:dd:c3:94:81:5f:a0:ca:94:06:69:a6:d9:04:89:1e:e5:39:
a0:6e:dc:6f:37:2c:0a:83:e5:2b:28:29:42:0c:97:e8:0b:87:
09:21:34:a0:0d:63:81:01:8b:a7:8b:20:e7:31:a1:03:1c:14:
75:26:67:af:2b:70:2d:fe:e6:07:0c:58:13:83:72:4b:9f:cf:
cc:32:62:66:72:d5:e0:d7:09:96:21:2c:1b:66:9c:cc:a3:25:
c1:6c:ff:3d:9d:f5:9b:31:18:72:34:b5:42:fa:56:b3:b5:0e:
3e:ba:4e:44:dc:ad:a6:b6:db:b8:14:2b:11:34:5e:4e:00:c4:
b5:d2:26:6a:e5:30:99:cb:70:b1:04:35:2e:fa:83:13:9f:8a:
d6:57:3b:15:f3:2b:3e:8d:22:d9:f8:5c:e6:5c:d8:23:77:1c:
c7:a0:2a:4a:75:0f:e4:c1:b4:8b:b3:3a:12:5d:59:0b:44:1e:
1a:9f:ab:ac:7e:ba:45:2a:4f:42:3b:6b:9e:cf:9a:07:ab:50:
9e:25:a3:15:0e:df:6d:33:96:5f:75:52:99:57:c8:52:36:44:
4f:ef:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:29 2026 by rpki-client