This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: VH1QLWpbogGrlQrCB+c1e4lQDrd8D5kXVoAzJ4VSprQ=
Subject key identifier: 57:8C:4A:10:2E:2F:AB:C2:79:F7:FF:46:D6:1A:2B:4B:89:F5:2F:9A
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 019C41A1F1D28F55877993C9B5D1F8782A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 1207
Signing time: Mon 09 Feb 2026 09:00:58 +0000
Manifest this update: Mon 09 Feb 2026 09:00:58 +0000
Manifest next update: Tue 10 Feb 2026 09:00:58 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: dXM9Cnka+d17wnFm1RxYSGygnIQrTQ7riRjEpYupnK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:f1:d2:8f:55:87:79:93:c9:b5:d1:f8:78:2a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Feb 9 09:00:58 2026 GMT
Not After : Feb 10 09:00:58 2026 GMT
Subject: CN=578c4a102e2fabc279f7ff46d61a2b4b89f52f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:f3:16:3f:ad:30:c2:3b:22:20:44:fa:79:
1e:f9:d4:79:f2:f0:e8:fa:c0:90:db:8c:f2:b7:66:
b2:e5:c4:c1:78:71:21:c6:5f:8b:b1:5e:f2:b2:9b:
4c:00:89:82:53:bd:43:f8:41:9f:b7:bb:1a:32:be:
fe:e0:94:97:99:e0:96:22:83:56:04:78:3e:1f:a9:
a3:58:1d:dd:50:5c:63:79:2b:4a:bf:35:96:d3:cb:
e2:a6:9c:a1:bd:4d:26:1b:62:88:f0:65:ab:f8:a4:
3d:da:63:32:38:2b:bf:3a:a3:e0:ee:c0:45:ec:e3:
96:ad:07:a9:c1:f5:4e:87:14:7b:05:f2:cc:19:29:
bb:e6:ec:38:8c:3d:22:fd:1b:97:c0:d1:75:56:69:
aa:d9:19:35:85:df:98:bc:a4:bd:64:38:c9:56:66:
40:0d:22:71:b7:5b:ed:9d:9c:e7:bc:2a:5f:67:51:
66:64:54:5f:df:05:2a:86:c2:ff:99:a9:6a:f9:91:
9e:ae:28:53:35:cb:b3:97:65:10:e6:00:42:81:e2:
f1:4d:98:10:44:d3:82:91:90:40:ac:18:31:ec:d9:
f5:34:ba:29:b5:85:38:61:6e:0a:82:35:aa:5d:f0:
3c:d8:63:d7:8a:ad:0c:b1:5a:92:a1:05:de:d3:e9:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:4A:10:2E:2F:AB:C2:79:F7:FF:46:D6:1A:2B:4B:89:F5:2F:9A
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:c9:20:92:82:3d:e0:3d:4a:10:d9:51:10:e4:63:af:8f:
5d:0f:f7:3b:d5:e6:1d:fc:d4:78:36:8c:57:04:da:cb:c5:15:
c8:6f:f8:5a:72:62:bd:4c:66:4b:4d:6a:81:12:be:1b:78:a9:
c1:ba:ca:05:53:2f:65:f2:3e:f3:8c:b2:65:16:59:6f:24:aa:
b3:ad:c9:5c:0f:fd:b4:6b:21:53:00:0d:9d:f3:07:f4:f5:70:
9d:5e:84:79:54:8a:c4:84:61:d2:b0:e2:71:a1:43:5f:9c:74:
7c:b6:51:7a:c7:59:3f:5b:d3:b9:02:8a:ab:98:92:93:6c:4d:
08:f4:90:b5:ab:ac:f7:ad:32:fa:dd:80:37:fe:d5:ae:c0:70:
9a:64:db:0e:55:d2:6c:2b:0e:63:13:0a:12:31:6f:c9:35:18:
1e:c3:10:f8:2e:f7:77:e8:1d:64:97:31:4f:61:d8:00:e9:53:
d0:99:26:0f:bd:92:4e:d4:35:3e:c3:ef:e4:06:07:0c:29:42:
b0:db:dd:ab:b7:fb:b2:73:57:f0:a4:91:61:6c:e2:f2:02:b2:
c2:3f:cc:6d:ff:18:9f:ca:e8:ef:d8:ba:dd:d6:05:7c:2c:75:
7d:be:35:77:ff:2a:38:f7:bf:b8:e5:ce:dd:66:22:f6:85:d3:
65:5d:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:32 2026 by rpki-client