This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: L0hwzGCsA8UkP/3sAzPpW3ngc6hlyHCPiLbveYTWJYA=
Subject key identifier: C7:91:FE:2B:0B:26:30:27:D8:FE:BA:67:50:A0:76:59:C0:F4:EE:FF
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 019C4322369FE0632B8D1505D4EE14A4841F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 1355
Signing time: Mon 09 Feb 2026 16:00:41 +0000
Manifest this update: Mon 09 Feb 2026 16:00:41 +0000
Manifest next update: Tue 10 Feb 2026 16:00:41 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: HhRIQFIhAd0bT39CGh224rNeDeStzsXyx9avLqWcC8w=)
2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:36:9f:e0:63:2b:8d:15:05:d4:ee:14:a4:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Feb 9 16:00:41 2026 GMT
Not After : Feb 10 16:00:41 2026 GMT
Subject: CN=c791fe2b0b263027d8feba6750a07659c0f4eeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:fe:32:ca:96:ab:2b:de:cd:7e:10:91:a9:
3a:33:eb:19:c0:1a:95:76:a7:2f:ee:86:38:21:cf:
2c:36:4e:30:f2:28:9e:29:05:fb:fd:90:2c:76:0f:
9c:19:2b:a5:d1:8c:d0:10:41:0e:30:97:4e:84:d4:
9c:36:b6:c9:66:bc:68:df:e5:e0:fe:7b:3a:66:2f:
c0:6e:ce:00:b8:c0:3c:66:11:f2:77:a4:af:2c:bb:
39:3a:18:f8:f5:af:c3:4d:70:f5:fe:17:72:9f:3d:
a1:56:2d:c3:6c:a9:55:1b:05:8c:b9:38:5c:68:46:
91:ba:18:6f:a4:06:ed:f0:6d:b6:32:5a:df:cf:cc:
cc:e0:79:21:d6:5a:93:4a:eb:be:d3:74:a6:a6:67:
ba:84:17:aa:0a:5d:fb:64:b9:de:37:29:af:aa:77:
3f:cf:df:d1:22:dd:1c:d7:8c:d8:bb:8c:8d:44:a7:
51:59:8d:d1:c6:55:a4:67:4e:d3:27:f4:4b:b4:16:
fd:6d:d2:2a:e6:dc:e3:f5:c4:65:02:f6:3c:57:78:
ce:65:9b:c0:93:8a:7b:96:70:d8:5f:e9:84:87:5d:
ef:a5:6a:5b:49:ea:92:ae:3a:33:5a:86:3f:bc:75:
b9:1b:cb:03:cd:60:a5:3d:1c:10:23:fe:aa:d5:f6:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:FE:2B:0B:26:30:27:D8:FE:BA:67:50:A0:76:59:C0:F4:EE:FF
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7a:74:94:74:56:b4:2f:e6:12:6e:fb:24:e5:2f:ae:95:ed:
95:ea:7c:5f:de:9b:57:b1:0e:9f:5c:6a:4d:61:8c:ca:5b:44:
b0:45:ab:4a:ee:53:b1:f2:b4:5a:c2:fa:6b:ab:b5:f7:bd:e5:
dc:16:5e:b0:11:f8:12:0f:b4:62:35:9d:8e:f6:23:37:d8:7b:
cd:c0:6b:8d:1b:9d:9e:ee:cb:98:4b:4d:c2:e7:d5:cd:9e:84:
4c:25:a8:91:aa:d3:8f:96:76:86:47:49:3a:47:35:7c:93:30:
52:f0:a5:b1:ed:a4:dd:d1:68:aa:3b:fd:a7:db:3d:99:c3:d0:
f6:c9:db:43:00:8e:9e:45:56:2b:03:8c:fe:9b:39:79:7f:97:
40:cc:da:4b:e3:da:77:cd:fc:bf:e2:a7:dc:63:8b:f0:a4:dd:
e6:db:3e:e3:66:93:92:52:6b:21:f9:ba:0e:65:1f:5e:fe:29:
4c:5f:1f:0c:b2:c0:68:d8:c5:9d:d6:c2:16:39:15:30:21:55:
6a:56:a4:fd:4f:b5:56:d3:99:e1:f5:17:7a:7d:47:a6:02:9b:
c4:72:c5:b8:21:a3:f8:d2:0a:d0:92:47:54:be:72:49:60:83:
f6:18:76:09:80:44:7b:ae:03:b1:ec:ce:54:33:2a:fb:33:13:
34:1d:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:47 2026 by rpki-client