This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: O2okWAeUlZakDL48k8L7N993ECQfZW5eDnzm1tRJZjY=
Subject key identifier: D9:31:15:E2:B7:09:D3:4A:DF:6C:30:1F:6B:72:97:8E:B4:7A:A4:02
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019C37C30DDA0A6324E68196919D1F9C664D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 180A
Signing time: Sat 07 Feb 2026 11:00:55 +0000
Manifest this update: Sat 07 Feb 2026 11:00:55 +0000
Manifest next update: Sun 08 Feb 2026 11:00:55 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: +uXmMvGISNfUMSO8YykAggBa7fq1M8cYMSr6vXT+JTE=)
2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:c3:0d:da:0a:63:24:e6:81:96:91:9d:1f:9c:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Feb 7 11:00:55 2026 GMT
Not After : Feb 8 11:00:55 2026 GMT
Subject: CN=d93115e2b709d34adf6c301f6b72978eb47aa402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e6:ba:a6:4f:06:25:12:2a:8b:92:ca:a8:83:
d1:94:e3:74:6a:4b:be:dc:c3:81:9e:f9:61:39:7b:
77:c2:ac:8c:55:4b:d5:71:34:73:e3:40:c8:3a:35:
a5:89:23:22:69:bc:fb:d1:4b:7f:d5:9f:11:55:db:
06:11:69:68:e7:b8:b9:56:58:2f:29:ec:d7:da:ea:
6d:47:02:74:1d:66:86:79:5b:44:9c:39:f0:7c:86:
42:2b:f5:d6:d2:2d:5b:09:3b:2f:ba:2a:5d:58:da:
22:b6:81:26:60:e5:41:9e:9b:03:63:0e:19:f0:38:
d4:6c:49:fc:b5:f3:38:c8:17:26:69:5d:f5:0c:ea:
e2:44:b0:c5:5b:2b:5a:29:08:30:72:99:2d:4f:70:
ac:c0:88:94:2b:43:b6:78:bf:90:36:ed:01:ce:d9:
73:5b:1b:44:fe:39:75:69:3d:02:68:73:ce:35:1f:
6f:af:7c:7c:f9:99:19:b6:40:21:20:36:73:b7:7a:
c5:95:10:38:36:ae:cf:e1:28:c2:7f:34:9a:74:4b:
82:8f:d4:26:c7:13:a6:84:72:de:e2:b0:da:cf:d4:
c4:3e:cd:ca:da:5a:27:28:3d:9d:0c:c5:23:2f:83:
7e:4f:a4:5e:86:d0:97:02:e5:12:df:20:4d:de:e7:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:15:E2:B7:09:D3:4A:DF:6C:30:1F:6B:72:97:8E:B4:7A:A4:02
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:22:de:fb:69:c7:63:90:70:1f:39:8d:f4:31:67:d3:31:
8e:fa:06:05:5c:67:c1:f2:d8:8d:22:41:b8:97:3f:eb:61:b8:
4f:29:c3:db:05:ea:17:4a:63:c6:cf:36:e2:5a:65:ca:9a:f6:
cf:05:d6:af:09:db:d9:2e:a0:2a:b3:3b:f7:b6:4b:2a:1d:3b:
b3:64:32:91:45:47:2e:a3:5b:1f:d9:40:2c:e7:14:6b:c0:f4:
ca:47:36:ea:ac:90:ed:7a:2a:ef:9b:d8:f7:f8:ba:40:9a:3b:
43:0a:f0:11:42:1b:bf:cc:ab:2b:35:b7:9d:8c:e8:e8:9d:45:
80:3e:40:ca:f0:d2:7c:1b:b4:7c:4f:33:4a:50:28:32:39:94:
8d:a6:1e:82:75:77:04:0b:ec:e6:5b:1c:09:47:3c:62:cc:15:
9e:55:e6:09:31:ac:bb:70:c8:1b:f0:25:10:53:c4:fc:3c:a2:
4e:65:7a:00:a3:07:0c:5f:f1:23:93:6e:c1:79:7e:9c:0f:1e:
34:bc:d8:4a:2f:03:72:dd:11:c1:fd:54:8c:d4:11:d6:5d:21:
54:47:fa:f3:38:da:3f:77:b9:d8:b2:26:dc:91:f3:12:29:18:
96:2a:a9:21:28:9f:ac:a4:9e:40:18:63:49:c0:ff:7a:20:31:
ac:3d:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 17:58:56 2026 by rpki-client