This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier: qHzUrXHlplxnDfhareZjpqP/mT9/HenvYkLPHpJYjPU=
Subject key identifier: 4C:4E:96:22:50:6C:EF:B1:9F:FB:25:39:85:C0:BC:4E:D7:80:B4:2E
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 019C4390AB3B192328B22DCAEA6B587D97C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number: 06E1
Signing time: Mon 09 Feb 2026 18:01:20 +0000
Manifest this update: Mon 09 Feb 2026 18:01:20 +0000
Manifest next update: Tue 10 Feb 2026 18:01:20 +0000
Files and hashes: 1: E0bPvqxVf13qVW0K3FOh43rFeAA.roa (hash: L83gXrZ7ml1x6pbEKqasf9zLxkSub+uRzDvUjH/MeVU=)
2: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: xkEAl7Yq0qw7SgOwZiHhXxxIfUIT3gyiov9b6EYtujQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:ab:3b:19:23:28:b2:2d:ca:ea:6b:58:7d:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Feb 9 18:01:20 2026 GMT
Not After : Feb 10 18:01:20 2026 GMT
Subject: CN=4c4e9622506cefb19ffb253985c0bc4ed780b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:32:3b:33:01:b2:6e:28:7e:78:7c:68:d4:
f2:c8:d0:77:e3:de:10:ef:dd:6b:47:98:09:9d:aa:
af:6a:d5:72:e9:d4:cf:cc:48:7f:97:5a:b5:90:5c:
b2:c4:80:b5:50:7d:10:92:f7:e5:b3:4d:63:2b:cf:
c5:58:47:f6:6d:28:3e:b0:8f:36:31:2b:ab:b6:3d:
59:d8:3c:7b:c2:29:79:d6:f2:f7:80:45:7c:de:c4:
70:d3:ae:02:db:d2:bf:4b:59:44:9b:fe:60:43:0a:
be:54:3d:81:68:a1:e1:57:d1:77:4c:b5:33:9e:98:
99:2e:ee:75:2d:36:2d:80:e8:a8:8a:47:e5:33:c9:
b7:2c:0e:19:fd:10:bc:c7:4b:44:ad:b1:2b:8c:51:
e2:1d:18:2e:ff:b0:8b:eb:05:38:81:10:93:25:1f:
f8:f6:8f:da:83:aa:7a:6d:c2:b2:7a:9d:39:82:ce:
0e:71:63:d7:93:7e:33:59:7c:af:6e:0e:40:e8:66:
3b:8d:f9:97:cf:87:67:85:a1:00:97:4d:74:63:48:
95:14:23:d3:3b:75:30:df:ec:9b:16:58:f9:af:31:
3f:4e:df:9c:7f:07:31:57:8c:7d:4d:21:f1:06:b6:
fa:33:1c:59:53:f9:93:46:cc:f1:3a:d7:52:77:98:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:96:22:50:6C:EF:B1:9F:FB:25:39:85:C0:BC:4E:D7:80:B4:2E
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:09:77:3c:3a:6d:d5:e9:82:f5:11:0a:ca:d6:5e:50:57:1e:
4b:0f:7d:f6:0a:a2:80:05:1d:8d:c0:a6:91:44:32:40:80:77:
2b:7a:26:f9:28:39:63:28:ae:0e:69:7b:14:4a:4f:11:54:4c:
d9:56:73:9e:98:8f:42:5d:4b:63:02:24:d9:42:05:d9:22:46:
42:d8:72:0b:18:2b:94:2f:30:85:3d:5c:77:4f:df:95:46:21:
ca:81:83:b6:d3:0e:72:e8:de:3c:3d:67:26:62:db:a2:ff:9c:
83:7d:df:47:e4:99:03:80:b5:14:40:33:b0:87:d9:42:08:33:
a6:8b:5e:96:f1:20:86:2a:a3:44:03:6d:71:3f:67:5f:a9:0b:
54:88:99:cf:24:0a:49:d5:d9:dd:0c:d6:1a:02:5d:41:57:cd:
80:79:79:cc:75:7f:ed:fb:c1:5c:57:fb:87:f7:dd:57:81:d6:
e6:07:0c:ef:e8:aa:51:83:fc:8c:52:9d:f7:2b:f5:fa:73:c2:
cf:42:1d:60:12:ef:f8:52:36:06:d2:45:e9:97:aa:ae:94:29:
98:39:56:a3:0f:09:0b:70:18:1c:25:30:5c:cb:21:aa:45:d8:
ab:b4:f0:e0:bc:96:1c:dd:b4:fd:79:fd:86:c5:57:e7:e4:75:
af:2b:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:59 2026 by rpki-client