This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: foWuqYk3EyREiraqZsf1j7ZU77DeluI+VEoxqabvt7g=
Subject key identifier: 56:3F:44:49:BC:B1:36:AA:FA:E9:A2:C5:D8:9F:11:8A:4F:5E:C9:56
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 019C42B47860829792399A509B314A3AC031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 0849
Signing time: Mon 09 Feb 2026 14:00:49 +0000
Manifest this update: Mon 09 Feb 2026 14:00:49 +0000
Manifest next update: Tue 10 Feb 2026 14:00:49 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: WIltw3d2i/ogFGYHjDjEerDRP0ROnWM+Kxhqdahzhhc=)
2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:78:60:82:97:92:39:9a:50:9b:31:4a:3a:c0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Feb 9 14:00:49 2026 GMT
Not After : Feb 10 14:00:49 2026 GMT
Subject: CN=563f4449bcb136aafae9a2c5d89f118a4f5ec956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:32:69:89:b8:6f:b6:0d:c1:45:01:a9:47:
53:33:94:75:07:8c:fc:ca:f7:8a:86:7a:5e:08:f9:
45:df:2a:55:b6:b6:b8:90:c4:b9:6c:a0:e3:d2:5e:
ed:97:df:be:27:1d:a1:8c:55:80:9f:fe:63:c4:55:
f5:e3:05:fc:ae:15:e0:a5:cb:3b:ae:9c:0b:eb:86:
e3:ab:b1:8f:1e:56:71:b2:3d:b6:bc:33:cb:2f:70:
5c:35:0b:f5:6c:fd:11:7d:a9:47:42:7b:9f:7e:13:
07:18:73:9e:fe:71:84:d4:41:db:a5:bd:79:89:53:
29:85:57:69:a7:a8:47:41:03:cd:5d:4c:f7:c0:d6:
6f:d2:66:66:c6:5b:0c:dc:a6:13:12:1c:85:96:3d:
3c:c5:77:d7:7f:ee:63:88:86:12:d8:ff:5e:e3:4d:
5d:66:4b:22:32:44:16:f2:34:b5:fa:f7:31:b4:71:
72:4d:6b:9c:f3:01:6e:c6:27:6b:d0:3d:f5:4b:f7:
8b:11:81:93:df:11:a8:06:ea:08:39:3d:36:9a:3a:
bb:76:d8:49:9b:09:b3:04:b5:55:36:20:64:5e:8d:
8b:59:9c:19:4e:a0:70:b1:a5:cd:88:82:db:63:a4:
30:89:88:bf:91:f4:9d:62:23:ff:6f:23:3b:c3:64:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:44:49:BC:B1:36:AA:FA:E9:A2:C5:D8:9F:11:8A:4F:5E:C9:56
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0d:e6:1a:cb:9d:8b:55:9d:23:90:99:99:13:04:83:9f:c4:
69:25:c0:be:ca:ab:3c:21:46:bd:22:ec:15:0a:9b:f4:3b:75:
9b:95:f4:ff:32:cd:fc:a1:51:da:7c:b0:e2:1f:25:2f:52:4a:
82:40:16:30:a9:4f:bb:51:dd:63:07:6e:01:e1:06:4a:c0:a5:
2a:fe:43:dd:08:e5:c9:bd:ac:cb:3e:ae:c4:e3:25:b4:7d:7b:
47:74:7d:a7:83:32:93:17:58:e2:05:69:97:9b:26:69:63:ba:
fb:79:9f:08:4b:fd:9f:10:a3:e6:b2:d6:15:2b:fa:c9:73:3f:
e2:53:b7:08:60:04:f0:cf:f5:17:0e:3c:69:6e:e0:ad:73:3c:
f5:a0:f5:54:cc:37:68:d4:d4:3b:95:5b:3b:b1:36:29:cb:3c:
2c:94:86:11:5c:bb:28:e9:c0:62:d6:a0:81:1b:b4:76:56:c2:
56:f2:31:de:2b:78:0c:b2:64:b3:99:84:90:80:0d:a7:d3:79:
b1:49:ff:d4:c7:c5:df:15:c0:c0:c6:40:b7:b0:1e:45:75:73:
6b:d9:92:31:cb:71:9e:f5:4a:61:bf:ca:48:3b:cd:03:27:13:
67:51:f4:46:f3:41:c2:38:6f:6a:33:91:b8:f1:ef:1d:b4:d5:
d2:df:20:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtHhggpeSOZpQmzFKOsAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzZjMTYyNzhmYzgyMWUxZWVmOTMyZmRlYTliM2RkNjNj
YTZiMjEwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg1NjNmNDQ0OWJjYjEzNmFhZmFlOWEyYzVkODlmMTE4YTRmNWVjOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5IyaYm4b7YNwUUBqUdTM5R1B4z8
yveKhnpeCPlF3ypVtra4kMS5bKDj0l7tl9++Jx2hjFWAn/5jxFX14wX8rhXgpcs7
rpwL64bjq7GPHlZxsj22vDPLL3BcNQv1bP0RfalHQnuffhMHGHOe/nGE1EHbpb15
iVMphVdpp6hHQQPNXUz3wNZv0mZmxlsM3KYTEhyFlj08xXfXf+5jiIYS2P9e401d
ZksiMkQW8jS1+vcxtHFyTWuc8wFuxidr0D31S/eLEYGT3xGoBuoIOT02mjq7dthJ
mwmzBLVVNiBkXo2LWZwZTqBwsaXNiILbY6QwiYi/kfSdYiP/byM7w2QXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY/REm8sTaq+umixdifEYpPXslWMB8GA1UdIwQY
MBaAFBB2wWJ4/IIeHu+TL96ps91jymshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQt
ZDQ5NGQ5OTdkMzk4LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQtZDQ5NGQ5OTdkMzk4
LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw3mGsud
i1WdI5CZmRMEg5/EaSXAvsqrPCFGvSLsFQqb9Dt1m5X0/zLN/KFR2nyw4h8lL1JK
gkAWMKlPu1HdYwduAeEGSsClKv5D3Qjlyb2syz6uxOMltH17R3R9p4MykxdY4gVp
l5smaWO6+3mfCEv9nxCj5rLWFSv6yXM/4lO3CGAE8M/1Fw48aW7grXM89aD1VMw3
aNTUO5VbO7E2Kcs8LJSGEVy7KOnAYtaggRu0dlbCVvIx3it4DLJks5mEkIANp9N5
sUn/1MfF3xXAwMZAt7AeRXVza9mSMctxnvVKYb/KSDvNAycTZ1H0RvNBwjhvajOR
uPHvHbTV0t8gcQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:22 2026 by rpki-client