This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: chsKUC8FGSbXcYeUPWPFEArdqOyKIbceRB1QOsl60uM=
Subject key identifier: FB:F7:28:2F:97:47:F6:7D:D7:0D:20:CC:7E:E0:BF:C5:4A:A0:6E:9A
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019C43FD844E6AD2AC8242B2D638433EA393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 1768
Signing time: Mon 09 Feb 2026 20:00:13 +0000
Manifest this update: Mon 09 Feb 2026 20:00:13 +0000
Manifest next update: Tue 10 Feb 2026 20:00:13 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: vyrY0PIcRq1aUZjSdCtpEsx3/kXvopjoOpUEFpHcUzs=)
2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:84:4e:6a:d2:ac:82:42:b2:d6:38:43:3e:a3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Feb 9 20:00:13 2026 GMT
Not After : Feb 10 20:00:13 2026 GMT
Subject: CN=fbf7282f9747f67dd70d20cc7ee0bfc54aa06e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:a9:98:a0:cd:46:72:23:28:90:39:fe:18:
19:86:df:48:13:cb:44:af:09:22:55:d2:49:ed:d1:
1a:af:dc:22:a6:77:90:20:c2:31:0c:ab:b8:21:f6:
99:b9:b6:04:67:de:55:7a:02:c2:68:6a:f9:f9:96:
ea:48:20:68:e6:fc:84:fd:a9:c5:cf:02:98:2c:15:
76:b4:b3:aa:27:f2:6e:3c:45:46:6c:cb:ce:a3:d5:
47:e7:c6:86:c3:2b:59:06:9e:cc:79:8a:69:7d:2b:
97:81:13:2c:d9:27:4d:8f:51:7f:a2:eb:f4:60:2f:
6c:25:28:1a:04:a3:e5:c5:08:f6:33:e5:a2:f0:9c:
8c:d5:f6:88:1f:ed:19:3c:a6:bb:26:9d:95:7c:d3:
ab:6f:4d:1e:a7:1e:1d:71:3c:c8:18:d7:4a:6b:19:
05:21:31:cb:cf:03:8e:21:92:77:12:2c:d0:02:6d:
9e:81:ee:6b:ee:de:d5:7f:aa:61:f3:35:d0:6d:89:
6b:47:e1:a7:5d:bb:c8:98:e3:7e:3a:db:a6:92:e0:
27:f1:1f:15:5b:15:eb:a6:c7:c6:29:f1:f4:50:7f:
70:e9:90:fe:03:b7:f5:e0:ce:89:11:86:3e:1a:ed:
b3:9a:5e:c1:c0:32:34:95:ac:ea:da:e6:bf:37:63:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:28:2F:97:47:F6:7D:D7:0D:20:CC:7E:E0:BF:C5:4A:A0:6E:9A
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:7e:57:23:0e:3e:eb:82:32:b4:5f:1d:42:a8:54:6c:eb:
ed:e8:86:4b:b3:04:e6:92:7a:db:d3:b3:38:6c:7a:95:7a:66:
f3:ee:c7:d2:7b:88:be:05:b1:fb:1d:98:1d:00:fb:c1:45:48:
2a:8e:77:a4:d7:49:6e:b7:a5:b5:83:9b:3c:4c:98:ed:2d:24:
36:43:dd:2a:51:ce:cf:09:27:16:16:47:56:7a:0c:d4:12:64:
1e:b4:7b:88:2b:2e:70:31:58:a6:77:af:79:ff:50:1c:80:94:
c7:e9:7e:8e:14:8b:95:ec:11:30:61:73:aa:f4:b2:d9:a2:89:
fa:ff:68:0c:f8:88:a6:b0:26:b9:04:64:93:9b:29:20:83:c2:
67:35:88:13:55:ea:51:81:2c:52:5f:b2:7a:22:b6:99:95:3a:
5b:d0:cc:42:23:10:8f:ea:c4:db:f1:aa:a0:47:7c:0f:e7:83:
5c:90:24:09:bd:be:f9:b7:f9:7a:a2:81:d0:f7:1f:ba:fa:18:
50:4a:13:26:36:e7:c0:6d:74:fc:d7:c6:80:a4:3e:3c:50:51:
35:7b:d5:7d:1b:51:b0:7f:fa:17:1c:cb:4b:e8:a6:9f:45:27:
b8:a9:8b:77:02:0a:45:53:09:0b:18:c7:8a:7e:0a:62:c6:c7:
11:aa:74:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/YROatKsgkKy1jhDPqOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw
NmE1YjMwHhcNMjYwMjA5MjAwMDEzWhcNMjYwMjEwMjAwMDEzWjAzMTEwLwYDVQQD
EyhmYmY3MjgyZjk3NDdmNjdkZDcwZDIwY2M3ZWUwYmZjNTRhYTA2ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKepmKDNRnIjKJA5/hgZht9IE8tE
rwkiVdJJ7dEar9wipneQIMIxDKu4IfaZubYEZ95VegLCaGr5+ZbqSCBo5vyE/anF
zwKYLBV2tLOqJ/JuPEVGbMvOo9VH58aGwytZBp7MeYppfSuXgRMs2SdNj1F/ouv0
YC9sJSgaBKPlxQj2M+Wi8JyM1faIH+0ZPKa7Jp2VfNOrb00epx4dcTzIGNdKaxkF
ITHLzwOOIZJ3EizQAm2ege5r7t7Vf6ph8zXQbYlrR+GnXbvImON+OtumkuAn8R8V
WxXrpsfGKfH0UH9w6ZD+A7f14M6JEYY+Gu2zml7BwDI0lazq2ua/N2OWgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv3KC+XR/Z91w0gzH7gv8VKoG6aMB8GA1UdIwQY
MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt
YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl
LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3J+VyMO
PuuCMrRfHUKoVGzr7eiGS7ME5pJ629OzOGx6lXpm8+7H0nuIvgWx+x2YHQD7wUVI
Ko53pNdJbreltYObPEyY7S0kNkPdKlHOzwknFhZHVnoM1BJkHrR7iCsucDFYpnev
ef9QHICUx+l+jhSLlewRMGFzqvSy2aKJ+v9oDPiIprAmuQRkk5spIIPCZzWIE1Xq
UYEsUl+yeiK2mZU6W9DMQiMQj+rE2/GqoEd8D+eDXJAkCb2++bf5eqKB0PcfuvoY
UEoTJjbnwG10/NfGgKQ+PFBRNXvVfRtRsH/6FxzLS+imn0UnuKmLdwIKRVMJCxjH
in4KYsbHEap0Ug==
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:33:41 2026 by rpki-client