This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File: mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier: CObKA9aFX210/oFVRNLPAsUr+za8AbA1dz0IwpvRpRQ=
Subject key identifier: C1:1E:0A:0E:5B:7C:C4:41:3D:DC:EA:4B:E8:FC:07:EC:C4:1E:64:56
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer: /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial: 019BE1128500767331207B0D3725E28CBD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number: 0DE7
Signing time: Wed 21 Jan 2026 15:00:45 +0000
Manifest this update: Wed 21 Jan 2026 15:00:45 +0000
Manifest next update: Thu 22 Jan 2026 15:00:45 +0000
Files and hashes: 1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: ruMcpnmjq7tvA5yxL8TF96MqcXT3DMXxNINVHHJzQ2c=)
2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e1:12:85:00:76:73:31:20:7b:0d:37:25:e2:8c:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Validity
Not Before: Jan 21 15:00:45 2026 GMT
Not After : Jan 22 15:00:45 2026 GMT
Subject: CN=c11e0a0e5b7cc4413ddcea4be8fc07ecc41e6456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:af:4e:82:52:c8:fe:da:16:be:35:48:45:
1b:51:54:30:58:b8:45:e1:c1:ac:e5:cf:71:8a:1b:
2b:b9:61:72:fd:a9:23:b4:13:f7:58:96:d9:24:40:
9e:60:b1:06:57:fe:e6:3e:30:7e:0f:04:04:eb:c7:
cc:e6:dd:9e:2e:ff:52:04:54:44:6c:8b:eb:4d:08:
4a:2c:89:65:40:65:df:12:b4:97:7c:a1:6c:a1:31:
00:2e:45:46:42:df:ec:52:48:b6:e4:d9:60:79:2c:
12:3d:9a:0c:94:b6:81:1d:e2:f5:67:07:ce:c4:21:
24:ab:8a:f1:3c:3a:99:73:91:64:18:df:13:59:27:
c5:2a:54:e5:02:c2:b7:a7:c9:a2:90:44:17:2a:68:
de:e6:c6:93:e5:f7:36:20:b2:3e:e9:11:3d:7f:63:
b7:f8:8b:aa:60:d5:19:30:dc:52:c9:de:71:86:93:
30:7f:d0:e8:9e:ee:d3:e7:c5:c0:e7:12:47:47:9a:
de:8f:cc:41:11:f6:23:14:52:b1:24:34:68:af:6c:
32:22:ec:06:65:8a:4d:82:1b:76:07:a7:72:65:9c:
20:f1:8a:46:1c:f8:9e:f7:da:47:51:cb:54:a7:37:
12:74:40:97:46:be:47:02:f8:50:29:2d:17:19:73:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:0A:0E:5B:7C:C4:41:3D:DC:EA:4B:E8:FC:07:EC:C4:1E:64:56
X509v3 Authority Key Identifier:
keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:28:c6:e8:ef:1c:50:d3:83:f7:6d:6b:9e:9c:88:fd:c9:90:
1c:9d:91:56:86:27:19:ee:bd:2c:78:e6:73:8c:de:64:94:1d:
03:c0:46:52:2c:21:fb:5f:f6:76:90:c6:a6:e2:c2:df:56:ef:
0c:1c:44:f9:be:70:00:80:fc:e8:ef:96:6b:cc:35:b9:1b:c7:
7e:10:42:98:53:3c:ba:78:0b:27:7e:3d:1f:fa:c4:fe:27:aa:
7d:b8:98:97:75:9f:30:cd:e1:a6:09:bf:f9:b8:a6:69:2f:e9:
64:cc:3d:33:fa:80:a1:bc:f0:7e:13:52:86:35:1a:0d:71:c3:
18:73:e4:5d:87:25:fd:35:2a:90:c7:35:97:fd:44:99:46:e8:
ed:1a:a3:2e:2d:0c:f3:26:b1:b8:fd:3b:6a:04:38:88:b5:49:
2d:d7:db:64:b4:77:20:a6:1d:89:80:bf:7c:78:b0:ff:13:ac:
1c:f9:83:a3:e6:45:49:c7:2d:6f:b5:b6:95:59:ef:a7:83:ea:
c6:bb:6b:7f:6c:7d:68:f7:d1:23:d8:7f:4f:2f:fe:e3:b0:b2:
1c:17:78:df:d4:cd:e3:0b:87:71:39:eb:1a:2b:1b:e9:ab:7f:
49:e9:ce:d6:81:e7:c3:ed:d5:62:3e:ea:bf:b2:3e:03:6c:e7:
30:58:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:05:32 2026 by rpki-client