This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: 3Q4nwwZGVt3ONMvnEg03tUBPuQzTCWbsk8Ai5bJpWz4=
Subject key identifier: A6:D6:B5:3D:16:27:D9:F7:03:9A:0F:6F:D1:52:E3:9E:F2:09:7C:E9
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019C213AF5AB6200C4F0E14761038C9D7BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 17FF
Signing time: Tue 03 Feb 2026 02:00:37 +0000
Manifest this update: Tue 03 Feb 2026 02:00:37 +0000
Manifest next update: Wed 04 Feb 2026 02:00:37 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: M1iqXGV2wLpoBVu1vTVluOqDVYDGhl90MwocClwszpU=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 21:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:21:3a:f5:ab:62:00:c4:f0:e1:47:61:03:8c:9d:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Feb 3 02:00:37 2026 GMT
Not After : Feb 4 02:00:37 2026 GMT
Subject: CN=a6d6b53d1627d9f7039a0f6fd152e39ef2097ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:99:59:97:44:7e:87:2a:e9:0a:37:29:c7:
64:a4:0d:14:4d:e5:9c:c3:9a:fb:1b:1a:70:1f:72:
24:1f:cd:bb:0b:ba:ec:08:7c:b6:c5:79:63:2f:06:
a5:6b:a2:4d:29:b0:13:95:a0:e2:2b:d5:90:99:86:
74:2c:23:59:46:24:5e:2f:16:ad:60:0e:b7:96:52:
1c:4c:28:a2:06:d1:de:f1:45:50:54:62:5b:15:ff:
0b:06:9e:d6:66:f8:c3:5e:88:a6:1e:cd:18:76:7a:
56:74:8f:30:97:67:de:6e:e3:f2:f3:71:5e:a2:dc:
a2:e7:1a:85:83:ce:a5:d9:5e:02:6d:54:89:21:b8:
55:2b:ed:b2:29:97:68:50:14:14:ae:2d:04:03:10:
a3:5c:37:fe:75:c9:1c:61:d0:f0:b8:29:16:db:a0:
94:05:26:2d:51:53:57:d1:18:84:48:8f:d1:49:4c:
4b:d8:30:d7:e1:d9:bd:41:db:31:4f:df:c7:6a:d9:
e8:02:f8:c5:d2:ae:98:27:dd:89:27:ce:39:ba:11:
e8:72:af:d4:c3:40:44:71:90:b4:55:b4:23:b6:f5:
0d:2e:5a:49:db:a6:93:f7:ad:c1:e8:79:9d:65:68:
23:b8:15:21:54:8c:b9:8b:60:8b:61:fa:39:0f:04:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:B5:3D:16:27:D9:F7:03:9A:0F:6F:D1:52:E3:9E:F2:09:7C:E9
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a9:16:e5:c2:81:50:89:2f:8c:d6:66:20:97:7a:1e:61:65:
6b:ab:85:81:f1:96:24:52:9d:03:f3:62:ed:44:fd:1a:e8:d3:
c1:04:d5:4b:c1:c0:3c:b4:7a:8f:37:1c:7a:a3:1b:4c:8a:a1:
c6:45:3c:1d:f2:19:a2:6c:50:3f:87:c4:12:51:0e:35:16:f7:
95:88:11:76:0c:fa:40:90:bf:6c:bb:33:2f:51:f8:ea:d4:8b:
05:4f:d5:ba:8c:51:ec:09:09:86:4b:4d:fe:89:8f:e5:e9:9e:
66:18:16:2b:7f:02:2f:ab:9c:0e:f8:ca:c4:f0:19:0d:27:74:
a6:dd:1d:9b:90:f6:ad:47:c1:df:8b:f4:ad:e8:b7:28:44:dc:
f2:f2:cb:e5:e0:c3:ec:73:3b:62:9d:0f:82:3a:c4:05:b6:e7:
87:07:29:86:93:b9:21:ef:d2:33:cf:0f:fd:75:2b:70:5d:84:
ee:a7:e0:b7:ca:a8:e4:d1:71:24:7d:67:86:8a:c4:e2:b9:5f:
b8:c7:f5:a6:ca:4d:52:45:e8:97:c5:a0:97:21:c5:01:38:0a:
64:9f:3c:63:4b:ff:9a:ec:3a:f7:82:2e:df:8a:17:3b:cf:58:
7c:50:f6:48:69:cc:34:36:f9:47:d1:8f:e6:73:bf:77:41:b5:
4e:ab:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 05:07:17 2026 by rpki-client