This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier: am4VmQxlEuIhgMrSsf2hnVNNGM7+kCW3ClKGQDnsGfI=
Subject key identifier: A7:15:8B:A7:F1:B3:54:25:00:D3:D5:38:04:42:5E:3B:97:B4:6E:62
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 019C42B456057664AB23CE6D1525E21B007F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number: 012A
Signing time: Mon 09 Feb 2026 14:00:40 +0000
Manifest this update: Mon 09 Feb 2026 14:00:40 +0000
Manifest next update: Tue 10 Feb 2026 14:00:40 +0000
Files and hashes: 1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: N+K86EAgzhtMNSajI+2E2gcaRJsPXRtCUD0LI/V5tZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:56:05:76:64:ab:23:ce:6d:15:25:e2:1b:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Feb 9 14:00:40 2026 GMT
Not After : Feb 10 14:00:40 2026 GMT
Subject: CN=a7158ba7f1b3542500d3d53804425e3b97b46e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:94:39:f3:38:83:2c:07:c6:f7:73:17:1d:
03:dc:67:1d:2c:66:44:0d:eb:06:35:41:93:21:92:
4f:f5:3f:02:11:d3:d9:61:d2:1c:0b:09:7d:2d:52:
d2:b7:09:de:83:17:1f:d2:a8:50:d7:6a:72:0a:16:
e6:cc:af:02:49:17:90:d6:94:ad:4a:f4:0c:67:ab:
d7:86:5a:ac:bd:aa:bf:c5:77:ea:ba:3c:34:33:6f:
78:92:8f:eb:67:76:5c:b6:dc:4c:dc:f6:5a:19:e8:
a1:b8:4a:32:23:c2:7a:1b:15:8a:a9:00:7b:7f:e7:
7a:b5:ba:3f:9d:d3:4f:f0:b0:d5:c4:f0:42:b1:05:
dc:6d:cf:ce:1b:58:5a:59:84:4d:24:da:98:34:48:
76:4c:bc:db:92:ca:eb:c0:7e:d6:7f:a8:0e:07:97:
5f:4e:ae:df:93:59:48:66:60:4b:04:db:28:8b:fa:
25:34:b8:97:a0:a4:54:d4:8f:7e:a7:cc:ce:d9:cd:
32:85:96:ba:ce:45:14:37:25:fa:9b:09:c1:bb:81:
9d:15:8f:eb:6f:30:30:ba:ca:c2:f2:99:ef:45:79:
dc:28:7c:3a:4c:3f:28:12:ce:2d:18:e6:93:ec:db:
b9:05:d7:16:67:9a:7b:d3:1d:9b:e8:b8:3b:b0:90:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:8B:A7:F1:B3:54:25:00:D3:D5:38:04:42:5E:3B:97:B4:6E:62
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7b:17:a2:54:81:7b:5a:30:37:77:ec:ef:97:bb:12:16:9f:
e0:2a:0b:90:40:21:ef:59:7b:e9:84:8e:8a:60:d7:9c:d3:5e:
1f:1c:c0:43:37:a6:4c:98:9b:4f:55:60:db:19:89:3b:a0:6a:
4b:a7:e3:c6:ea:7f:5f:54:e1:82:32:f3:f9:f7:ef:ea:0a:09:
79:88:0f:83:ed:e0:bf:c4:d7:07:a6:83:20:81:a3:86:25:62:
36:d8:cd:07:9f:a5:23:95:60:b2:00:ce:70:df:6e:f1:45:cc:
b4:4e:99:a8:7e:ad:05:5d:2a:10:bf:96:5a:69:61:fc:ff:dd:
50:57:86:f5:3c:fc:52:62:1f:e0:77:0d:f8:e7:81:da:1c:94:
a8:f4:b7:d3:fe:0b:d6:cb:7e:a0:d7:54:29:1f:f3:91:70:c0:
76:df:e1:4b:2d:20:a5:b2:8d:1f:2b:b5:8a:ca:a4:57:57:37:
c8:df:58:7c:49:45:93:45:9f:71:9d:df:2d:ad:c5:28:87:46:
09:a4:81:da:51:d8:7d:1a:bd:ff:c7:f3:ad:eb:01:61:9c:47:
82:aa:d0:03:81:85:5c:4e:24:59:9a:9f:1b:97:5f:d6:14:0b:
19:f0:83:b3:f1:57:d6:23:70:c2:1e:85:c1:41:0b:8f:fe:4e:
44:33:6d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtFYFdmSrI85tFSXiGwB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODJhNTRkYjJhZjRhZTJlMDQ4NjQ3MWI4ZDUwZjhmYTVm
N2U4NjEwHhcNMjYwMjA5MTQwMDQwWhcNMjYwMjEwMTQwMDQwWjAzMTEwLwYDVQQD
EyhhNzE1OGJhN2YxYjM1NDI1MDBkM2Q1MzgwNDQyNWUzYjk3YjQ2ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvKUOfM4gywHxvdzFx0D3GcdLGZE
DesGNUGTIZJP9T8CEdPZYdIcCwl9LVLStwnegxcf0qhQ12pyChbmzK8CSReQ1pSt
SvQMZ6vXhlqsvaq/xXfqujw0M294ko/rZ3ZcttxM3PZaGeihuEoyI8J6GxWKqQB7
f+d6tbo/ndNP8LDVxPBCsQXcbc/OG1haWYRNJNqYNEh2TLzbksrrwH7Wf6gOB5df
Tq7fk1lIZmBLBNsoi/olNLiXoKRU1I9+p8zO2c0yhZa6zkUUNyX6mwnBu4GdFY/r
bzAwusrC8pnvRXncKHw6TD8oEs4tGOaT7Nu5BdcWZ5p70x2b6Lg7sJAEUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcVi6fxs1QlANPVOARCXjuXtG5iMB8GA1UdIwQY
MBaAFHiCpU2yr0ri4EhkcbjVD4+l9+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEt
ZjE2YjA3ZjQzMDZmLzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEtZjE2YjA3ZjQzMDZm
LzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnsXolSB
e1owN3fs75e7Ehaf4CoLkEAh71l76YSOimDXnNNeHxzAQzemTJibT1Vg2xmJO6Bq
S6fjxup/X1ThgjLz+ffv6goJeYgPg+3gv8TXB6aDIIGjhiViNtjNB5+lI5VgsgDO
cN9u8UXMtE6ZqH6tBV0qEL+WWmlh/P/dUFeG9Tz8UmIf4HcN+OeB2hyUqPS30/4L
1st+oNdUKR/zkXDAdt/hSy0gpbKNHyu1isqkV1c3yN9YfElFk0WfcZ3fLa3FKIdG
CaSB2lHYfRq9/8fzresBYZxHgqrQA4GFXE4kWZqfG5df1hQLGfCDs/FX1iNwwh6F
wUELj/5ORDNt3A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:23 2026 by rpki-client