This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File: E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier: z04HicvZvEdmQIMcwprUhhJ1NjzzpdZgviL9TSfK9VA=
Subject key identifier: 7A:35:44:80:20:75:C8:9A:B4:4C:BC:A6:07:44:FF:BA:86:14:9D:38
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer: /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial: 019C427E0290C592AA51630FC4F52F150EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number: 126B
Signing time: Mon 09 Feb 2026 13:01:20 +0000
Manifest this update: Mon 09 Feb 2026 13:01:20 +0000
Manifest next update: Tue 10 Feb 2026 13:01:20 +0000
Files and hashes: 1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: H3j6+aZftxA82G/1Od5VZo1vyF7foiq/I7Hw3zMR3es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:02:90:c5:92:aa:51:63:0f:c4:f5:2f:15:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
Validity
Not Before: Feb 9 13:01:20 2026 GMT
Not After : Feb 10 13:01:20 2026 GMT
Subject: CN=7a3544802075c89ab44cbca60744ffba86149d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:56:95:64:82:19:28:30:68:2c:51:18:c6:
89:18:8f:0c:c2:9c:64:09:ca:3e:d4:3d:db:fc:7b:
56:6c:fe:e8:58:c1:a0:b9:b9:cb:3e:62:9f:b5:73:
c9:4a:e7:bc:f0:ca:69:f5:5c:e0:d9:ce:21:09:21:
b0:fb:fb:7d:08:c7:7b:0a:1a:bd:04:12:c4:d2:2b:
3a:e3:8f:b1:0e:e4:26:90:af:70:b2:95:e0:9e:04:
0e:6a:64:80:cd:00:25:2a:60:5a:8c:19:fb:f0:07:
0c:ca:f4:a6:21:86:e9:4e:91:b2:a2:4f:96:f6:11:
0f:57:7f:5b:2a:83:1b:fb:10:95:7b:52:ce:be:77:
47:a6:65:44:92:bd:05:8a:8d:01:fc:ef:6b:f3:6e:
4b:af:05:de:fb:a5:5f:2b:f4:cf:ff:ab:48:3f:c6:
e4:c1:e3:1e:29:68:04:45:85:3d:22:1c:64:03:5a:
b7:fd:4a:23:2c:e0:6b:91:ad:59:c5:36:75:08:f7:
9a:5c:05:d5:70:d8:e8:1d:36:05:b4:d5:6a:d3:98:
f3:5c:2f:9b:8b:ec:7b:af:62:b8:26:b4:93:8d:ac:
27:04:ef:e0:a5:ee:40:4e:aa:aa:26:9f:1a:b7:4d:
a7:5f:94:07:5f:ec:86:c0:0a:de:51:74:d3:01:6a:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:44:80:20:75:C8:9A:B4:4C:BC:A6:07:44:FF:BA:86:14:9D:38
X509v3 Authority Key Identifier:
keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:6a:89:71:7e:ec:cf:f9:a2:44:7e:bd:f4:f4:49:14:e3:
31:05:b6:f0:07:75:ca:7e:7d:0f:ad:c6:49:19:4a:1d:cb:87:
23:a9:e6:3e:ec:31:25:42:8b:66:5b:58:4c:fd:b2:de:bd:fd:
9a:f3:56:31:90:ba:52:52:8d:10:e6:70:fd:28:87:9f:49:32:
8b:9b:db:12:c8:9d:fc:2c:aa:c5:98:42:09:0b:bc:96:95:1c:
cb:d7:78:df:60:f6:e7:e3:e1:58:e3:00:1d:a1:84:de:03:c3:
1e:a9:1f:21:bc:31:02:2c:18:b1:eb:0c:f4:d6:03:21:dc:94:
4c:a4:b6:65:0c:18:41:17:aa:f3:d0:b9:c9:24:9a:90:7c:78:
d8:bf:6e:d6:b5:72:a8:b3:52:6b:16:35:28:05:cf:fd:2e:df:
10:d2:fb:ef:17:8f:fd:49:dc:be:b6:b9:cc:54:85:e6:f0:20:
ca:24:9f:0d:82:db:af:6a:74:5b:5a:f9:8a:5f:aa:49:60:14:
49:a8:36:ad:0c:f9:90:05:82:46:26:f9:34:71:f1:5f:d2:74:
ff:15:cf:c2:c6:b6:63:ca:17:de:01:bc:0e:ff:d2:12:b5:71:
c5:0d:a2:c1:2d:3b:d2:e3:d2:b5:e1:0b:cd:cd:4a:6b:34:5f:
62:57:04:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfgKQxZKqUWMPxPUvFQ6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTcwZmI5NDZkYWY5YjllZmUzYjYwOWYyODljYWUwMTlm
YzYxOGMwHhcNMjYwMjA5MTMwMTIwWhcNMjYwMjEwMTMwMTIwWjAzMTEwLwYDVQQD
Eyg3YTM1NDQ4MDIwNzVjODlhYjQ0Y2JjYTYwNzQ0ZmZiYTg2MTQ5ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6pWlWSCGSgwaCxRGMaJGI8Mwpxk
Cco+1D3b/HtWbP7oWMGgubnLPmKftXPJSue88Mpp9Vzg2c4hCSGw+/t9CMd7Chq9
BBLE0is644+xDuQmkK9wspXgngQOamSAzQAlKmBajBn78AcMyvSmIYbpTpGyok+W
9hEPV39bKoMb+xCVe1LOvndHpmVEkr0Fio0B/O9r825LrwXe+6VfK/TP/6tIP8bk
weMeKWgERYU9IhxkA1q3/UojLOBrka1ZxTZ1CPeaXAXVcNjoHTYFtNVq05jzXC+b
i+x7r2K4JrSTjawnBO/gpe5ATqqqJp8at02nX5QHX+yGwAreUXTTAWoTTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo1RIAgdciatEy8pgdE/7qGFJ04MB8GA1UdIwQY
MBaAFBOXD7lG2vm57+O2CfKJyuAZ/GGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMt
MzdiNjFlYzJjMGQ1LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMtMzdiNjFlYzJjMGQ1
LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgRqiXF+
7M/5okR+vfT0SRTjMQW28Ad1yn59D63GSRlKHcuHI6nmPuwxJUKLZltYTP2y3r39
mvNWMZC6UlKNEOZw/SiHn0kyi5vbEsid/CyqxZhCCQu8lpUcy9d432D25+PhWOMA
HaGE3gPDHqkfIbwxAiwYsesM9NYDIdyUTKS2ZQwYQReq89C5ySSakHx42L9u1rVy
qLNSaxY1KAXP/S7fENL77xeP/Uncvra5zFSF5vAgyiSfDYLbr2p0W1r5il+qSWAU
Sag2rQz5kAWCRib5NHHxX9J0/xXPwsa2Y8oX3gG8Dv/SErVxxQ2iwS070uPSteEL
zc1KazRfYlcEtg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:27 2026 by rpki-client