This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: KH5FswdSHWGpr/0mRvwtIRhwot9qu1N+WMA7GjcaHD0=
Subject key identifier: F3:2A:43:94:E2:F4:53:6E:5F:FF:D4:D9:7F:EB:1D:EB:B3:B1:F8:03
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019C42EB257501295766F9CDEB974045ACB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 03ED
Signing time: Mon 09 Feb 2026 15:00:32 +0000
Manifest this update: Mon 09 Feb 2026 15:00:32 +0000
Manifest next update: Tue 10 Feb 2026 15:00:32 +0000
Files and hashes: 1: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (hash: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo=)
2: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: NhcBKdRUVpEGbzZtqnSCutap6WjBbP7q9ejY9Sq+pUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:25:75:01:29:57:66:f9:cd:eb:97:40:45:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Feb 9 15:00:32 2026 GMT
Not After : Feb 10 15:00:32 2026 GMT
Subject: CN=f32a4394e2f4536e5fffd4d97feb1debb3b1f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:ae:df:08:13:0d:b5:0d:d3:9f:d3:1d:04:
83:60:28:df:21:4e:f8:ab:c5:36:17:d2:f9:98:a4:
34:68:8b:8e:60:98:16:c9:a5:00:61:68:41:51:b6:
08:38:a9:e9:67:21:99:e2:f8:33:7a:81:05:6a:8f:
5f:2b:3b:1d:2e:24:41:a6:9a:3d:40:bc:42:d6:d2:
c2:6e:22:26:3d:c4:14:6b:7c:a0:c5:07:82:7c:cc:
71:58:51:49:40:e2:8b:f1:32:fe:6f:cd:7a:ba:b6:
e3:9f:dc:4a:b9:f6:1f:f6:9b:b9:f6:b2:d8:5c:d7:
45:81:9d:54:3d:f8:d6:5a:03:c2:9d:46:b7:0f:95:
87:3b:18:a7:35:5f:38:e6:dc:29:5a:36:6a:b1:8c:
4b:4d:dd:da:bc:d3:84:68:ac:8b:cd:9e:34:10:bf:
93:c9:8c:6a:4d:b7:0d:fa:05:f8:99:34:fe:87:92:
f7:00:9b:b1:ad:9a:70:36:8b:f1:6f:50:c8:52:dd:
64:77:68:e0:8f:fc:ab:1f:75:6a:a5:a7:3f:a3:e4:
70:fb:63:d2:3c:40:80:0f:16:83:22:01:4a:a8:31:
9c:41:d1:37:cf:01:9c:18:1d:b7:e6:d9:4a:f7:33:
25:fe:e9:41:2a:5e:d4:01:46:5a:c9:3f:bd:8a:84:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2A:43:94:E2:F4:53:6E:5F:FF:D4:D9:7F:EB:1D:EB:B3:B1:F8:03
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0a:92:0d:72:52:b6:64:d7:80:7e:59:c4:66:de:6a:24:a5:
f6:a3:05:1f:47:0f:a5:c8:c0:c3:c7:21:05:1c:5b:db:84:df:
0e:e8:7c:1a:79:f0:57:d6:22:c5:ea:7f:b0:58:fc:47:61:75:
7b:04:a0:1c:ee:6c:f7:f4:91:c3:9a:98:87:3d:b7:3e:ca:4b:
7d:85:d9:50:00:5a:d9:83:7b:d6:e3:9d:0b:86:21:de:3b:6c:
ef:23:e0:1c:f6:0a:88:86:9a:ab:c2:ee:ec:21:79:25:22:42:
d3:fa:f2:47:ed:55:50:28:5c:a6:f3:5f:d2:7d:54:68:ea:51:
f5:49:04:e1:a8:6c:64:d9:e7:1e:cc:8e:b6:29:74:cd:f1:4c:
2a:65:85:b5:7b:d9:59:71:27:da:cf:96:e8:b7:42:5d:a0:db:
ce:ee:cc:9d:ca:5b:ae:11:bb:81:92:59:a2:83:34:e1:a6:d5:
27:37:36:08:c6:99:ae:9f:21:82:22:fb:07:d6:0e:99:63:1b:
3f:43:9a:a9:84:ff:4a:5e:21:32:14:44:1d:8b:9f:3c:2e:a0:
8d:21:73:ab:bd:41:2f:b0:fc:c2:3e:05:6b:e7:7f:c2:b9:6b:
36:18:a7:a3:4f:df:ca:a2:e1:9a:1e:af:73:78:17:90:18:77:
77:8a:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:26 2026 by rpki-client