This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier: JLzCU0XvoSt9Cc1tGXjx5vIMiozfjh6Bf1YzqZOrWjk=
Subject key identifier: E6:45:DB:2A:D9:BC:EF:04:59:CA:3F:9A:EF:65:C8:15:A4:D0:A1:6A
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial: 019C413411A4350165D97AB5BF7745228891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number: 070E
Signing time: Mon 09 Feb 2026 07:00:57 +0000
Manifest this update: Mon 09 Feb 2026 07:00:57 +0000
Manifest next update: Tue 10 Feb 2026 07:00:57 +0000
Files and hashes: 1: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: fosXRpRLoBJKToE/aCF8ilQD1FBJHIZ1z1hpOSUT1sA=)
2: QPj7fUSgBwDGuqI3uOke_219sUg.roa (hash: xwpTnDBnhQJQT2QP9/pCYeUK0xXfracIKnGvu54bOIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:11:a4:35:01:65:d9:7a:b5:bf:77:45:22:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Validity
Not Before: Feb 9 07:00:57 2026 GMT
Not After : Feb 10 07:00:57 2026 GMT
Subject: CN=e645db2ad9bcef0459ca3f9aef65c815a4d0a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:03:d0:f3:d4:b8:fa:9f:af:74:4d:6a:47:
b7:e9:a7:97:30:74:ac:55:16:94:86:d4:43:5a:ec:
a5:43:e1:cb:19:e6:0a:f5:b6:c8:44:27:90:b6:7c:
99:c1:1f:b6:6c:07:c8:f1:4f:eb:e8:96:ef:92:06:
08:e2:52:85:4d:22:cd:a1:ff:f2:2f:bb:3d:b6:a5:
e1:57:8e:72:5b:c0:92:81:e3:e8:1f:0f:0f:a3:96:
84:2b:f3:45:1c:3d:42:00:b4:b9:97:53:57:6a:7a:
94:fc:53:71:66:23:7d:a4:cb:f6:6c:3f:61:7b:26:
f0:74:2c:88:d9:85:e0:e0:40:52:bc:82:9c:80:f5:
d4:ee:b6:a9:f8:fb:1a:68:cc:dc:9c:b0:78:2e:c6:
81:02:f7:02:71:f2:26:00:e7:c9:dd:08:24:6c:d4:
cd:b2:13:e6:be:11:43:f0:8e:93:51:e8:c4:42:51:
96:af:98:cf:48:83:66:6b:22:e0:ea:c2:5f:8d:36:
62:f6:9a:0c:fd:98:b7:3d:89:c1:cb:d9:a1:6f:26:
d6:39:f0:0b:eb:31:5f:ca:45:d6:f7:7b:6f:d9:f5:
04:e3:33:09:07:fc:75:eb:8a:77:d1:1c:cc:29:35:
1f:7a:39:ff:b5:da:4e:6c:44:e7:bb:2d:2f:81:a0:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:DB:2A:D9:BC:EF:04:59:CA:3F:9A:EF:65:C8:15:A4:D0:A1:6A
X509v3 Authority Key Identifier:
keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:1f:a5:5c:3f:68:04:77:98:1a:28:6a:0f:05:54:81:44:
c3:76:87:39:64:a5:e9:5b:40:79:74:6f:83:50:7c:ee:41:f8:
e6:be:0d:a1:2c:d4:70:e0:d0:94:f3:55:97:a9:0b:66:b8:29:
8e:37:2a:e1:ab:25:91:8d:40:7a:5f:61:b5:81:c9:5d:07:21:
b3:ee:56:df:4a:2a:f7:af:fd:31:c3:3f:f7:17:6d:18:8d:4c:
db:43:61:d4:47:f9:72:19:42:fd:5c:ec:d5:7b:a9:07:7e:12:
33:6d:f2:6b:25:18:be:a4:47:e0:32:7c:47:79:1e:d9:0e:0b:
f7:47:32:2d:b9:9c:63:14:3f:2c:2c:86:a3:78:fb:43:ad:ce:
5a:e5:5a:f5:a5:ce:c0:af:71:ca:24:d6:6d:e1:48:b5:15:31:
59:9f:7d:e5:ce:84:b1:11:fa:7d:54:fe:5e:f5:6a:76:1f:65:
4d:ff:a7:65:f7:7b:78:61:a3:a8:47:b8:4b:95:83:c2:7b:b5:
27:9f:0d:e3:f8:fd:93:dd:1c:1f:a7:fc:90:46:05:01:8a:80:
2f:84:fe:53:69:0a:e7:1b:4e:fb:6a:77:5d:09:7f:34:d2:57:
65:e3:24:c9:3a:bc:05:ba:ec:96:93:be:db:5c:10:4b:1a:fa:
34:c2:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:24 2026 by rpki-client