This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: PEfsMt939804U3w17loiKwMwSK8cMfwl5jgbZ7WuItc=
Subject key identifier: 94:F0:E8:37:9B:E4:5A:94:F4:C8:C6:C7:13:D0:5B:DD:26:FA:3B:EE
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 019C44A2CE415D844ED50DBD6DDE6AC49D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 23:00:45 +0000
Manifest this update: Mon 09 Feb 2026 23:00:45 +0000
Manifest next update: Tue 10 Feb 2026 23:00:45 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: GxRVrcGQcx8tee8erXAOSojRgBrkLoazztS4ovth2lY=)
2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:ce:41:5d:84:4e:d5:0d:bd:6d:de:6a:c4:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Feb 9 23:00:45 2026 GMT
Not After : Feb 10 23:00:45 2026 GMT
Subject: CN=94f0e8379be45a94f4c8c6c713d05bdd26fa3bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:61:75:22:ff:f7:7a:f7:5a:a6:6d:bc:8e:
50:09:86:4c:67:40:e7:e8:f9:94:25:52:6c:79:bb:
ab:8b:00:d8:47:f8:16:8f:d8:ee:8e:0d:fd:dd:74:
44:3b:39:2c:ce:d7:a8:21:c7:f4:a0:1e:6d:23:cd:
fb:25:5b:d7:b4:2a:60:2c:cd:10:d4:82:e2:77:c3:
c7:8e:f8:4f:e3:98:9f:d2:20:7e:ad:9a:4f:d8:41:
9f:95:69:a4:dd:5b:71:5c:38:43:98:f4:13:c5:a7:
ba:f2:36:e1:3f:38:e5:9a:3e:73:69:60:2e:d2:88:
de:02:6b:5f:af:01:5e:17:95:0b:7c:06:67:b5:18:
3c:76:fb:7e:7a:bb:6a:f6:99:04:84:cb:8c:53:c5:
fd:58:c4:7c:95:62:a0:d0:e8:79:be:95:5c:13:58:
28:75:74:b0:4e:42:c3:b5:7b:f1:b1:1f:f9:56:53:
64:a1:04:48:14:c4:84:37:e8:62:3f:9d:e7:df:a1:
53:bb:8e:f8:29:5f:56:a2:40:fd:e8:38:a1:b0:5f:
29:94:a7:fb:50:82:fd:d4:55:20:cf:7e:95:20:11:
78:f7:ab:35:f6:28:42:4d:90:4a:c8:ed:0a:b8:14:
fc:67:8f:d6:90:8f:ba:6c:bf:eb:0c:25:3b:51:7c:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:E8:37:9B:E4:5A:94:F4:C8:C6:C7:13:D0:5B:DD:26:FA:3B:EE
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:51:53:a5:c2:eb:d2:7e:d6:71:2e:35:d4:5c:ac:37:ef:3f:
01:3e:c7:b8:9b:c1:3d:e1:81:b4:64:25:4d:e1:2c:9c:2f:0d:
74:77:d5:17:9c:a6:c2:ec:25:5c:dc:4e:19:0d:ee:cf:c2:e2:
02:c8:47:0c:0d:9c:e9:ce:25:76:45:8d:2b:30:05:60:70:79:
26:97:28:53:ab:1b:ab:f3:a2:f4:1a:42:ae:cd:d3:be:5b:eb:
4b:97:12:c1:51:76:68:81:35:08:79:94:88:a5:81:bb:ea:81:
27:80:01:2c:06:d0:ea:3b:1e:c8:ab:d3:b0:96:57:d3:51:0b:
be:cc:41:09:58:c1:cd:c9:59:51:21:94:0c:86:37:da:1b:44:
bf:0e:a9:24:3b:bd:2e:f2:80:8b:be:c4:a7:cd:46:f1:01:08:
d9:1f:36:b6:1e:b7:eb:5d:68:e3:97:6f:28:45:94:c5:52:70:
2d:fe:f0:4c:63:6b:40:3a:0e:33:b4:b0:7c:f4:bd:d5:10:7f:
7c:60:93:1b:91:08:d7:ff:4f:ba:8d:87:ef:ba:de:04:0e:18:
95:bf:ad:18:33:a6:a8:68:4c:a8:37:9b:e6:c8:81:c9:fe:7e:
ef:c9:28:84:5b:ad:b3:c8:1c:8d:b3:a9:c8:32:b4:b1:bb:6f:
fe:a3:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:56 2026 by rpki-client