This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: gYkPr6CERGJgdkBfLRkd3UrrfY7K4u4WckzWhlAHHZk=
Subject key identifier: 6B:BB:4E:AD:9E:05:98:C8:14:B0:B2:AB:25:54:15:90:AD:65:5C:61
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 019C432232575AD6C2D7510C1B03A283F03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 16:00:40 +0000
Manifest this update: Mon 09 Feb 2026 16:00:40 +0000
Manifest next update: Tue 10 Feb 2026 16:00:40 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: /Rj9cfH89SD8ZbdvjuHUYAxWFzgjS2Y6iOtf0Uj07HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:32:57:5a:d6:c2:d7:51:0c:1b:03:a2:83:f0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Feb 9 16:00:40 2026 GMT
Not After : Feb 10 16:00:40 2026 GMT
Subject: CN=6bbb4ead9e0598c814b0b2ab25541590ad655c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:42:c2:95:75:c4:1f:c2:c8:7d:43:6f:15:
89:fe:23:62:be:fa:e7:10:8b:6f:27:02:f1:b3:3c:
15:f4:64:4b:1f:d7:10:8c:4b:cc:08:ae:14:9f:7d:
8c:c9:de:3e:f3:5a:ec:ff:99:73:64:5e:b2:7d:92:
4f:61:ee:6d:5e:53:aa:9b:ad:22:c9:03:cf:18:18:
65:20:37:d3:4f:6a:b3:12:08:ee:b9:8d:19:f5:11:
c6:07:52:3b:91:8e:50:f7:a2:b0:c1:21:72:0a:c5:
f1:94:12:70:ac:af:04:47:f6:26:29:c1:64:fb:1e:
e9:6a:0b:8f:97:51:09:86:04:71:2d:aa:78:f7:de:
3d:78:a8:dc:f0:b5:76:82:d9:ce:a4:96:7d:13:a7:
da:8a:b0:58:20:7f:db:91:43:55:3e:bb:62:66:3e:
ec:bd:58:94:dc:53:9f:3d:0c:f9:d9:75:99:ab:ef:
18:0c:83:03:6f:7c:47:46:3e:f0:d6:30:d2:aa:0f:
69:0b:dc:51:1a:a8:74:19:3a:27:5a:78:b7:07:27:
3c:99:07:38:34:98:3c:89:e7:d5:fb:4f:fd:c7:12:
3e:64:71:79:ff:22:9a:79:b1:67:31:78:c4:e0:13:
ea:2a:6d:fe:5a:ef:f9:57:f5:32:94:47:c9:b0:62:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:4E:AD:9E:05:98:C8:14:B0:B2:AB:25:54:15:90:AD:65:5C:61
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5c:9b:09:3b:50:26:82:9e:ff:39:0c:6d:5e:5b:08:78:92:
ce:be:9b:09:43:5a:7e:a8:14:71:37:74:dd:54:ba:97:6e:90:
8d:29:8d:fb:a7:ee:6f:af:02:2e:b3:e8:bc:84:e5:3c:83:c2:
b0:30:ed:52:6a:31:4e:ef:f7:ff:01:b9:16:62:3b:ea:48:31:
0b:3e:53:91:71:af:8b:22:60:ee:95:e0:33:a9:63:27:15:39:
29:7d:1f:d0:97:ec:41:b2:c5:5d:89:44:e5:89:e8:14:7e:00:
23:02:1f:b4:e6:56:01:eb:8c:a9:b4:4d:e0:e7:dd:8e:57:54:
53:bd:45:95:d6:90:ce:67:eb:10:67:f6:ac:1f:bb:99:d0:4c:
96:59:55:cc:0a:f5:5c:01:fb:45:b7:46:49:16:66:8e:f5:22:
34:c4:f1:86:f8:e0:35:30:5c:85:96:f2:96:dd:44:05:93:b3:
3f:a6:54:e2:c2:a4:8b:37:82:b4:63:e1:d4:b1:c0:68:8c:f0:
63:a4:32:92:ad:49:74:47:b4:cc:15:60:f8:99:31:c6:35:db:
eb:35:c2:19:75:18:98:30:6e:5d:c1:5c:39:85:5f:d5:10:93:
33:cb:19:99:c3:da:ae:d6:1d:d3:67:33:2c:a1:23:87:c7:0e:
33:fc:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:21 2026 by rpki-client