This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: 3aY8Tkv0mBq8sgRRvDWnE3yRMWF96+ff+N6Pc+cDX6M=
Subject key identifier: 6B:C9:45:23:C6:72:41:AB:52:80:2D:69:BA:DE:A1:2C:81:95:9E:1A
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 019C427D51DAB5C11D0898F6AD31BC1E75DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0FAB
Signing time: Mon 09 Feb 2026 13:00:34 +0000
Manifest this update: Mon 09 Feb 2026 13:00:34 +0000
Manifest next update: Tue 10 Feb 2026 13:00:34 +0000
Files and hashes: 1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 5/epFqCuQtFfDkX+F9UbISsAXf0+FPf1aRpH4kbEHGY=)
2: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (hash: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:51:da:b5:c1:1d:08:98:f6:ad:31:bc:1e:75:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Feb 9 13:00:34 2026 GMT
Not After : Feb 10 13:00:34 2026 GMT
Subject: CN=6bc94523c67241ab52802d69badea12c81959e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:9a:55:a6:9d:3d:af:2d:7f:69:8a:d9:dc:
1f:b6:03:d8:64:c9:a9:3f:8f:d4:b9:01:22:2e:ef:
c0:03:06:b1:1f:a0:cf:53:cc:06:7e:8e:9a:38:ee:
58:6b:93:ae:54:fb:40:e4:9b:20:b1:37:bb:d0:95:
58:bc:2c:0c:50:41:6b:99:2c:b1:62:e8:47:2f:32:
14:8a:a0:cd:99:1e:7e:c7:5d:fa:53:dd:84:d4:92:
b7:d4:ed:bc:ae:38:30:bd:9d:7b:50:4f:48:be:9b:
f6:a0:93:40:42:87:7c:de:4c:c7:4e:51:99:b3:9f:
d4:b1:5c:ce:a3:d2:60:0b:fc:a5:74:e1:f8:9f:fa:
0a:c2:af:d7:df:b0:15:db:c7:62:24:79:d1:d0:bd:
82:b3:36:c0:bf:39:0a:e6:df:d5:0f:99:17:61:3c:
89:79:42:c2:16:5c:e2:88:96:7c:e4:fb:7f:6e:c7:
b0:d0:c3:0a:fd:09:a4:34:8e:96:90:bd:81:05:af:
7e:1d:e6:55:69:f8:c4:26:47:d6:1c:18:a7:f5:c6:
d5:e0:df:d7:c1:6e:31:a4:47:8a:b3:ba:1f:59:df:
7d:32:b1:9b:f7:f6:86:ed:09:15:e7:05:d5:09:ae:
ad:6e:ca:a8:18:f3:62:84:2c:be:3b:54:12:fd:1b:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:45:23:C6:72:41:AB:52:80:2D:69:BA:DE:A1:2C:81:95:9E:1A
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ca:52:dd:7a:16:81:9d:d0:85:93:3f:8d:a9:34:ec:b9:6d:
d3:1c:9f:20:5a:5c:ff:44:d9:64:3a:10:e5:24:d2:7f:20:30:
67:4c:e5:56:e2:92:25:7d:de:d2:b7:a3:1b:45:4f:49:0a:e5:
2b:84:18:4c:01:b5:27:63:d8:73:c0:9f:d0:e2:a2:43:70:a8:
37:ab:21:f2:3b:1c:f4:c5:4d:f9:c0:e6:34:49:17:82:65:3c:
18:12:fe:26:d4:59:a8:9a:92:71:44:83:5d:bd:e2:74:25:9f:
fd:27:f6:96:51:c9:70:f2:64:0d:4e:4b:ec:b7:b3:3b:5a:9e:
db:97:5d:74:9b:b3:7a:ec:2b:e3:63:33:a9:72:28:09:ba:f8:
fc:6e:f3:37:10:2d:58:6c:6a:e9:59:d6:b3:d1:65:3d:68:df:
80:2f:08:2e:ad:1e:ab:7e:06:cf:82:04:7b:a5:9e:e0:73:e4:
43:c3:b2:9d:59:fa:e4:76:eb:3c:59:d8:4c:1b:14:74:71:89:
87:d2:28:52:fa:f5:70:46:54:af:fe:a5:57:98:ee:33:b5:59:
91:6a:23:06:77:be:2c:9c:e7:e3:aa:03:fe:ff:5c:d0:48:1e:
64:db:72:eb:27:dc:6a:6c:41:67:0a:eb:44:f2:35:e1:0d:5b:
98:36:77:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client