This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: uVmiSdNk0VdY0IH7fwP24iWDjXvycz5ZlFgB0aVHwnA=
Subject key identifier: ED:5E:E9:0A:8B:F2:62:C8:49:0B:4A:B2:23:14:EF:67:3B:36:47:AE
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 019C438FF3A25BAC6CA5AD5C940D0B32AADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 18:00:33 +0000
Manifest this update: Mon 09 Feb 2026 18:00:33 +0000
Manifest next update: Tue 10 Feb 2026 18:00:33 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: bCCGcdpvHVAJYJNH/2W6OTmykBBXnyFIjpbRupdm/U0=)
2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:f3:a2:5b:ac:6c:a5:ad:5c:94:0d:0b:32:aa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Feb 9 18:00:33 2026 GMT
Not After : Feb 10 18:00:33 2026 GMT
Subject: CN=ed5ee90a8bf262c8490b4ab22314ef673b3647ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:c6:1f:20:bd:b3:b5:68:6f:0b:a1:3e:99:
c9:b2:14:40:2b:aa:95:c5:a0:ee:40:e8:3f:b7:a3:
e6:6c:29:e5:a1:37:08:5c:e9:1a:39:c8:e3:32:3c:
f9:32:3f:e3:e7:44:45:39:54:c6:0e:d3:86:8e:e5:
dd:e4:1f:3b:d8:7d:3b:da:8e:31:1d:9a:97:d9:4f:
49:d6:12:1c:ca:b1:93:8d:22:8e:4d:98:1f:ce:a3:
eb:8c:5c:c0:dc:aa:cc:07:16:e2:e9:a9:bb:1b:d8:
d4:d5:84:98:a3:14:60:57:15:81:45:93:40:fb:a5:
b9:05:d9:f2:83:a2:df:a9:2a:df:24:1f:36:3e:1b:
e8:70:94:d8:da:ad:9e:96:bb:a5:75:df:85:06:94:
f4:7f:11:34:14:6e:52:13:72:7f:66:47:ce:ec:3c:
74:36:81:7f:d2:c7:da:9d:7c:f7:19:80:62:c0:9f:
9a:62:5b:5f:2c:11:a0:e6:4a:53:48:93:2c:4d:76:
e6:c7:81:28:35:4e:25:93:f9:10:e8:56:7e:72:0f:
0b:8e:df:ba:e4:6a:a2:e3:72:c9:06:08:0a:ce:2e:
d0:7a:c4:48:db:b5:44:ad:ff:23:a5:91:86:53:a8:
51:73:7c:1d:31:bb:06:ca:16:23:f9:16:d2:38:da:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:E9:0A:8B:F2:62:C8:49:0B:4A:B2:23:14:EF:67:3B:36:47:AE
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:20:56:a6:71:e1:e1:fd:5d:81:00:df:71:84:10:9a:b9:
7f:80:77:98:99:ac:b0:2d:7b:aa:f4:aa:40:c0:e8:1b:90:1f:
fe:f6:59:c6:b4:b4:46:ab:96:ef:9e:b0:12:50:f2:44:03:45:
4e:9d:f6:7e:d7:d7:54:54:03:fd:97:13:36:fb:ee:f7:1d:1d:
49:c4:93:b7:13:ee:38:95:de:aa:50:47:84:8d:a0:7d:aa:f1:
f1:e0:e4:b9:5b:c5:71:25:d9:62:d3:24:33:69:69:f0:e4:45:
68:a1:70:78:bb:3c:0f:bb:67:b6:aa:cf:8f:97:ae:11:ec:9d:
c9:26:15:31:9b:b2:5d:ef:7e:a0:7e:19:86:fa:a5:7b:9b:25:
4e:50:70:dd:be:9d:24:ba:56:4a:b7:1c:e9:53:ed:9e:4b:a4:
2a:81:c7:6f:e7:b3:06:be:c3:f9:f7:30:6b:eb:f8:3a:48:52:
a1:fc:5d:96:49:fe:37:fd:50:1f:8b:ad:85:79:7a:09:98:80:
db:3e:a9:24:80:15:e6:00:d6:b2:4c:d3:39:33:a1:71:3d:64:
1b:0b:f2:b4:cd:ba:b6:60:38:d6:d5:f6:60:34:a4:d7:03:c6:
1e:12:ef:ec:e2:24:04:2b:59:b0:73:6e:b2:13:24:b7:00:a6:
23:72:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:48 2026 by rpki-client