This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: /H08Cjisq/sKOgS+6oAWS8aa5HWBHc1ftO6tgpK1nP4=
Subject key identifier: FE:60:AD:30:5A:2F:D2:FC:45:CF:27:90:5C:DC:E0:82:FE:89:A0:DC
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019C42B488A24ED683A5E8151E6C1F426511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0DEC
Signing time: Mon 09 Feb 2026 14:00:53 +0000
Manifest this update: Mon 09 Feb 2026 14:00:53 +0000
Manifest next update: Tue 10 Feb 2026 14:00:53 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: pZ0PeFFCNWxV5lHrN+4vl8xYPXZaVfiqOhEIk4T/25M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:88:a2:4e:d6:83:a5:e8:15:1e:6c:1f:42:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Feb 9 14:00:53 2026 GMT
Not After : Feb 10 14:00:53 2026 GMT
Subject: CN=fe60ad305a2fd2fc45cf27905cdce082fe89a0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:b0:24:a4:2a:fa:f8:a7:86:df:54:29:ca:
13:de:7a:78:32:01:b8:96:d6:73:71:e4:65:fa:18:
59:ad:c1:ae:b1:86:90:6c:1f:bc:cb:0e:69:cd:09:
c5:61:74:8e:2d:84:21:43:15:87:d4:ae:30:90:60:
54:27:3c:2e:0a:bb:87:fc:34:11:e2:76:7e:a1:b5:
d8:38:06:d8:5f:e5:15:42:46:86:0d:79:9e:62:2d:
ac:2d:81:0c:98:76:98:c4:75:8e:8f:9d:80:6f:e7:
8b:4f:15:00:4c:80:e7:32:bd:37:2f:03:08:21:67:
ce:f5:07:47:ae:f0:15:19:30:1e:a8:21:a3:91:e2:
03:62:88:29:cf:7d:d6:18:7f:ba:fb:18:f8:02:db:
20:99:7b:dc:38:4e:73:06:d2:41:a6:7d:e4:5f:47:
08:7f:8c:2f:ab:12:d7:10:04:19:05:44:24:63:da:
75:8e:3d:2f:3f:ee:71:71:95:90:cf:23:ff:ed:71:
e9:57:3d:cc:3c:39:ba:99:04:3b:ff:c4:0f:e8:7f:
ea:b2:5c:74:31:05:9c:fe:c9:04:3a:78:04:82:1e:
b9:5e:32:44:cb:5f:bd:2e:6c:12:84:24:4f:37:5f:
48:a3:a2:6a:84:2d:0e:20:8b:c9:7e:01:e7:ee:63:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:AD:30:5A:2F:D2:FC:45:CF:27:90:5C:DC:E0:82:FE:89:A0:DC
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8d:76:42:1c:34:13:6b:08:c5:36:bf:13:95:c2:33:ed:3d:
0b:05:11:2f:2c:81:c7:04:98:7f:da:89:ef:f2:26:8f:51:db:
cb:31:d5:a2:dd:1e:9b:a2:5e:94:e2:0c:3b:ab:04:69:e5:8d:
85:06:f3:e7:cb:89:52:42:4d:41:39:5f:ba:d5:fd:99:a0:06:
33:f5:cd:12:ad:1c:bb:85:22:a4:5d:25:bf:af:0c:bd:71:31:
d3:9b:3e:5d:dc:04:f3:74:73:70:a7:39:6f:fb:76:e1:c3:7c:
35:6d:55:06:41:90:b9:e9:d4:ff:76:6e:66:d5:94:01:b3:bf:
94:6f:76:67:2e:8d:99:7c:d9:53:07:03:db:1d:2a:c9:1d:41:
ff:42:58:aa:8c:98:0e:c2:bb:4a:43:14:69:f0:a6:d6:c4:28:
82:02:42:5b:c9:93:db:e2:70:02:ab:10:5d:ed:c3:b1:47:03:
fa:0b:19:96:7b:c4:61:e3:93:1a:2b:b8:9a:42:10:c3:a3:26:
a1:8d:05:e7:15:a1:b0:4a:95:ba:ef:2a:8e:97:69:5f:c8:41:
30:6d:47:3f:43:ae:23:c7:5f:af:af:b7:ff:8d:22:d8:47:09:
50:e7:da:c0:f2:3e:f6:f7:21:bf:2b:72:84:6b:50:81:fe:ca:
5b:4f:aa:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtIiiTtaDpegVHmwfQmURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz
ZTllZjkwHhcNMjYwMjA5MTQwMDUzWhcNMjYwMjEwMTQwMDUzWjAzMTEwLwYDVQQD
EyhmZTYwYWQzMDVhMmZkMmZjNDVjZjI3OTA1Y2RjZTA4MmZlODlhMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ2wJKQq+vinht9UKcoT3np4MgG4
ltZzceRl+hhZrcGusYaQbB+8yw5pzQnFYXSOLYQhQxWH1K4wkGBUJzwuCruH/DQR
4nZ+obXYOAbYX+UVQkaGDXmeYi2sLYEMmHaYxHWOj52Ab+eLTxUATIDnMr03LwMI
IWfO9QdHrvAVGTAeqCGjkeIDYogpz33WGH+6+xj4AtsgmXvcOE5zBtJBpn3kX0cI
f4wvqxLXEAQZBUQkY9p1jj0vP+5xcZWQzyP/7XHpVz3MPDm6mQQ7/8QP6H/qslx0
MQWc/skEOngEgh65XjJEy1+9LmwShCRPN19Io6JqhC0OIIvJfgHn7mN1wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5grTBaL9L8Rc8nkFzc4IL+iaDcMB8GA1UdIwQY
MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt
ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw
LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArI12Qhw0
E2sIxTa/E5XCM+09CwURLyyBxwSYf9qJ7/Imj1HbyzHVot0em6JelOIMO6sEaeWN
hQbz58uJUkJNQTlfutX9maAGM/XNEq0cu4UipF0lv68MvXEx05s+XdwE83RzcKc5
b/t24cN8NW1VBkGQuenU/3ZuZtWUAbO/lG92Zy6NmXzZUwcD2x0qyR1B/0JYqoyY
DsK7SkMUafCm1sQoggJCW8mT2+JwAqsQXe3DsUcD+gsZlnvEYeOTGiu4mkIQw6Mm
oY0F5xWhsEqVuu8qjpdpX8hBMG1HP0OuI8dfr6+3/40i2EcJUOfawPI+9vchvyty
hGtQgf7KW0+q+g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:15 2026 by rpki-client