This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: JneNnWwpGsPork0O6aDDN92gTcJ3meAAcUNFYpCZxRI=
Subject key identifier: 6A:FF:10:D9:BF:C1:1C:69:74:1B:54:2B:F9:36:29:C3:E6:AD:9C:19
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019C427D46DD8D44F464B238499852C5A9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0B80
Signing time: Mon 09 Feb 2026 13:00:32 +0000
Manifest this update: Mon 09 Feb 2026 13:00:32 +0000
Manifest next update: Tue 10 Feb 2026 13:00:32 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: YSi/1LQbBLOA53tZ6IrXM/hq5/xodc56hSDfATynf0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:46:dd:8d:44:f4:64:b2:38:49:98:52:c5:a9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Feb 9 13:00:32 2026 GMT
Not After : Feb 10 13:00:32 2026 GMT
Subject: CN=6aff10d9bfc11c69741b542bf93629c3e6ad9c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:d3:d5:3c:e9:97:82:22:df:d5:66:19:f4:
2c:01:5e:3a:c2:9a:fb:d4:f9:d5:5f:01:4e:ff:8d:
08:6c:70:b2:a2:4b:f7:43:be:e1:90:c9:05:14:1e:
02:66:e0:39:5c:a0:ff:dd:e2:5c:87:0c:2a:5f:ad:
d1:b4:06:91:ba:25:94:0d:4d:a5:98:ae:e1:3b:e2:
a0:7d:5f:09:c9:bb:8c:a2:4e:72:e5:3a:fd:ab:23:
fe:0d:e6:22:06:c1:ff:8b:9d:8a:27:d1:ac:b4:7e:
4c:10:45:f2:1b:91:6d:02:77:70:21:a1:14:c5:73:
66:aa:a9:40:9f:01:eb:c1:48:08:51:c6:d2:5b:c0:
5a:21:35:e6:12:ce:c1:ac:c9:61:c3:c9:53:3d:90:
77:9b:a9:75:72:12:bf:16:72:c0:52:96:c3:3f:eb:
4e:a2:34:6c:c3:0e:cf:62:c0:a0:0b:f5:fb:6a:b6:
b6:ed:a8:5c:dc:dc:5d:86:d4:90:09:ee:b9:61:fc:
3a:94:af:df:c6:6e:77:da:1f:60:53:01:57:87:e5:
d4:e2:28:de:04:63:58:b0:84:e3:31:ee:df:b9:aa:
4d:5c:50:35:1f:02:d7:55:10:9a:41:cd:03:6a:d3:
de:69:17:8e:5f:6b:02:b3:82:84:f6:03:cb:85:cd:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:10:D9:BF:C1:1C:69:74:1B:54:2B:F9:36:29:C3:E6:AD:9C:19
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4c:c5:13:05:15:7e:7f:e6:be:f6:7d:da:0e:fb:74:2c:1c:
d9:23:3c:8a:0b:b7:f0:60:d0:6f:f5:d9:4e:3f:55:3c:79:81:
82:77:2a:49:99:b9:93:a4:27:4b:ca:9d:c0:6c:d6:69:cd:ab:
e8:03:55:22:0b:e5:da:3d:b9:3a:75:00:60:03:c5:54:75:4e:
6d:5e:17:e3:ae:da:03:af:48:97:2e:3b:4d:59:6e:6f:89:0f:
0e:26:ad:a7:fd:18:f3:f0:1a:ca:22:73:de:40:91:c1:cb:b9:
cf:e8:08:e8:fa:2a:e2:92:0f:36:07:69:02:05:7d:fa:32:fe:
04:a4:f0:8b:8c:56:d4:47:8e:fc:fa:7a:76:59:58:66:92:1f:
18:85:15:b8:b7:c9:96:83:08:27:83:53:9a:49:b5:da:66:20:
e3:6f:aa:77:2b:68:8e:61:5e:ec:58:a0:ac:cc:60:14:ec:02:
0c:1f:0a:d8:37:66:c2:aa:dd:50:1d:26:14:34:bd:33:2f:5c:
c0:c5:eb:27:da:bf:c0:ab:c5:fb:5e:50:48:fa:29:a8:d8:87:
d0:27:d2:15:29:58:a9:b2:c9:48:87:97:8d:28:ab:c0:49:8a:
84:79:f3:b3:b4:73:49:03:a1:7e:3d:90:34:c5:19:5a:10:fb:
8d:1f:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:10 2026 by rpki-client