This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: Z4ozGHcGXwUzWOcNfGD9ydcJGhd4mvPoX9JQy91/XsM=
Subject key identifier: 3A:5E:3D:BC:8B:B0:C9:84:84:2B:F5:2B:FA:99:4D:25:21:C1:61:36
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019C424640BFF6F2C4E976F37E87E1AFB8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 14D0
Signing time: Mon 09 Feb 2026 12:00:26 +0000
Manifest this update: Mon 09 Feb 2026 12:00:26 +0000
Manifest next update: Tue 10 Feb 2026 12:00:26 +0000
Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: Z3S96/FNFBiU+DAh7X/HvXlzGVXGmR1TQhllNRxrzOk=)
2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:40:bf:f6:f2:c4:e9:76:f3:7e:87:e1:af:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Feb 9 12:00:26 2026 GMT
Not After : Feb 10 12:00:26 2026 GMT
Subject: CN=3a5e3dbc8bb0c984842bf52bfa994d2521c16136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:60:04:25:71:63:67:b2:fc:eb:bc:b9:94:
e9:96:7a:3d:29:13:3f:15:b4:df:d8:96:66:d6:fd:
43:66:69:20:04:27:67:d0:25:c6:6b:64:fe:06:d0:
23:4c:e1:06:d8:0f:7b:d8:c3:4e:98:cd:d2:76:92:
4d:b5:a1:14:58:8b:c6:9e:b2:45:1a:f7:f2:1c:75:
58:e2:6a:82:77:f0:1c:cf:8b:ce:d6:78:cb:74:fb:
ed:f4:bc:8f:6e:6a:6c:6a:ee:98:11:be:83:80:6d:
80:de:97:c2:03:9b:d2:f9:23:d7:3f:61:a9:78:1f:
1b:c4:a2:d8:77:f0:48:36:3c:84:67:27:42:a0:8c:
aa:4f:bb:54:2f:12:ca:24:75:a8:1e:45:d7:74:61:
ab:a5:3a:9e:9a:ca:d4:72:37:d2:63:11:99:72:46:
94:33:65:98:c6:1c:6b:79:36:05:0b:86:a5:29:f0:
12:ab:67:24:9f:e8:ba:0c:eb:6b:ac:c6:8f:6e:ba:
fd:1c:4b:dd:58:d5:05:6c:eb:7a:6a:6b:05:73:70:
5b:3b:f0:1f:ce:23:5c:99:6f:38:b8:bd:ff:9b:6d:
00:4e:6f:c0:82:07:a3:4c:66:3e:66:93:f2:98:30:
56:13:50:a5:f5:40:38:4a:5c:1e:15:b5:91:be:49:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:3D:BC:8B:B0:C9:84:84:2B:F5:2B:FA:99:4D:25:21:C1:61:36
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:46:aa:ce:56:eb:5c:2b:19:4d:0a:06:3c:8b:79:59:77:ed:
7c:2d:07:94:c8:68:5e:8a:e0:ef:0b:dd:88:1c:4e:a9:ab:60:
07:16:f4:ae:54:80:67:86:9b:78:e4:93:51:51:78:dd:fe:19:
ff:ac:a2:00:14:cf:20:72:16:d0:ee:5f:83:9e:f8:44:8e:4c:
9e:cf:eb:c1:6d:ce:04:b0:c6:01:c3:91:c6:cd:63:3e:29:00:
39:df:83:97:b9:41:85:18:16:a7:59:af:63:52:9b:4f:7f:d7:
48:d7:f5:3f:13:89:f8:cb:72:3e:4e:64:7b:a7:dc:63:20:fa:
5f:d9:d6:7b:3d:53:42:4f:14:50:40:f8:82:0d:02:97:65:cd:
f8:bd:1a:ee:da:f1:6a:ff:b1:59:03:37:db:50:71:31:70:eb:
5a:70:b0:97:ab:95:81:4a:c3:b2:28:77:97:c2:8e:8f:25:7a:
85:1a:05:a8:af:53:75:f2:37:26:ca:63:e5:c8:92:be:f0:b9:
d5:54:e0:30:09:6a:73:d0:bc:b7:54:a4:5f:30:ea:74:14:d2:
31:1b:bb:50:65:cf:0a:94:1c:d1:71:a0:31:0a:38:57:ec:21:
f6:c8:2e:7b:bd:e6:bd:25:43:d4:b5:96:37:78:76:bc:a3:ef:
3b:1f:9e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkC/9vLE6Xbzfofhr7jjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3
MmY0NWMwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD
EygzYTVlM2RiYzhiYjBjOTg0ODQyYmY1MmJmYTk5NGQyNTIxYzE2MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5FgBCVxY2ey/Ou8uZTplno9KRM/
FbTf2JZm1v1DZmkgBCdn0CXGa2T+BtAjTOEG2A972MNOmM3SdpJNtaEUWIvGnrJF
GvfyHHVY4mqCd/Acz4vO1njLdPvt9LyPbmpsau6YEb6DgG2A3pfCA5vS+SPXP2Gp
eB8bxKLYd/BINjyEZydCoIyqT7tULxLKJHWoHkXXdGGrpTqemsrUcjfSYxGZckaU
M2WYxhxreTYFC4alKfASq2ckn+i6DOtrrMaPbrr9HEvdWNUFbOt6amsFc3BbO/Af
ziNcmW84uL3/m20ATm/AggejTGY+ZpPymDBWE1Cl9UA4SlweFbWRvkkRXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpePbyLsMmEhCv1K/qZTSUhwWE2MB8GA1UdIwQY
MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt
ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4
LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUaqzlbr
XCsZTQoGPIt5WXftfC0HlMhoXorg7wvdiBxOqatgBxb0rlSAZ4abeOSTUVF43f4Z
/6yiABTPIHIW0O5fg574RI5Mns/rwW3OBLDGAcORxs1jPikAOd+Dl7lBhRgWp1mv
Y1KbT3/XSNf1PxOJ+MtyPk5ke6fcYyD6X9nWez1TQk8UUED4gg0Cl2XN+L0a7trx
av+xWQM321BxMXDrWnCwl6uVgUrDsih3l8KOjyV6hRoFqK9TdfI3Jspj5ciSvvC5
1VTgMAlqc9C8t1SkXzDqdBTSMRu7UGXPCpQc0XGgMQo4V+wh9sgue73mvSVD1LWW
N3h2vKPvOx+ePw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:36 2026 by rpki-client