This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: QfyjVCFEoN0Rcjxi6b00b2DyYW01cvt0ZrkINm8gIHg=
Subject key identifier: EA:03:E3:55:24:00:10:4E:BD:36:25:B7:ED:E5:73:CF:84:AE:69:FB
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019C420F59C70866799B29E237449C1E813E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 1376
Signing time: Mon 09 Feb 2026 11:00:28 +0000
Manifest this update: Mon 09 Feb 2026 11:00:28 +0000
Manifest next update: Tue 10 Feb 2026 11:00:28 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: oCoAWFoZ/PO14f7OLb8IyunMoW3/O6Nyovk5LJ9mvxA=)
2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:59:c7:08:66:79:9b:29:e2:37:44:9c:1e:81:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Feb 9 11:00:28 2026 GMT
Not After : Feb 10 11:00:28 2026 GMT
Subject: CN=ea03e3552400104ebd3625b7ede573cf84ae69fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:60:57:84:0a:24:83:5e:a3:00:cc:08:ed:
43:ae:ad:70:ba:16:00:b3:72:e2:65:be:5d:04:7a:
08:de:74:6e:74:2c:83:12:bf:ea:cb:74:78:b6:02:
b4:14:3e:9a:6b:92:0f:43:fd:75:26:cb:87:a7:6f:
e5:af:b1:7b:ea:dd:4c:5e:8b:a8:c8:01:09:d1:5e:
c9:91:96:12:2b:92:55:47:13:c6:34:13:7c:80:a2:
3b:e2:f2:0b:59:5c:7b:58:5f:11:3c:48:fe:46:67:
8f:97:8e:6b:3a:51:a3:5f:14:72:a3:b1:29:57:ff:
04:b5:bf:6c:2f:30:08:cf:22:00:14:c2:1a:b5:b6:
b4:21:ca:9e:dd:b0:db:0a:36:f7:49:b6:c7:bf:2e:
b8:45:45:23:8d:ab:b7:b9:fb:a2:43:c7:a4:95:72:
34:b0:e2:59:f2:cf:7d:29:ab:2f:16:49:45:76:dc:
3e:74:a7:1f:70:03:3c:76:36:29:17:ed:e7:d9:a6:
1c:bc:38:12:d0:75:33:69:ce:f4:79:49:0f:7f:72:
07:31:da:28:1e:7d:d6:07:a0:89:13:1e:6a:29:ec:
50:38:4f:76:15:cc:88:ed:0b:09:ac:bc:c3:d8:66:
c6:ad:51:1b:23:eb:bd:2b:71:4e:2a:f6:ff:6a:5d:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:E3:55:24:00:10:4E:BD:36:25:B7:ED:E5:73:CF:84:AE:69:FB
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2d:dd:39:8d:bc:4a:19:69:28:3f:eb:d7:d9:41:5b:88:89:
50:ce:84:c8:ef:f0:c6:58:21:16:45:47:85:76:50:72:94:e6:
02:77:79:d2:08:f5:27:13:d8:84:5f:ea:8b:53:29:5b:fd:0f:
bf:68:cd:11:0f:de:f4:dc:1b:00:0b:ac:32:36:c2:a8:50:e4:
ae:74:6d:ff:96:06:90:7d:75:3e:e6:ad:78:5f:50:21:89:92:
7a:0d:26:1d:4c:78:bb:1b:26:e4:66:d3:7e:04:69:01:78:1b:
39:5a:c5:6d:70:15:86:5b:4d:57:47:1f:b7:52:94:62:a8:c9:
60:c7:36:fb:d1:a8:80:4a:a4:a4:2f:03:50:5f:9c:d5:1b:1b:
45:f0:2d:b5:f6:14:36:5b:17:2d:07:1e:8b:4d:e0:95:80:cb:
4d:47:51:d5:e4:79:14:89:ef:f8:d8:db:81:10:19:76:cb:9e:
b5:ab:92:92:6e:6a:b3:2d:b2:58:80:4e:de:16:db:ec:a2:3e:
a0:e1:78:39:61:8b:44:69:62:4b:a0:ba:b9:3a:fe:e0:73:64:
77:15:d9:23:c0:57:df:9d:48:63:3c:f0:07:d6:97:b5:86:0f:
89:89:18:18:0c:a3:02:5a:9d:f0:b9:81:77:98:1f:f6:7d:da:
6d:15:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:56 2026 by rpki-client