This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: j0xxg7qgKWw0hNCjRYibupRf+sEsdikejOh1IH+VGoY=
Subject key identifier: F1:75:6A:B4:97:91:3E:E8:32:16:5B:18:A1:2F:6B:71:0C:C9:2C:32
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 019C439068CB4F42B94BD7F0741A91D52FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 120B
Signing time: Mon 09 Feb 2026 18:01:03 +0000
Manifest this update: Mon 09 Feb 2026 18:01:03 +0000
Manifest next update: Tue 10 Feb 2026 18:01:03 +0000
Files and hashes: 1: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (hash: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: /5VPCkZ/K8So/LOHZ4pAEyCjy28ICUXBqW5eEJy6WxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:68:cb:4f:42:b9:4b:d7:f0:74:1a:91:d5:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Feb 9 18:01:03 2026 GMT
Not After : Feb 10 18:01:03 2026 GMT
Subject: CN=f1756ab497913ee832165b18a12f6b710cc92c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:11:03:9c:65:b9:4b:98:2a:4d:50:f5:97:
46:a2:61:8e:53:74:a3:f5:d6:13:a0:0b:9d:37:f5:
74:16:45:35:ce:a4:42:88:5c:62:6a:e1:1d:82:1f:
66:4f:78:9c:2e:01:28:f2:a5:83:47:2a:8b:9e:e7:
5e:09:b7:cd:53:43:a8:c4:b7:ab:bc:f0:db:00:db:
99:3a:9b:87:4a:f8:6e:58:94:bf:7c:21:a0:fa:16:
ce:04:75:8b:d3:9b:83:92:58:1e:fd:cf:d0:6a:22:
3b:22:69:27:f1:1c:92:f8:da:2b:96:3a:21:d7:de:
d3:c5:ed:00:8b:fa:9f:1f:e5:0d:e5:d8:2f:9d:65:
74:cc:ab:9a:f4:81:2a:af:10:d8:eb:3d:09:8f:85:
5e:89:40:40:71:e3:72:5b:f9:c8:aa:82:7d:fc:77:
51:d6:01:2a:12:77:8f:4d:19:a1:3c:60:10:48:76:
c0:8a:cf:94:6c:cc:1d:29:4f:11:ac:3c:e5:2a:ec:
46:b7:0b:e6:95:4b:90:51:2e:3b:ea:ab:eb:79:b0:
3f:b2:56:b6:2a:08:6a:39:03:e7:2f:fe:16:06:cb:
64:81:23:40:62:0e:ed:95:6d:78:03:61:88:9b:d6:
88:ed:9d:88:44:73:1e:18:d4:d1:9a:64:c6:72:cd:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:6A:B4:97:91:3E:E8:32:16:5B:18:A1:2F:6B:71:0C:C9:2C:32
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:39:af:47:3e:f5:5f:6e:d9:33:28:3e:e1:f1:43:cb:0b:
c0:1f:db:8c:ff:38:fd:66:2c:5f:db:38:2d:f0:b7:9b:69:b1:
c2:1d:05:5d:68:ad:bf:d7:ff:a3:cf:66:6d:a8:5e:b1:3d:a2:
ba:6b:06:50:cf:24:88:fe:cc:46:e8:24:33:7a:a3:bc:3f:3c:
01:6c:42:a6:84:cb:7e:d2:c5:6a:2e:56:11:4b:bf:a3:34:74:
63:29:79:cc:be:0c:ff:af:54:6d:f9:50:49:37:2c:c7:82:ab:
34:9c:05:31:46:60:a3:55:23:ca:af:74:3d:d1:96:b1:b7:6b:
0e:18:1c:77:5d:2e:93:73:6e:0e:86:d9:10:22:f0:a9:78:10:
10:ec:a2:8d:b4:2c:4a:d4:27:37:90:bb:75:48:db:e6:30:17:
d4:2f:b3:8d:14:5b:ed:e3:78:69:e2:b8:6f:2d:0c:53:16:f3:
9a:68:89:98:61:e6:14:82:5f:fd:24:2e:f0:ac:b0:52:a9:bf:
07:7f:b0:6e:7e:33:1e:9b:86:bb:35:f0:de:f7:1f:7c:32:7e:
35:0f:5b:f6:02:1f:85:bb:fa:19:d8:37:61:0a:34:9c:ba:d8:
63:77:1c:7b:31:2b:c8:1f:62:24:45:fd:11:c5:1c:9e:93:71:
70:58:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:24 2026 by rpki-client