This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: 5qqO0I9EETQnh/LXSQrIuysOZPfWRKJVJcQMj3gxF8Q=
Subject key identifier: 35:CF:59:63:DD:55:C3:52:A0:2A:57:96:33:F4:BE:B8:30:FE:88:10
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 019C44A25C2DA3C7C801815BA03E4D27BE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 0326
Signing time: Mon 09 Feb 2026 23:00:16 +0000
Manifest this update: Mon 09 Feb 2026 23:00:16 +0000
Manifest next update: Tue 10 Feb 2026 23:00:16 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: wrFsT2uw/vroHoUIQFE09KbPjqyXU4Oq0m3J09nxFcg=)
2: gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa (hash: eMyRVFCyce/Miwfnx+0dN7toaAvORgqRwSdJr9xSmK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:5c:2d:a3:c7:c8:01:81:5b:a0:3e:4d:27:be:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Feb 9 23:00:16 2026 GMT
Not After : Feb 10 23:00:16 2026 GMT
Subject: CN=35cf5963dd55c352a02a579633f4beb830fe8810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:4b:57:de:21:4e:6c:35:6a:6d:95:9e:76:
30:65:5e:9f:01:72:ee:a1:8e:97:20:c4:56:b4:76:
10:bb:6a:6b:75:e6:51:d5:ad:68:90:fb:be:7c:b9:
23:c3:71:c2:4c:f3:f2:47:b7:34:b3:01:d8:ff:36:
38:24:7c:50:dd:8e:08:87:c8:48:f6:62:95:5f:4d:
23:b6:2f:76:ee:2d:f9:0c:3c:85:b6:c8:d8:da:93:
ff:3a:36:92:54:86:96:8d:4b:22:33:29:33:a3:f3:
24:e9:e5:08:f9:ef:2c:a3:75:55:a1:86:0b:be:58:
30:be:38:f7:5a:92:31:08:ad:df:a6:d4:37:1a:ad:
36:5b:67:3a:e1:4f:79:c2:04:dc:b3:34:56:85:a8:
ac:1c:fd:f4:0d:0b:47:7b:7a:fb:e5:94:a5:50:e8:
7d:67:86:ad:87:ee:33:8f:ed:a7:bd:9d:26:55:22:
42:9e:ae:e8:56:c6:22:13:12:d3:b1:51:03:09:01:
7e:7e:91:74:b8:f8:18:f2:ff:5e:b0:5e:50:55:74:
d3:00:e1:a6:14:f7:8b:50:34:29:42:d3:9d:06:be:
79:a9:df:8a:5a:26:60:6e:7d:1e:a3:5a:ba:c7:cc:
51:18:d5:8f:db:8e:02:b3:ed:f2:6e:ba:1f:66:78:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:59:63:DD:55:C3:52:A0:2A:57:96:33:F4:BE:B8:30:FE:88:10
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b3:2e:53:b4:72:83:b3:32:fb:d9:ef:61:2b:77:a0:6f:5f:
92:70:5f:8a:e2:43:09:bc:41:9d:fd:07:dd:fd:38:4b:1e:63:
d9:bb:32:a4:29:fa:07:0f:c6:c1:4b:19:10:12:a2:2b:d8:72:
c4:47:03:06:f3:59:4c:15:25:36:30:9f:cd:02:7e:4a:b2:d2:
7a:29:ab:02:78:52:59:88:bb:5c:31:25:d7:c4:19:ad:e4:2e:
cd:36:23:26:7f:0d:03:94:95:9b:d0:62:70:67:ab:f7:8e:61:
0c:6c:3e:48:9b:e4:e5:ec:0b:1d:cb:97:18:e9:4a:a0:28:48:
b7:02:ce:5c:a6:62:13:18:c0:b7:41:cf:ba:90:21:27:57:9c:
4f:50:c0:d9:6b:ac:36:7a:44:28:5f:f9:cd:4e:69:4d:24:31:
f7:9e:c8:1f:17:47:87:a1:08:af:1b:0b:b7:2b:9b:de:ca:20:
cb:f9:fb:47:ec:8c:a6:a5:0c:af:be:55:21:77:5b:9a:28:7e:
af:a1:ba:25:44:c8:2f:6c:3d:7b:18:99:4a:98:76:e9:bb:6a:
46:a5:7a:97:80:9f:8d:cd:46:96:a5:d7:a7:d9:a2:6d:8c:fc:
92:63:a4:21:09:da:98:cb:b3:4b:66:dd:47:af:b0:dd:74:18:
f8:a3:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:33 2026 by rpki-client