This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File: x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier: 5nGVW4cfqFBTLW0KZKGIf2Aao2fGpugKf5gTs+uKTiY=
Subject key identifier: 70:30:4B:FA:24:E8:11:71:31:CB:DF:98:C5:A4:08:06:F3:A8:94:D6
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 019C41D882EE7A6C79941C57C35B70F53CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number: 1726
Signing time: Mon 09 Feb 2026 10:00:34 +0000
Manifest this update: Mon 09 Feb 2026 10:00:34 +0000
Manifest next update: Tue 10 Feb 2026 10:00:34 +0000
Files and hashes: 1: 832xdcyaMQ6PQMu-wsVkkpXVYxo.roa (hash: nHOliUKQ6iyBnB9SWzQjh04ItWv0KdS+AY354/7+P9s=)
2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: SW8ud9Lxdqfp59Ebuh1RM4UUhelqgq0aEJL4xHoqpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:82:ee:7a:6c:79:94:1c:57:c3:5b:70:f5:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Feb 9 10:00:34 2026 GMT
Not After : Feb 10 10:00:34 2026 GMT
Subject: CN=70304bfa24e8117131cbdf98c5a40806f3a894d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:05:24:aa:d8:67:22:59:15:84:9e:33:cf:
c8:86:13:1f:2f:16:51:51:95:ad:d7:3c:06:85:2c:
cc:56:d8:b9:fa:52:7d:30:b3:68:1d:6d:f8:8a:00:
54:c0:72:b5:91:cf:f1:28:70:63:67:1d:af:c1:cf:
ca:9a:fb:38:45:0a:5c:7a:34:3c:1c:5f:d3:d8:c6:
91:94:98:97:e5:25:d7:ba:8e:64:91:06:64:c4:66:
54:9c:43:d8:3c:bc:8e:ac:d7:5c:49:c6:fb:5d:86:
00:df:be:07:31:a4:10:a6:1f:e8:ce:fc:e6:99:92:
31:ab:8e:cd:93:a0:d0:d5:2f:e1:df:c9:49:58:f0:
0b:4d:6e:3e:20:10:4b:00:9a:64:1c:1a:b4:e3:bf:
00:6c:3b:cd:a6:b4:53:2d:a7:1c:c9:22:a0:8d:e0:
9f:8a:60:23:6d:10:03:07:3d:61:0b:f9:d4:ee:f1:
7a:74:f7:59:69:9e:1c:1a:3d:3e:59:1b:2c:b2:a1:
6d:81:f3:bf:5d:8b:a3:92:ac:86:cc:40:9b:0a:ed:
58:12:a0:e1:1c:11:da:7a:cf:39:d9:1d:07:e9:db:
0b:b0:2b:07:8f:be:f1:1c:eb:0b:04:eb:89:42:ee:
5d:fb:46:42:50:79:f2:aa:9b:77:5c:8b:0b:6f:68:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:4B:FA:24:E8:11:71:31:CB:DF:98:C5:A4:08:06:F3:A8:94:D6
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b2:d4:3d:9b:52:b6:00:07:87:51:16:f3:52:d2:a1:6a:1f:
15:2a:d6:f2:85:6c:78:9f:e2:f8:72:73:bb:09:34:8d:48:f3:
cf:55:42:0f:6f:f3:fb:ce:70:25:69:51:99:91:0b:28:bd:22:
7e:61:07:7f:3f:af:a1:e2:3b:0b:22:13:f9:d7:d6:cb:31:42:
7b:ac:d9:f5:3c:95:5c:f3:45:01:c2:9d:7b:8c:dd:1c:54:9e:
38:a4:f5:44:75:f2:ca:c9:32:6d:32:4b:93:2e:72:fb:3c:1d:
04:35:81:a5:4a:48:c6:c4:3c:0a:8c:83:9f:25:fc:81:3f:68:
f8:9f:fa:be:a8:4e:58:5a:90:b7:e4:f5:8f:27:f5:de:54:29:
7d:d5:be:18:a4:83:10:70:2e:84:c8:5c:b1:3b:44:c7:88:d3:
be:fc:49:25:3c:4e:8c:9c:46:da:b9:0a:5c:bf:32:62:ee:12:
c6:9d:c5:8d:3e:5e:fa:e1:39:5d:88:9d:10:19:9b:cf:a9:7f:
b1:78:4b:70:bc:95:d3:81:a3:d3:a5:70:e3:cf:be:4c:40:23:
0b:23:9c:d0:6e:01:e3:0b:12:63:72:44:d8:5d:54:55:8a:07:
3b:b3:ab:24:61:ce:64:38:d5:a7:12:49:91:27:65:f6:60:61:
48:a6:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:58 2026 by rpki-client