This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
File: 79pPUsK3lM5LX38h4ySxubEGXRw.mft (raw, json)
Hash identifier: qmVYO2t9agIdCGrf5lvy25jR9jehIwIKgl2qL26Kmpw=
Subject key identifier: 68:B9:5A:F3:CB:0A:30:74:65:40:BD:20:95:0D:48:64:22:D6:D9:FD
Authority key identifier: EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
Certificate issuer: /CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
Certificate serial: 019C435912FD2627DAFF219392FE43897120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
Manifest number: 28
Signing time: Mon 09 Feb 2026 17:00:36 +0000
Manifest this update: Mon 09 Feb 2026 17:00:36 +0000
Manifest next update: Tue 10 Feb 2026 17:00:36 +0000
Files and hashes: 1: 79pPUsK3lM5LX38h4ySxubEGXRw.crl (hash: FJOHCoKJ1Eob6ag1ImCsfyvaBushE0I0LPy4FiLncuo=)
2: swO-HTW4j5qDDjQOOjuNXgqW8xU.roa (hash: XU3HpZ66wu/qbtiav87O6TEaXO9w/HkLcs/bSmMTwpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:12:fd:26:27:da:ff:21:93:92:fe:43:89:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
Validity
Not Before: Feb 9 17:00:36 2026 GMT
Not After : Feb 10 17:00:36 2026 GMT
Subject: CN=68b95af3cb0a30746540bd20950d486422d6d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:12:77:f6:1b:9e:6a:93:7e:db:af:26:f2:
02:dd:44:7e:14:cc:20:f0:89:f1:3e:62:7f:3b:35:
d0:ff:ff:d7:95:37:93:5c:14:c9:64:9f:0e:9a:f3:
34:44:c8:09:12:e5:9c:d9:42:d5:0e:2f:ec:03:9e:
b1:eb:69:0a:5e:7e:40:e7:72:56:6a:6c:51:f9:b5:
79:0d:41:1f:60:92:e6:6f:ea:7c:d2:cb:6c:4d:14:
aa:8f:86:bc:5e:c3:94:49:30:72:aa:41:39:6d:c8:
97:0c:1e:f0:ae:ac:73:dd:4b:56:15:86:5a:aa:c1:
6d:c4:f3:0c:ad:ad:b2:38:6c:9e:ec:5b:f4:0f:d6:
6e:ca:33:af:92:ff:9e:b5:94:fd:34:85:d5:38:34:
2b:56:23:3c:f3:1f:23:c7:5f:2d:e0:67:2b:5b:d7:
29:c8:37:ef:97:e0:4c:39:72:4f:4f:6e:a5:84:22:
97:e4:a0:2e:51:76:e4:4e:ef:cf:a4:ef:72:0b:84:
36:0c:c8:ee:8e:af:2f:99:75:9a:a1:bc:a5:7c:c4:
45:7c:c7:7f:d5:57:cc:64:35:40:d1:87:53:e4:20:
b4:54:f7:c9:d6:95:61:2f:9f:65:2a:9e:bb:9f:1f:
cf:7a:60:d2:0a:25:b4:f3:a5:e2:47:37:23:d1:99:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:5A:F3:CB:0A:30:74:65:40:BD:20:95:0D:48:64:22:D6:D9:FD
X509v3 Authority Key Identifier:
keyid:EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:6f:36:b1:81:81:c9:1a:1a:c6:e2:c3:d0:ba:93:6e:b5:
4b:b1:45:36:01:55:53:d9:e4:f5:56:f8:2a:4e:df:bd:2b:9c:
90:ff:4e:4f:8a:4a:94:a8:6a:25:e8:6a:68:d3:79:fc:17:ae:
f2:75:f0:00:30:01:92:70:dc:d4:a1:81:72:f8:58:3e:5f:37:
6e:91:dc:c9:28:ee:57:48:f8:1d:25:73:d3:3c:90:2d:74:69:
66:ac:fd:ab:68:b3:5a:e0:c1:a6:60:0b:46:89:cb:c6:70:77:
00:1b:b0:74:e1:58:5c:37:42:0b:02:e4:c2:2e:19:2b:4c:91:
14:4d:69:11:04:56:87:37:f3:31:40:7f:71:5e:01:28:f6:96:
09:0a:f5:55:e3:d2:71:56:f3:18:2f:c9:77:55:fd:42:70:50:
47:d3:0f:b5:cb:bb:9a:02:3a:e9:1d:59:09:f0:a6:f1:03:2b:
f1:2f:00:c3:b5:42:b0:44:78:4e:de:1c:10:c9:a5:a4:97:e3:
f4:32:7b:37:16:57:bc:1e:72:40:72:10:ff:2d:bc:e9:c5:c7:
7a:81:02:3d:79:5d:83:3e:6c:a5:25:c1:a6:7f:f3:ec:31:08:
e7:d4:86:10:7e:ed:cb:d6:ee:0a:57:63:e9:b2:67:e5:10:03:
0d:ff:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:26 2026 by rpki-client