This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: 88rD+2KR/m/kmPPIjYNVELx+vy1ckfFvzQfGEGPXZF4=
Subject key identifier: 79:B4:61:B7:3C:5D:66:5F:78:BE:7A:07:FA:30:67:8B:E4:EA:30:EF
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 019C43FDF3E918B92BC76D350BE5FA0A07A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 1015
Signing time: Mon 09 Feb 2026 20:00:42 +0000
Manifest this update: Mon 09 Feb 2026 20:00:42 +0000
Manifest next update: Tue 10 Feb 2026 20:00:42 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: Jo6eoE2IhmKzpyctYs2VpXB5PhgT8+tpzl/MosRIk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:f3:e9:18:b9:2b:c7:6d:35:0b:e5:fa:0a:07:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Feb 9 20:00:42 2026 GMT
Not After : Feb 10 20:00:42 2026 GMT
Subject: CN=79b461b73c5d665f78be7a07fa30678be4ea30ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:6c:5f:9e:08:0c:31:0e:b9:9c:5b:0b:51:
0d:de:8e:c2:7d:46:33:70:3d:32:79:14:bd:a4:01:
6c:e7:3c:85:94:a6:02:5d:5c:f6:64:5b:53:d3:9d:
de:c1:ab:7c:d8:dd:16:c7:23:06:b3:b2:f5:c9:ed:
dd:c3:c2:eb:e4:d7:35:1f:af:29:4a:b1:48:dd:fa:
88:c6:fa:ee:14:d7:42:ac:9d:a7:0f:ed:0f:98:14:
57:8a:e9:65:e9:41:00:26:fe:b4:55:6a:a0:6d:23:
27:66:30:6c:cc:69:67:18:07:f0:36:fe:b0:6d:af:
42:87:c5:af:fd:a0:57:a3:9b:0b:e4:4d:45:e5:e6:
5d:3a:44:38:fd:47:2e:bb:7e:c3:b6:73:cc:47:10:
e7:32:68:89:fc:12:03:30:bf:66:1b:a4:55:4c:46:
1e:75:3e:24:11:6a:33:63:54:ca:83:7c:3d:bc:af:
69:89:f7:1d:aa:6b:9b:b4:f0:66:ec:e7:cb:bd:bc:
ed:ba:e3:2b:90:df:5c:95:07:95:13:0f:8b:2f:b8:
31:f8:0d:71:cd:26:2f:ef:21:03:c7:f4:4a:9e:79:
63:d7:89:e8:e6:b0:c1:a6:5f:29:53:4e:a2:7d:95:
94:05:94:fa:54:4e:32:aa:8a:2f:6c:2b:64:98:95:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B4:61:B7:3C:5D:66:5F:78:BE:7A:07:FA:30:67:8B:E4:EA:30:EF
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9c:3e:85:b6:16:2f:e7:d8:d5:2a:3c:66:ca:c3:3b:15:a9:
50:f6:12:23:cb:3c:2e:dd:46:85:42:00:e7:5f:10:be:6b:35:
9d:af:b6:9d:40:34:a5:dc:81:db:ff:cb:25:7a:fc:b5:5f:eb:
8b:f3:ee:81:a8:40:45:a2:1f:79:ab:81:41:0a:77:8b:36:f2:
b9:04:9e:3a:61:40:e3:bb:36:94:13:8e:40:dd:95:ff:a0:62:
49:98:b4:b1:a3:ad:5c:54:b4:c9:16:d3:e9:2f:11:28:06:58:
51:ce:b8:ab:2f:77:22:ea:36:23:63:b9:76:3c:b7:d5:ee:8b:
46:3d:8d:a4:d4:fa:94:d1:0c:cd:f0:a7:7f:c0:93:93:52:0e:
03:02:7e:f8:20:1a:2f:f2:70:ad:27:89:be:d7:16:ec:df:66:
0d:41:0b:11:e7:09:14:09:32:b5:48:1d:2a:42:91:8b:99:9b:
ec:ba:a5:64:f7:f0:2c:1b:c4:b6:36:02:58:c8:c4:c6:44:5b:
fd:95:7c:06:b3:9e:f5:35:74:2f:a7:17:e4:59:7e:d3:e0:3d:
2c:3d:db:92:7c:ff:0e:bf:e7:57:91:f3:b8:32:67:c9:b8:4e:
1b:fd:b3:ee:a8:ba:3d:04:b7:fe:38:9b:99:51:5a:73:c5:a9:
04:b9:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:57 2026 by rpki-client