This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: R7fwzWddo5O1Xkjkz1m6Xz3+SnbOkXurMGMFjt2Qkyo=
Subject key identifier: B7:23:23:5C:F4:1B:18:B7:8A:98:0C:D7:A6:83:F5:FA:F9:8E:5D:19
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019C41D86C24B4C2A79FD3B1C3B249371F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0EA5
Signing time: Mon 09 Feb 2026 10:00:28 +0000
Manifest this update: Mon 09 Feb 2026 10:00:28 +0000
Manifest next update: Tue 10 Feb 2026 10:00:28 +0000
Files and hashes: 1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: kFYVZ6FaW44Asn9B0eDrbWQ/hxiFtOSbQnCg9FmzVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:6c:24:b4:c2:a7:9f:d3:b1:c3:b2:49:37:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Feb 9 10:00:28 2026 GMT
Not After : Feb 10 10:00:28 2026 GMT
Subject: CN=b723235cf41b18b78a980cd7a683f5faf98e5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:b1:f4:99:7e:5b:54:3b:49:3f:47:7b:b4:
d3:8f:37:4b:0c:06:7b:25:55:37:51:1c:08:8e:05:
74:12:3f:7d:ec:39:8e:ba:8a:4e:df:1b:c1:c7:73:
ea:48:49:6d:a7:e4:dd:18:61:c2:c2:9a:48:e9:c3:
76:cc:5a:97:95:ab:ef:03:57:85:e7:5d:9f:7c:c3:
4a:cb:43:17:c2:e0:f0:a7:b9:d5:01:51:b0:dd:50:
6f:fd:01:b0:50:b5:30:5d:e8:5a:0d:80:4f:9d:0e:
85:16:69:7e:6f:c0:6f:96:43:28:4f:c0:e1:0a:b3:
46:49:ca:be:87:a9:b3:c1:b8:dc:26:68:06:ae:95:
29:74:91:b5:91:39:94:a6:94:87:0e:0c:d9:b0:91:
ec:42:eb:94:9b:41:b5:8d:79:c5:6c:a1:ca:c0:a3:
fe:5c:76:c1:bd:f2:41:88:b5:1b:70:a4:af:9a:08:
c8:64:42:9d:05:10:42:fd:48:a1:f3:2f:1e:d3:72:
40:5a:ec:c1:ee:a4:4d:f6:b5:78:85:73:f3:58:ee:
61:9e:6b:3b:7d:f7:81:5b:c9:1a:a2:b5:0c:ff:b4:
c1:09:43:a0:0c:94:98:8c:a2:19:82:5a:fb:e4:bf:
0d:2f:3f:40:72:b8:f4:b7:54:82:c5:1f:58:39:23:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:23:5C:F4:1B:18:B7:8A:98:0C:D7:A6:83:F5:FA:F9:8E:5D:19
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:85:e7:66:d4:dd:22:2f:30:91:14:f6:8b:b3:98:91:04:
f8:60:d3:80:cb:f2:ff:9b:80:0f:52:a0:f2:16:7f:fb:ea:33:
b6:e3:7b:b0:ad:8c:9f:4c:c4:1f:20:61:b8:cc:66:c6:25:34:
30:be:e3:5b:8b:10:1e:17:a0:70:88:03:9c:2e:be:2d:e1:c1:
c1:9f:fb:96:10:d1:24:92:39:49:12:4d:3a:e9:c6:62:63:54:
e6:e2:25:4d:90:d6:44:ab:d0:09:7e:f3:07:bc:11:9f:9f:28:
7e:8d:49:5d:d1:83:84:e2:eb:93:1a:1a:c9:28:3e:1d:51:86:
ca:4e:15:92:17:4c:38:d3:10:84:36:54:b2:22:f2:e2:05:78:
ef:3e:27:ed:94:98:58:ad:f2:49:eb:af:e0:23:1e:36:24:3c:
10:67:ff:a9:21:87:ce:af:08:b9:55:d1:40:e8:3b:e4:d6:67:
01:bb:b0:23:3a:f1:fd:c3:a8:37:2f:15:f7:4c:f8:e2:c5:ee:
80:ab:1a:d5:33:4a:7c:31:50:7f:78:bd:1d:1f:d3:86:f1:0c:
40:f1:1c:72:53:29:7c:fb:3c:98:22:3c:78:9f:df:a4:dd:5f:
0f:c9:c3:f9:34:7e:ff:0c:8f:0e:12:ed:b1:c1:bd:0b:14:d0:
87:bf:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:37 2026 by rpki-client