This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File: EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier: El69pw3iHZ+eZcu9QWHwWSEz9bGGF90QBwhawnMcqC4=
Subject key identifier: 8A:43:47:BA:4E:A8:E2:CE:A9:01:1C:9C:6E:2D:4D:2F:C2:28:77:73
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 019BF46249A1A67E8323AFE61BB47F2B95EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number: 17F2
Signing time: Sun 25 Jan 2026 09:00:40 +0000
Manifest this update: Sun 25 Jan 2026 09:00:40 +0000
Manifest next update: Mon 26 Jan 2026 09:00:40 +0000
Files and hashes: 1: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (hash: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4=)
2: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: SyFFWt7Qf3imPEepE6Wn6qkjjiF1GWah0wN9XgbcEwg=)
3: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (hash: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c=)
4: _D31CaslokzBzJb570s1tCqC6rU.roa (hash: vPfarYHxZRzOYIcHGYTZOf+++xHO9r+2vS0OJV7F/0s=)
5: hMkkOV3vcdpEBCz-ov_DfQAHhD8.roa (hash: E0l9RjnNf9Lrz/LeJVfSiJ9Bu3PLC8j0ZQdTbyOvhkY=)
6: iIvK0GriwCR5-e0INxYXsaN5HeA.roa (hash: y+xjj91MYcyeEl9ZZP8msaIhf1Zsnrl/qJUlt2VVY1Q=)
7: omKHkE8YHZq1XP5PN9HMJprVOp8.roa (hash: MmpJRNhqaLRfTIGoiK2U5hLmuW2sEbpdb2u4AXDgU9A=)
8: sL9_3JSSE2xT5n7OAXMAHMxKq1g.roa (hash: vGCCVcEYQcDBKDtRD4+hEi2hrb6nrXfbvM90L9lRcO0=)
9: xC4HZY2FAIOZlVLev_OryihHWUo.roa (hash: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:49:a1:a6:7e:83:23:af:e6:1b:b4:7f:2b:95:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 25 09:00:40 2026 GMT
Not After : Jan 26 09:00:40 2026 GMT
Subject: CN=8a4347ba4ea8e2cea9011c9c6e2d4d2fc2287773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:24:5f:25:ac:46:ea:62:14:ff:8f:23:78:
e0:fb:ec:86:36:a7:99:6e:58:84:d0:8b:ff:21:83:
6b:d0:43:4b:75:9b:44:3d:6a:11:bc:5c:60:3c:16:
8e:8f:6c:72:71:8e:d1:cb:7d:25:8b:aa:94:91:d8:
f7:05:37:d7:34:9f:64:76:3d:26:6c:d0:ff:12:58:
ff:61:82:f2:ea:62:65:cf:15:a0:78:90:00:38:ed:
76:30:dd:0c:d8:95:ef:5b:03:01:56:44:41:96:58:
9c:d9:eb:ce:cd:46:f8:1b:36:27:b1:2f:f4:41:0f:
d6:39:6d:52:46:6e:8c:b5:78:ee:1a:59:89:39:ee:
e8:f2:ae:57:60:85:bb:87:5e:29:6a:77:dd:e1:b4:
4c:06:01:ee:2b:0e:4f:5f:7f:22:30:67:78:b7:df:
ef:b0:19:1a:8e:ed:a8:35:22:5a:ab:d2:9c:cf:a8:
15:39:39:9a:6e:47:7b:d6:e5:da:25:5b:7e:7b:9a:
78:a7:4d:00:e7:00:02:7c:d3:46:48:2e:90:1d:af:
3f:90:69:20:72:ae:1f:81:72:70:4f:75:53:ed:11:
9d:20:3e:67:8c:80:f5:6b:69:ae:a8:c3:0f:81:4a:
9b:4e:27:ec:ef:2b:08:11:5e:50:d1:c8:a6:32:88:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:47:BA:4E:A8:E2:CE:A9:01:1C:9C:6E:2D:4D:2F:C2:28:77:73
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:94:ad:be:29:7c:92:6c:da:8d:1d:8e:dc:25:16:89:47:28:
00:2a:82:69:9f:53:a5:5d:13:d0:a9:0b:b2:76:a1:c3:bf:46:
68:bb:5a:2c:ea:da:42:8e:5f:e4:bb:c8:ec:d6:be:c9:6c:73:
f4:e8:46:9e:4f:45:08:a6:1e:03:51:47:d4:17:06:6f:a3:54:
47:1a:ac:c5:9f:7a:6c:5f:ef:33:dc:af:9a:35:82:cb:5c:53:
bf:3a:ba:bb:44:10:f2:10:3c:6d:d9:f9:0a:17:9f:0d:bd:3a:
5d:2e:dc:0d:8e:92:13:4a:66:fb:3e:b1:56:0c:80:99:10:3b:
17:af:c5:0a:a7:ae:39:e9:68:14:71:18:f1:58:98:9d:cc:13:
92:68:ef:ec:5e:53:da:d5:7c:df:24:79:56:b5:fc:68:e8:f5:
8b:ec:e7:f3:ae:f2:37:1f:20:05:aa:4d:2f:0c:86:aa:c8:88:
f3:20:93:bf:76:8d:f3:93:45:f2:7c:01:7b:9d:9c:92:48:c8:
be:36:34:c1:e3:90:d5:51:b0:cd:4f:be:bb:13:ca:19:2b:8b:
f6:44:fd:cf:48:09:a7:63:fa:e6:1e:39:88:87:69:49:fb:e0:
38:dc:ef:64:6a:d3:fc:53:73:a2:0f:85:4d:fd:e9:57:9d:05:
c3:b3:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:00 2026 by rpki-client