This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: 7QGJ6EUtLZFMz6PjLPtVvUb9gH0NnOHxYNx+tNdDzuI=
Subject key identifier: 27:5F:ED:14:5E:A5:02:AE:92:E0:5F:72:27:F8:E1:CA:29:86:60:22
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 019BF951AEA08227CE4A59C8499CCB347459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 1768
Signing time: Mon 26 Jan 2026 08:00:38 +0000
Manifest this update: Mon 26 Jan 2026 08:00:38 +0000
Manifest next update: Tue 27 Jan 2026 08:00:38 +0000
Files and hashes: 1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: MQxKn3yYtLhIxA0gnZpM7QxAWThl2vwz/pD3ePwZFyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:51:ae:a0:82:27:ce:4a:59:c8:49:9c:cb:34:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Jan 26 08:00:38 2026 GMT
Not After : Jan 27 08:00:38 2026 GMT
Subject: CN=275fed145ea502ae92e05f7227f8e1ca29866022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:18:62:89:45:4e:86:b8:cb:00:d5:55:b6:
3f:0d:17:e2:fe:97:5b:a8:73:d3:9a:55:cf:7e:a4:
b0:b2:f8:b1:8f:46:e7:97:e6:44:39:e0:1a:ff:07:
6f:a0:da:15:01:4d:71:18:01:a1:10:0a:5f:f5:7f:
d4:a6:27:96:17:b4:94:1b:1e:44:fc:6a:85:65:40:
2c:23:9d:95:f5:e1:8a:f9:04:4d:1e:39:63:5f:0a:
8e:85:c4:54:be:77:ff:83:aa:5d:7a:84:86:ea:eb:
fa:25:da:a7:01:8f:7d:0d:06:16:55:e4:c0:67:ae:
11:96:76:8e:8c:44:3b:fa:f8:b4:6a:5a:9d:33:a9:
61:ed:6f:e5:67:5c:a6:3f:29:0e:e6:33:ca:aa:09:
4b:eb:76:ed:fc:4e:46:16:ff:13:b3:10:4c:6f:d3:
4c:e9:21:de:9d:e9:91:15:19:f5:79:91:ec:5c:3d:
f5:f6:2c:b7:88:2d:58:7c:eb:cf:3d:98:e7:2c:1d:
98:c9:45:77:aa:b3:5c:f0:de:91:3d:91:75:ee:9e:
0c:bd:d0:bd:d2:5f:ef:14:73:73:d4:ff:67:fd:e3:
cb:69:1e:9a:f8:d0:f1:c9:a0:f3:a7:c0:3a:3f:f6:
9f:c4:5a:a9:3c:b0:a8:25:a5:95:8e:84:34:df:8f:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:ED:14:5E:A5:02:AE:92:E0:5F:72:27:F8:E1:CA:29:86:60:22
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6c:bf:31:41:66:b3:6f:2d:73:40:6f:41:91:ee:67:86:a5:
04:ac:fa:48:36:ce:0b:be:4a:8b:22:c5:9c:33:ab:24:7f:48:
46:70:b6:51:1b:10:c1:db:f4:14:7c:98:5b:a2:e0:28:26:9c:
69:5b:c5:ba:20:5a:87:53:40:8c:2f:bd:31:53:1f:c7:2e:bb:
c8:a7:7a:24:ba:f4:38:91:ae:49:b2:2f:d9:3e:5b:dc:0c:d9:
c8:4e:9a:5f:c0:80:8e:5a:a7:88:fb:e2:7f:7a:40:b0:5f:27:
bb:e6:ef:3c:5f:8c:b4:bb:a2:2c:40:2d:e1:9f:f9:d4:86:a4:
dc:98:97:80:7e:9e:c3:2e:32:d0:f6:18:01:93:56:a5:20:0f:
46:76:8a:86:ad:c9:c5:5a:df:3e:1f:45:11:cf:b1:bf:52:5a:
28:b2:07:01:9b:62:d5:fb:99:39:7f:75:a9:de:c1:d1:5b:2e:
85:65:02:16:c8:55:9a:09:6e:dc:cd:fe:0a:6d:b3:37:3b:45:
6e:00:b2:9a:d6:81:92:98:68:4d:ba:86:9a:e8:29:7f:19:41:
f9:2b:a4:77:fa:d0:eb:5c:30:9b:4e:cd:f7:01:a4:75:16:dd:
ed:c2:da:f5:f1:cf:87:9c:ef:c8:05:38:48:49:96:a1:99:2b:
20:a1:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:41 2026 by rpki-client