This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File: egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier: VcMp49T+iF7CJ6dW6qmgWzu7So3YnhyGi/0sjjNss2I=
Subject key identifier: AF:3E:B9:0D:8E:3D:16:A9:B9:19:A0:FB:9C:69:09:13:33:B7:E2:BD
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 019BF83F68CA5B655A184B83D4FF0AE0F2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number: 114B
Signing time: Mon 26 Jan 2026 03:01:03 +0000
Manifest this update: Mon 26 Jan 2026 03:01:03 +0000
Manifest next update: Tue 27 Jan 2026 03:01:03 +0000
Files and hashes: 1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: Zp+BCSNYXHciqb3fubCYgEzX4neBQg3AFXJekzm6p3w=)
7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:68:ca:5b:65:5a:18:4b:83:d4:ff:0a:e0:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Jan 26 03:01:03 2026 GMT
Not After : Jan 27 03:01:03 2026 GMT
Subject: CN=af3eb90d8e3d16a9b919a0fb9c69091333b7e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:cb:78:b7:da:e3:e7:11:5e:c6:81:0c:84:
f2:24:8a:f2:fc:6b:0d:19:9b:a4:01:58:45:6d:2a:
00:74:19:7f:de:1f:0e:bd:c1:ca:de:f0:e5:e1:ff:
e9:f7:7a:97:b0:d7:e3:85:1c:69:4f:a8:32:93:3c:
8a:ff:91:9a:90:08:e3:5a:f0:78:3b:50:20:46:92:
3e:72:82:ab:37:22:b0:4d:63:f4:01:99:7f:ea:4f:
d6:cb:3d:a3:9f:84:73:48:79:69:f9:96:37:b7:e8:
70:9d:a9:1f:27:d7:ee:32:74:a3:e7:85:13:49:7b:
e2:99:cf:9d:d9:aa:27:e6:9b:d3:6a:07:96:4c:97:
4a:b6:2d:3d:6a:e9:b9:3a:bd:5b:e9:5d:33:de:66:
bb:a5:5c:9c:0a:c6:50:49:77:24:5d:8f:9f:47:79:
ae:15:4c:91:c8:65:42:1f:81:78:b9:a9:3e:84:8f:
ed:f5:b2:87:23:dd:fb:31:75:9b:cb:4b:f0:23:4d:
35:cf:bb:10:a4:7c:66:a5:1e:55:99:02:e3:98:03:
eb:9e:03:45:90:2e:d4:85:da:28:86:ad:62:ba:ae:
d9:d4:95:28:2d:5e:93:c5:ea:01:d9:e8:68:5b:4f:
ad:68:a7:47:02:b7:6a:68:a7:a8:e3:51:91:f8:2f:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3E:B9:0D:8E:3D:16:A9:B9:19:A0:FB:9C:69:09:13:33:B7:E2:BD
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:e1:72:e6:44:1f:49:5f:9e:72:29:76:d6:5e:19:0c:41:
02:92:dd:e0:a2:1b:66:1d:bb:77:ec:cb:0d:67:0e:d2:4d:f4:
71:e9:56:b7:95:f9:d2:73:8d:75:bd:2f:c1:12:9c:e5:09:c0:
1b:ff:be:7a:17:8e:b4:d9:cf:6d:8b:c5:d4:10:1b:0d:fa:94:
60:c8:65:7d:af:58:00:38:a0:d6:57:78:da:bd:8e:d7:d9:f3:
11:53:23:79:ff:47:21:aa:8b:34:7d:84:f1:25:23:ab:47:c0:
1e:2f:dc:91:52:bb:9d:a4:6c:99:8b:f4:0a:aa:f8:a1:47:d5:
ae:e9:b4:2c:33:68:2b:f6:b7:77:a5:78:23:66:29:05:0f:51:
9d:fa:37:ae:36:1f:42:e8:e0:cb:ee:cd:33:80:8b:22:b2:5b:
a1:1b:e6:80:44:0c:91:72:58:22:d5:3e:fe:5b:3c:3e:a4:f5:
5e:17:e2:a4:84:21:f5:86:20:d1:4b:bc:42:9a:d8:f8:06:4b:
dd:70:bb:eb:51:43:9b:80:bc:41:e7:f6:a9:5d:63:35:ba:c1:
78:bb:a0:16:f0:cb:35:64:34:cc:b3:78:11:92:22:22:7b:93:
a7:1a:38:e0:53:1a:ec:1f:fa:07:b6:f2:7e:03:0c:a6:03:4a:
bb:7c:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:30 2026 by rpki-client