This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: O7u+VGsIvHW3j6YX9AfIM8Yv7co5p34tfhOujiJTDFY=
Subject key identifier: 04:D9:79:4A:86:BB:74:2D:46:27:BB:67:7B:C3:B8:D2:B2:7C:67:87
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019BF79A541A7C8197147154554A9CBEF9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 1499
Signing time: Mon 26 Jan 2026 00:00:44 +0000
Manifest this update: Mon 26 Jan 2026 00:00:44 +0000
Manifest next update: Tue 27 Jan 2026 00:00:44 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: 6t2gGyp/KF0auRCGDSiTj/E+MIMQAkABm24z2sZSeXc=)
2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:54:1a:7c:81:97:14:71:54:55:4a:9c:be:f9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Jan 26 00:00:44 2026 GMT
Not After : Jan 27 00:00:44 2026 GMT
Subject: CN=04d9794a86bb742d4627bb677bc3b8d2b27c6787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:c7:b1:98:c3:2d:1a:38:a4:06:44:09:65:
cf:44:f2:ce:00:43:cd:1c:8a:76:fd:58:eb:19:77:
86:1b:e6:2e:9b:d5:f8:a0:86:08:33:7a:e4:e0:1a:
d2:bc:27:f2:a1:35:60:51:68:4f:f2:91:d7:31:f2:
7e:a7:6b:cb:d5:56:9e:c1:6e:e9:68:69:57:8f:01:
bf:dd:eb:23:01:47:d2:84:65:5a:65:4d:da:c2:67:
94:8a:de:b5:1a:f2:46:04:db:1d:32:93:71:63:96:
bd:e0:6c:83:10:11:20:18:89:2a:42:ea:32:db:cd:
43:46:0d:82:c1:3f:8c:63:29:21:12:c0:f9:fb:5b:
ab:3c:21:31:cf:31:ed:80:dc:4b:a4:69:11:64:09:
78:3a:e6:ab:22:fc:ba:3f:fe:a1:8d:37:92:de:9a:
d1:93:ee:b0:d0:d4:2f:9a:b4:94:ea:2d:bc:f5:79:
a3:63:02:92:f6:db:07:bc:fb:11:10:0f:6b:81:90:
71:4a:63:78:e6:d1:32:01:c6:df:89:6d:36:5d:e6:
14:2c:3b:0a:11:96:f5:03:d5:e1:d9:c1:2d:92:97:
ca:94:31:a8:13:9f:ed:0f:8c:3d:91:e0:68:a1:30:
78:12:1c:28:08:88:dc:29:65:79:c8:45:02:2d:39:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:79:4A:86:BB:74:2D:46:27:BB:67:7B:C3:B8:D2:B2:7C:67:87
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c4:3f:5f:0c:b6:0f:1a:b8:c9:32:70:cd:56:65:4b:5f:dc:
17:56:78:94:49:51:11:54:22:3c:1f:2f:2c:48:d8:13:17:33:
78:d9:6a:01:6d:d1:ed:0d:88:6a:0b:19:1d:77:8e:2b:52:44:
ad:6e:13:e6:82:fd:c3:81:f0:e1:eb:46:3f:15:c3:c4:29:e0:
6b:ba:aa:f2:ef:5e:e1:c0:f4:91:f0:8d:1f:f7:fd:62:19:df:
15:1e:dc:51:f5:d6:23:f2:1b:ff:8e:c4:c3:77:6c:58:e8:ee:
c3:cc:2f:17:5c:3a:d6:0e:d7:18:20:f1:73:c0:9a:d9:a5:af:
bf:2f:aa:26:a7:7a:9f:18:e4:7a:a9:c9:30:ec:5e:2f:6c:a0:
f1:a7:75:5e:e3:88:76:07:fb:28:93:b9:b9:59:dd:e3:be:3d:
ca:11:85:ca:e6:fb:9a:15:29:66:60:33:06:17:80:f5:5e:66:
1e:de:63:46:9e:d4:ef:3e:f0:d2:44:24:9d:5d:ae:17:67:2a:
99:38:1e:d6:b4:d1:9b:3f:ac:e8:87:9b:a0:03:56:28:5d:a5:
3d:98:71:9b:0b:f4:4d:4e:1c:65:20:43:62:44:87:3d:7b:60:
55:b6:51:19:6f:cd:02:00:40:65:5c:d3:5e:d6:f4:43:4e:c0:
f3:f9:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:02 2026 by rpki-client