This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier: wELDXsIUYH0Z42ymfyEYG5plAksCSLSv2tCLO7KGxQc=
Subject key identifier: AF:CA:27:E1:5D:16:AD:2F:F9:31:3E:BB:52:B1:18:7E:82:01:5B:32
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 019BF8ADD2254715F514F0F30737D2B02A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number: 132E
Signing time: Mon 26 Jan 2026 05:01:39 +0000
Manifest this update: Mon 26 Jan 2026 05:01:39 +0000
Manifest next update: Tue 27 Jan 2026 05:01:39 +0000
Files and hashes: 1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: CjNmh9JX2gMP5rmyuXR7FReVLtHE3n7qvdcIZiWUGT0=)
2: oaJjif49aOtwhtdpNwsRYaoP_Rw.roa (hash: n1QGSuy4XICYBqS37wdCnghgVjW6ky2PfMzer7DCkkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:d2:25:47:15:f5:14:f0:f3:07:37:d2:b0:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Jan 26 05:01:39 2026 GMT
Not After : Jan 27 05:01:39 2026 GMT
Subject: CN=afca27e15d16ad2ff9313ebb52b1187e82015b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:6b:ee:a8:de:ea:0d:01:64:70:98:78:46:
4e:53:ac:21:b3:14:68:4f:3a:ec:67:7c:85:d5:dc:
cb:db:a8:c6:e0:fb:25:d8:61:73:5a:ce:1b:f2:ce:
a6:ed:ab:94:b1:3d:0b:81:b5:88:ac:e7:e7:5c:4a:
71:e7:43:e9:11:39:4e:03:9e:1a:8b:08:79:25:76:
38:97:d2:7f:cc:07:18:ee:ad:d8:ac:53:8f:c0:23:
50:65:f5:3c:07:2e:fc:e1:ef:c5:fc:f2:37:d6:64:
de:45:10:ad:61:ce:af:4e:52:6d:f9:28:c3:67:19:
59:d3:90:09:db:f7:73:94:df:09:de:00:1e:62:c8:
7e:84:b4:3f:1f:ee:46:fa:6f:49:7d:5d:3a:91:ea:
d2:22:f9:81:de:67:d2:88:c3:75:8f:90:71:ee:f3:
8c:1f:17:75:f9:4d:de:2d:44:4d:c3:73:32:53:03:
34:8e:c7:da:ba:eb:eb:d6:98:26:9a:68:11:53:e2:
d6:74:84:84:80:ac:13:a2:13:cd:9a:cc:cd:78:b4:
7f:ce:74:24:62:49:f0:e5:38:0d:01:e4:99:49:b2:
c9:7e:df:ff:ee:51:fd:ff:8f:df:65:01:11:81:f0:
c2:d4:08:61:5a:51:47:ae:9b:77:f1:66:80:72:c4:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CA:27:E1:5D:16:AD:2F:F9:31:3E:BB:52:B1:18:7E:82:01:5B:32
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:16:c9:d8:84:0a:77:20:17:63:27:49:ad:12:c8:78:11:68:
24:d5:ca:85:26:1a:46:1c:cb:30:37:51:76:54:e3:e4:38:04:
7f:2c:53:d9:11:d7:6d:f2:c3:98:f8:01:f2:c0:ab:c2:61:ad:
01:1a:03:fa:ef:28:ba:82:82:f8:e9:71:6b:0d:ef:fe:f5:20:
63:25:3c:47:16:2e:48:43:96:34:52:15:a9:82:18:7a:66:1a:
6b:db:4c:c0:0d:cf:44:94:18:c0:37:69:70:c1:6f:3a:b4:51:
0d:16:05:44:58:00:3b:60:f0:45:9f:03:a4:05:02:42:3d:a5:
3a:1a:70:eb:12:05:d8:03:0e:7a:78:e3:c0:f1:bf:e4:16:35:
9d:a0:ec:4d:b0:9c:2e:e4:9b:20:56:25:9a:f9:70:2f:ca:8d:
11:82:de:fe:12:71:1f:96:cd:dc:e2:fa:14:68:cd:bc:50:b0:
d8:db:25:e9:13:a7:fc:59:ff:ab:fc:f3:3e:82:ef:78:a1:11:
96:20:1a:56:eb:05:16:cb:67:ff:88:30:95:89:c7:f3:c6:35:
fe:c5:0f:fc:70:8c:1b:b7:d2:59:03:4b:9d:29:01:93:c6:56:
36:86:70:89:84:6c:fa:69:2a:9e:d9:cf:c4:da:ad:57:9d:c6:
40:85:de:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4rdIlRxX1FPDzBzfSsCqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzNjMjY2MDliMWIyMWQ4N2E2ODEzMDJlZjJkMjZmYzBh
MDBmYTMwHhcNMjYwMTI2MDUwMTM5WhcNMjYwMTI3MDUwMTM5WjAzMTEwLwYDVQQD
EyhhZmNhMjdlMTVkMTZhZDJmZjkzMTNlYmI1MmIxMTg3ZTgyMDE1YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1Br7qje6g0BZHCYeEZOU6whsxRo
TzrsZ3yF1dzL26jG4Psl2GFzWs4b8s6m7auUsT0LgbWIrOfnXEpx50PpETlOA54a
iwh5JXY4l9J/zAcY7q3YrFOPwCNQZfU8By784e/F/PI31mTeRRCtYc6vTlJt+SjD
ZxlZ05AJ2/dzlN8J3gAeYsh+hLQ/H+5G+m9JfV06kerSIvmB3mfSiMN1j5Bx7vOM
Hxd1+U3eLURNw3MyUwM0jsfauuvr1pgmmmgRU+LWdISEgKwTohPNmszNeLR/znQk
Yknw5TgNAeSZSbLJft//7lH9/4/fZQERgfDC1AhhWlFHrpt38WaAcsRLNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/KJ+FdFq0v+TE+u1KxGH6CAVsyMB8GA1UdIwQY
MBaAFO1zwmYJsbIdh6aBMC7y0m/AoA+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOGVhNDYtOWRjMi00MDM2LTkwOTYt
NGNkNzdiMzhmMWIxLzEvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jOGVhNDYtOWRjMi00MDM2LTkwOTYtNGNkNzdiMzhmMWIx
LzEvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBbJ2IQK
dyAXYydJrRLIeBFoJNXKhSYaRhzLMDdRdlTj5DgEfyxT2RHXbfLDmPgB8sCrwmGt
ARoD+u8ouoKC+Olxaw3v/vUgYyU8RxYuSEOWNFIVqYIYemYaa9tMwA3PRJQYwDdp
cMFvOrRRDRYFRFgAO2DwRZ8DpAUCQj2lOhpw6xIF2AMOenjjwPG/5BY1naDsTbCc
LuSbIFYlmvlwL8qNEYLe/hJxH5bN3OL6FGjNvFCw2Nsl6ROn/Fn/q/zzPoLveKER
liAaVusFFstn/4gwlYnH88Y1/sUP/HCMG7fSWQNLnSkBk8ZWNoZwiYRs+mkqntnP
xNqtV53GQIXeyQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:49 2026 by rpki-client