This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier: NlafQzGaqAagAccEQWoiy9LD4uh6Fugli0QRDpQyJKA=
Subject key identifier: 12:BB:0F:82:7D:8A:B8:F7:48:24:AF:08:24:70:B6:C1:57:24:72:B2
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019BF650AC470A652DF0CEC34A6C7E0FC5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number: 01C9
Signing time: Sun 25 Jan 2026 18:00:40 +0000
Manifest this update: Sun 25 Jan 2026 18:00:40 +0000
Manifest next update: Mon 26 Jan 2026 18:00:40 +0000
Files and hashes: 1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: LWRF/2S/88uqfJkLaH1UV/Yd2pI63+3HOaMIB/qwrko=)
4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
5: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (hash: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M=)
6: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:ac:47:0a:65:2d:f0:ce:c3:4a:6c:7e:0f:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Jan 25 18:00:40 2026 GMT
Not After : Jan 26 18:00:40 2026 GMT
Subject: CN=12bb0f827d8ab8f74824af082470b6c1572472b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:d7:b3:6f:76:83:09:af:4e:f4:3a:3c:11:
3b:e2:ad:dc:86:c1:46:cf:a6:bd:d0:45:f1:10:94:
5b:bb:2a:f3:0c:81:0c:e2:af:96:f0:35:62:30:88:
36:b7:b8:61:04:85:04:e0:72:ac:bb:0a:e3:9e:3f:
cb:27:3e:ef:4c:39:df:a1:87:91:b0:f9:49:aa:1d:
de:65:4d:8e:cf:01:5b:2e:bd:ab:2e:f0:4b:c2:68:
15:cd:cf:7d:27:9f:ff:d6:af:fb:be:a3:82:70:ce:
9c:99:8f:e7:5b:4e:55:be:3f:16:81:71:1e:c2:2a:
57:19:46:08:ab:35:fd:9b:01:75:55:e4:e8:85:fc:
b5:f2:06:07:af:02:fb:ad:f2:c9:8b:2c:2d:0d:28:
af:36:d1:2d:b0:fc:2e:61:f8:ea:89:97:e7:22:6e:
8f:57:8f:f7:79:17:cf:78:aa:e0:1f:4f:4d:b3:64:
fe:34:f3:b1:c8:7a:41:f5:27:0f:da:9a:25:1f:2e:
fa:f1:6d:7c:c5:84:a2:ec:13:5f:09:21:97:98:d2:
53:b2:12:94:d9:13:94:61:24:e6:93:79:4b:79:55:
21:7c:d9:97:f0:80:44:d7:60:99:4e:10:3e:ac:7e:
db:12:97:2f:c7:dc:e7:fc:ba:a4:b0:28:5a:13:e9:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:0F:82:7D:8A:B8:F7:48:24:AF:08:24:70:B6:C1:57:24:72:B2
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:25:da:ea:d7:8b:dc:72:a9:27:08:c6:da:3e:a7:ea:58:
ce:b0:23:ad:0d:8c:64:ac:c6:37:43:c2:80:f9:15:4b:99:18:
12:c2:44:64:47:4f:85:51:0c:9f:d6:61:2f:01:1e:f7:fa:a2:
fd:88:ee:40:a7:ae:e3:6c:7d:3a:4e:df:63:63:f6:51:51:f9:
0b:0e:4d:ef:f3:31:95:cb:e0:ba:62:bb:c8:27:b5:2d:6c:b5:
a6:cb:3f:be:54:da:2b:51:26:80:d6:be:12:d6:c4:7a:2e:1b:
ee:92:e9:e6:be:de:3c:ec:db:e5:8b:8d:b6:8d:7a:ba:09:e8:
43:8b:67:2e:fb:81:c6:7b:b6:f7:f2:50:12:4b:f4:44:a1:ab:
6a:78:54:47:36:ee:e9:61:dd:2b:f0:c7:00:ae:cb:a2:ad:d1:
5f:70:f9:73:98:45:11:78:11:5a:76:6a:af:fe:a1:0f:05:fe:
1b:8c:d3:d0:3e:93:87:d5:ce:fe:dd:e0:83:b8:a3:61:46:19:
fc:e1:63:ef:dd:c5:9f:3d:8c:cc:59:25:53:b2:21:ac:ee:d9:
c0:c5:bb:3b:bf:c6:5c:4f:b8:f0:c5:ec:da:36:73:10:cf:e3:
4a:3b:85:de:bb:4b:69:f6:28:18:84:79:d5:11:c2:95:43:e9:
f4:44:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:08 2026 by rpki-client