This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier: igtxumxQYQSwwfMG47FaxAUrBkPTVOAvXVmPGy+rc/Y=
Subject key identifier: E7:17:D3:49:F7:A3:11:D8:73:E6:F9:44:B0:DE:AC:5F:D0:E5:4C:2A
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019BF46307A70FC96D83E57ADA74B2D05987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number: 01C8
Signing time: Sun 25 Jan 2026 09:01:29 +0000
Manifest this update: Sun 25 Jan 2026 09:01:29 +0000
Manifest next update: Mon 26 Jan 2026 09:01:29 +0000
Files and hashes: 1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: WaHWmzyAvQCxOYbnVLkfAgOh3ijs+9weIuKguq+8vEk=)
4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
5: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (hash: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M=)
6: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:63:07:a7:0f:c9:6d:83:e5:7a:da:74:b2:d0:59:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Jan 25 09:01:29 2026 GMT
Not After : Jan 26 09:01:29 2026 GMT
Subject: CN=e717d349f7a311d873e6f944b0deac5fd0e54c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:fc:6c:c5:fd:fe:bb:0d:17:25:17:02:07:
7c:8c:92:11:ec:cf:a5:a3:e6:ac:9a:96:af:f1:56:
66:2d:0e:c4:a3:2e:93:58:53:c8:62:b9:48:01:f0:
86:1c:e3:13:82:77:72:f9:7b:50:a6:c0:a8:fa:05:
56:dc:1d:0b:21:a9:ec:ae:c2:d5:78:e0:13:d7:e1:
e8:17:03:31:4a:5a:f2:bc:f5:20:77:44:bd:df:61:
c4:b7:5c:ac:95:ff:3d:8d:b1:af:65:66:5d:b6:3b:
7d:9a:99:7d:98:85:25:b4:69:c8:e2:2d:0c:7e:dd:
35:3b:2c:d3:13:a5:e6:23:ca:90:6b:ba:7b:78:26:
ae:3e:24:5e:ad:85:fa:d4:5b:1c:4b:d4:b7:be:3e:
8a:a3:7a:7a:3e:0b:17:2f:9a:aa:46:33:71:7f:85:
38:a7:8a:2a:3f:f5:80:07:2e:3b:ac:ec:80:8b:0f:
f0:69:bc:6f:88:58:0b:a7:40:f1:de:c5:fe:9b:fb:
29:d2:54:16:80:ed:5f:06:68:df:53:2d:24:90:a9:
80:e4:b3:ef:a0:3e:cb:2d:08:e5:7a:51:fd:88:9e:
b0:a5:c6:f0:9d:03:6c:90:53:1c:8d:d8:7c:b6:06:
62:11:42:e6:35:7f:5e:9b:fe:1f:7b:4b:9f:4d:2e:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:D3:49:F7:A3:11:D8:73:E6:F9:44:B0:DE:AC:5F:D0:E5:4C:2A
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:97:76:2e:5a:99:ac:a2:55:0c:61:84:97:72:33:e8:5e:0e:
43:82:6f:9d:8a:4e:37:5e:f5:02:63:29:32:4b:33:0e:fc:ba:
41:2e:21:0f:91:60:32:03:74:6b:58:1d:11:47:ce:aa:61:1d:
7a:1b:c8:ab:bc:ff:82:a3:e2:9b:56:d2:05:c4:4c:ac:4d:83:
1e:ba:3c:bf:31:8d:0c:33:2e:6c:fe:70:68:b0:71:9a:08:c6:
05:e7:1f:f2:0a:4b:77:08:f0:72:ef:83:92:ce:46:1c:4e:84:
e2:72:a6:f1:de:5c:a3:4d:83:d7:a5:6b:00:a4:29:39:c8:2f:
5a:3c:75:bb:52:eb:63:79:28:53:c7:6a:76:c6:95:f3:ef:7e:
81:ff:cb:22:1b:6f:88:9e:e5:66:bf:67:19:0e:3c:b6:a8:27:
4f:45:1e:22:82:33:d2:b6:4f:ff:fc:15:e1:97:75:94:c9:d5:
de:4b:d9:4e:c0:f5:12:f1:fa:b4:72:ce:be:d2:bc:06:c0:fd:
eb:00:98:17:1f:ee:24:ac:78:f1:b2:8c:0a:a3:11:dd:6e:7f:
84:0d:7b:69:6a:7e:2c:7a:e2:bf:05:d4:6f:ff:ac:ce:e8:5f:
86:7e:da:19:55:ab:bb:19:d1:7a:a1:16:e9:51:8f:2c:61:78:
dc:a5:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:43:41 2026 by rpki-client