This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File: EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier: opzjElCMecZeJWCnZCo3spibw2L4ghwOKKienzp5hTc=
Subject key identifier: A3:6F:4A:F8:F9:3B:BB:BD:BA:3E:7E:C1:7A:24:76:EF:7D:FB:67:58
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial: 019BF50794E78F3C5AB1C360EBEB7190B5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number: 17EB
Signing time: Sun 25 Jan 2026 12:01:13 +0000
Manifest this update: Sun 25 Jan 2026 12:01:13 +0000
Manifest next update: Mon 26 Jan 2026 12:01:13 +0000
Files and hashes: 1: 3hEq94EGlgud0m4THLqNIw7_pEI.roa (hash: iwseUv8Ssl2EzH4+sgIpXtz5sb0Gtf1/B2FcnNjM0OU=)
2: 78P8bg4fhDC941Z-sCKZX9vKz5c.roa (hash: 95blh8AcNCpkNeCFXQto2YGidkNS7zNlYdkmjlG4aOU=)
3: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: 3xQZ+nJWFDYFE6JPuQ9DMbC0esfbRkSobOOADv7ABYE=)
4: irfw5UW1_BtcJGyWmOKmkhAGuPM.roa (hash: KUrzlXQ0G9dX8hl6WHyNKm8JCOJt/8bKQDZ8bvI+eWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:94:e7:8f:3c:5a:b1:c3:60:eb:eb:71:90:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Validity
Not Before: Jan 25 12:01:13 2026 GMT
Not After : Jan 26 12:01:13 2026 GMT
Subject: CN=a36f4af8f93bbbbdba3e7ec17a2476ef7dfb6758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:cc:e9:07:01:c0:1b:17:c9:21:3d:1f:6a:
b9:d2:80:7c:d2:7e:88:ba:c3:48:c8:e6:a0:76:b6:
0c:c2:e7:36:f8:12:eb:21:4d:03:75:c6:b2:86:f0:
37:90:f8:b7:ea:76:28:f5:82:2f:ca:8e:27:c2:40:
ea:ab:61:aa:f4:bf:b3:9d:09:6a:14:89:0e:49:7f:
c1:6c:e8:fa:bc:92:16:cf:c8:72:d0:6d:08:85:8b:
1a:b5:e5:61:26:e3:8c:44:2e:c9:dc:93:db:d6:f9:
12:90:47:aa:e4:d1:e4:82:47:10:54:27:42:7a:28:
65:5e:af:d1:84:dd:7f:b9:cc:98:30:52:a6:56:ac:
03:2c:ce:9e:68:6c:c9:f9:c1:a7:c6:c6:54:96:3b:
95:4c:da:5b:5c:2c:fa:ca:de:f7:07:d8:01:4a:68:
af:8f:84:99:e7:7a:a5:22:5e:bf:28:4d:0c:70:46:
90:d2:7e:a4:d9:72:09:a4:47:11:0c:d3:cd:f4:6d:
15:76:75:df:d6:32:b5:50:0d:e2:1d:aa:6a:ac:14:
b2:91:45:31:3f:5a:bc:11:ec:16:ad:1b:3d:ef:c6:
32:7f:07:c8:a7:a5:35:c3:db:d8:2c:b2:3b:26:ee:
18:eb:d2:2a:4e:6a:a5:9b:3f:eb:6d:f8:ff:40:a0:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6F:4A:F8:F9:3B:BB:BD:BA:3E:7E:C1:7A:24:76:EF:7D:FB:67:58
X509v3 Authority Key Identifier:
keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bd:c6:c4:1a:65:e8:d7:8f:d2:39:d8:c1:b4:d3:30:b6:59:
91:68:e7:93:e0:5a:5e:6d:90:da:d5:b2:54:4a:eb:b3:6e:36:
c6:d4:c4:c4:c4:1d:ad:57:85:10:69:8a:c4:6b:07:10:b4:6f:
a0:8f:da:f1:5b:74:4d:d7:72:40:96:bb:f0:9a:5b:dc:da:5e:
14:dd:c5:b5:97:67:d6:12:86:64:4e:39:71:c3:6f:53:04:57:
b1:7f:a9:9b:9c:14:b9:1c:88:6d:5a:4b:d6:62:97:ba:4a:cf:
03:20:b5:8d:c5:83:fb:e2:96:fb:c7:5d:f0:10:b8:1d:54:ad:
d4:97:db:92:73:51:c7:02:9d:d0:fe:0d:66:5e:7a:2a:eb:ba:
1c:44:42:e6:3e:b5:37:24:d5:5d:a7:25:65:e1:75:59:20:a9:
46:7e:83:eb:f8:c1:5d:7d:ce:0c:39:4e:75:d9:ee:7d:f9:84:
d1:2a:ef:03:be:3a:bd:f2:c2:3a:a0:6d:50:d0:d1:3a:b3:0a:
ff:80:ff:f9:75:d1:a0:37:c2:84:c1:8a:1d:5a:cc:93:75:cf:
4a:a8:37:6c:b3:9b:9b:a5:47:cb:2e:b9:ec:ed:7b:63:3a:c6:
78:af:42:d3:bb:ce:37:4b:fa:33:d2:a0:27:b4:ac:dd:27:06:
c8:f0:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:31 2026 by rpki-client