This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: 0at0wArEMJXxCXBtm9hiIgoPKBa5ZzKmPndToUpLwtc=
Subject key identifier: 07:D8:75:8A:48:98:81:14:1E:ED:9F:C3:92:53:53:50:22:EC:01:20
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 019BF6F6072EF50419D6EB7015499485648B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 17F1
Signing time: Sun 25 Jan 2026 21:01:17 +0000
Manifest this update: Sun 25 Jan 2026 21:01:17 +0000
Manifest next update: Mon 26 Jan 2026 21:01:17 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: iZlfv3TvgzPEK5a3Ne314Brgqs0qFNz/mCcGT297PSc=)
2: MoM66qQuhJcSL5w9TkLPi9sdoKs.roa (hash: /dt2y7/UKbT5EuF45pcmtQs53CRnIBBB6Rg/I22HBZM=)
3: rwInDctVSqf9bY5au3SgxXMR30k.roa (hash: HNhqme3U8E9COjNTzz0hBRfGIPWCZDCViGGXUd7ReyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f6:07:2e:f5:04:19:d6:eb:70:15:49:94:85:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 25 21:01:17 2026 GMT
Not After : Jan 26 21:01:17 2026 GMT
Subject: CN=07d8758a489881141eed9fc39253535022ec0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:6a:be:7d:26:33:29:0f:07:13:52:c3:fa:
d0:d1:5a:03:54:ca:b1:db:4b:d4:0a:d8:d9:8e:60:
bb:2e:3e:e2:b7:7f:a3:a3:0c:3b:ca:56:a0:67:ee:
2f:43:83:2f:d3:6a:87:d8:f7:60:85:ce:2d:09:c4:
ea:2a:7c:d5:80:37:2b:f8:95:ac:91:10:5a:8d:85:
49:9b:47:6c:ad:58:02:61:ed:b8:35:49:97:aa:d4:
5c:83:74:de:e4:69:a9:8a:94:f5:1f:70:34:84:1c:
44:ee:41:62:67:c9:89:6a:e5:9e:15:5f:78:45:28:
0b:8f:72:3e:9d:8d:50:69:6d:6f:be:8d:8d:21:c5:
2c:b0:f6:0a:62:99:2e:77:d6:ad:92:24:a0:7b:0c:
f0:a8:35:ff:95:cc:9f:69:57:28:49:44:ba:2b:59:
a5:a1:23:e8:a6:3e:ce:7e:98:ec:fd:79:e0:81:a4:
03:57:5f:c6:bc:f1:99:e0:79:f4:87:10:57:83:c6:
77:c6:c6:a8:14:3b:3b:b6:06:5b:aa:19:47:58:54:
97:72:46:d6:e5:79:3e:4c:7b:b6:89:88:9f:e1:01:
42:88:df:dd:6a:27:d1:90:7b:da:d8:aa:30:27:60:
74:24:34:fb:cc:eb:21:da:f7:1f:51:fa:55:a7:15:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:75:8A:48:98:81:14:1E:ED:9F:C3:92:53:53:50:22:EC:01:20
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c4:5a:88:82:77:d5:17:17:15:5a:9e:74:76:c9:03:d7:ac:
89:6f:d3:a1:cc:65:4c:0c:3b:5c:8a:fe:6f:11:ef:24:6b:31:
03:5b:19:d1:52:4e:70:5b:db:41:54:26:be:c8:fd:16:67:9f:
9b:42:2c:0d:b3:71:bd:14:1a:3f:e2:2b:3f:ba:4a:be:3d:39:
9a:4d:93:9d:c3:8c:62:db:56:1f:9e:67:7e:74:bf:a5:54:46:
e4:a7:ff:10:d3:34:b3:3c:32:45:92:02:85:5a:4f:87:5e:62:
7e:70:b1:e4:50:5a:3b:5e:7f:88:a1:74:52:1f:81:29:1c:1d:
d8:13:ec:23:7b:d5:3b:73:09:de:9b:07:f1:69:f0:22:ad:10:
7c:60:28:53:77:a7:a9:68:a8:2f:27:f0:59:ab:b2:71:53:72:
a0:a4:12:2d:50:f8:7a:a4:97:6a:43:9b:5e:fd:dd:1d:b6:56:
58:af:7a:70:5c:01:19:d3:10:e0:1b:ae:b8:2d:bf:04:a6:6a:
37:dc:62:b6:4f:95:fc:af:ed:ed:a4:e9:47:ac:54:7c:f1:5d:
1e:59:ab:0f:02:80:c2:31:2d:e9:4a:0e:1b:2b:10:8a:5c:2d:
77:29:66:c2:cc:12:98:68:72:29:ef:fb:90:0c:9e:b2:f1:2c:
fb:dd:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:22:56 2026 by rpki-client