This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File: 7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier: W7gcD40nA5y05nH3IW0LMvZLprOBh4oXS6SB2ThWyuY=
Subject key identifier: 8D:5F:3A:92:AB:13:BB:E5:9B:BB:28:75:6F:03:34:9E:26:2A:D0:9A
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 019BF3F56AEE994E654B9FAED66C24F3F2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number: 17E7
Signing time: Sun 25 Jan 2026 07:01:45 +0000
Manifest this update: Sun 25 Jan 2026 07:01:45 +0000
Manifest next update: Mon 26 Jan 2026 07:01:45 +0000
Files and hashes: 1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: sJvtJtNTkAlpI4bPvMQ477JPA2uPeMHe68W2YLw3few=)
2: YfWgj2my_KeNLyWnne6FgiOk-6s.roa (hash: tWmUa8IGcqX7DqS4EQsx6DEzH9rUFPj7katD2nQ7ngQ=)
3: a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa (hash: N1TPiZLS4CBPYcke7d0x1aNn6YXVm1B/Voa46DaLwok=)
4: cttWIecNV3-RxwLBOUCi60J1iJY.roa (hash: BkBMDu3YGkPA9g0Vj6imuKd49PHZGK/pP3QhJiDHRZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f5:6a:ee:99:4e:65:4b:9f:ae:d6:6c:24:f3:f2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Jan 25 07:01:45 2026 GMT
Not After : Jan 26 07:01:45 2026 GMT
Subject: CN=8d5f3a92ab13bbe59bbb28756f03349e262ad09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:bb:d8:25:10:ff:a5:7b:e9:0a:9f:e2:5e:
ef:db:ee:df:34:a5:53:c0:9a:0f:ce:fa:69:09:44:
64:c5:36:1d:b5:52:52:70:1f:d1:68:cc:88:a3:6f:
4b:33:2e:15:70:a7:e6:d7:7c:4c:c5:74:fd:da:9d:
77:7c:5f:55:06:56:36:15:e5:10:6b:d5:7f:0b:82:
81:b0:89:43:4a:55:08:c3:bc:37:ae:5e:8d:fa:86:
4b:cf:99:5d:7b:93:be:12:13:ce:58:bf:6e:e2:61:
40:50:36:30:be:32:26:14:e0:0d:5a:7e:62:db:b8:
bc:af:ac:75:08:1c:31:40:d5:71:aa:c4:03:ef:ba:
8e:8e:f8:18:8c:76:75:f3:26:4f:54:f4:a7:65:43:
43:47:8a:39:66:d7:b4:ff:74:80:37:8e:c2:91:1a:
70:50:96:50:be:e5:44:13:60:c7:7f:9f:a0:85:06:
6d:3a:6d:5a:a5:40:b8:c0:5e:2a:97:59:67:8b:04:
30:48:ed:9c:24:b5:11:d3:69:72:92:87:e5:7e:42:
b4:f4:13:0b:40:1c:f7:9c:bc:28:b0:1b:b3:10:34:
48:27:da:3a:74:af:83:e5:ec:3d:3f:0a:f4:6a:d3:
a2:25:98:b8:e1:37:63:21:c9:3e:75:45:c2:4b:47:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:3A:92:AB:13:BB:E5:9B:BB:28:75:6F:03:34:9E:26:2A:D0:9A
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:42:c9:4d:6b:99:7d:6f:40:cd:71:49:37:f9:60:b2:db:40:
b5:17:6e:7f:fa:31:f5:ce:82:dc:bb:ae:d7:1b:2e:8e:09:d9:
2a:be:fc:60:62:3c:bf:fb:8a:f6:43:ea:39:99:78:a7:13:40:
6a:35:a2:47:84:7e:6c:60:2e:46:dc:26:b9:36:e2:cd:da:35:
92:70:5b:58:23:f4:ee:f7:8a:5e:d1:50:7e:b4:52:e1:0f:4d:
29:dc:35:85:e3:1c:01:29:b6:a3:a9:6d:f5:f2:59:fc:d6:e6:
63:05:19:53:43:4a:76:db:05:8a:eb:aa:d9:b6:95:3b:4a:69:
d8:f1:96:67:63:cd:ac:35:32:29:99:81:73:b5:d5:e5:fa:f8:
0f:0a:5c:37:17:85:95:d1:97:aa:b2:68:e7:4e:5d:2b:c8:6c:
4d:3a:87:b6:e9:4c:61:2e:ba:40:bd:08:34:ac:e8:93:42:73:
83:31:f6:9e:de:dc:08:f2:ef:ff:c8:8c:ce:da:44:02:9d:ee:
ca:34:d7:b3:90:c3:e8:19:34:6f:b4:41:df:9d:a0:05:f4:43:
04:80:0f:0c:d8:60:77:f3:0a:4c:9b:cf:c3:66:57:b2:a6:3f:
5d:53:31:49:ef:1a:f8:d8:40:aa:79:91:b1:79:97:56:36:7e:
8e:ff:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:08 2026 by rpki-client