This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: ARd5KRK6dCEAIqf8s6RWav6LYP3srgAmXKqVtE/38i8=
Subject key identifier: 33:1A:49:FA:DC:FB:1C:96:38:D4:A2:B1:07:89:23:2D:BD:45:E9:CC
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 019BF462B319259EA85A2200D04D23D0C175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 0C92
Signing time: Sun 25 Jan 2026 09:01:07 +0000
Manifest this update: Sun 25 Jan 2026 09:01:07 +0000
Manifest next update: Mon 26 Jan 2026 09:01:07 +0000
Files and hashes: 1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: DibCOJWpBRezmFRSb89i6vT0WX4lmOtBucoq91KIwKY=)
2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:b3:19:25:9e:a8:5a:22:00:d0:4d:23:d0:c1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Jan 25 09:01:07 2026 GMT
Not After : Jan 26 09:01:07 2026 GMT
Subject: CN=331a49fadcfb1c9638d4a2b10789232dbd45e9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:ff:22:e2:15:c8:f9:2e:03:32:b4:37:a6:
77:54:ac:de:e4:0e:b8:73:97:bb:21:71:ef:20:7d:
ab:a4:26:09:b0:78:67:55:72:5a:a7:30:d0:76:93:
41:01:8a:b8:fd:a8:68:2c:43:b0:d5:76:bc:7e:3c:
29:11:45:7b:38:f1:d8:4d:e2:45:54:8f:7a:65:6f:
e0:9c:54:56:bc:28:ab:9a:23:7e:ab:05:d6:84:c2:
31:e2:fb:88:87:3e:14:3f:7c:4e:b1:a5:56:0c:82:
bd:a3:47:af:ab:06:c1:76:a2:87:b4:08:41:8c:ec:
a2:5c:0f:92:90:f4:ab:6d:e9:7c:32:50:5b:a4:8b:
7e:35:47:94:99:48:73:32:bf:bb:ef:4c:1e:ca:4d:
a8:4b:17:33:7a:25:aa:4f:ea:d6:b9:c4:15:7d:7f:
57:63:44:78:f6:7c:42:6b:aa:bb:ab:14:a5:b8:a6:
ed:3d:8a:9d:ad:8d:ef:ae:58:29:60:e2:df:52:20:
81:18:d8:45:b8:35:31:d9:68:b9:95:bf:76:a8:a3:
ac:95:73:88:c2:bd:37:20:ec:29:61:6f:18:1a:ed:
b6:c4:df:73:03:d2:6d:5d:67:5f:08:fa:a3:f7:f1:
31:2f:8c:51:92:ae:b4:cf:69:9d:3e:21:81:86:75:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:49:FA:DC:FB:1C:96:38:D4:A2:B1:07:89:23:2D:BD:45:E9:CC
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b3:2e:ae:4b:80:d4:c1:53:92:7b:0a:46:d1:3f:22:5e:0f:
6e:91:df:53:06:3c:66:05:6c:f9:e5:28:95:43:92:af:7c:da:
9e:9a:8b:5d:e6:6b:27:aa:3d:4d:9a:4e:f1:73:c1:77:5d:cd:
2a:d8:f6:61:c3:fd:9d:64:8f:52:b6:e2:32:73:00:70:17:20:
c6:1d:50:5b:80:14:63:cb:03:b0:24:7b:32:35:4e:98:a4:bb:
7a:03:1f:03:5a:09:c5:9d:d4:3b:f8:d3:86:81:f7:8f:23:a2:
bf:94:57:e1:ee:02:cb:26:7f:9f:a1:f5:42:c9:65:9f:87:3d:
f8:a8:bc:69:7e:8b:00:97:83:d6:61:85:43:88:39:23:c8:44:
6c:cf:1f:17:ab:f5:54:b0:ac:22:51:b9:f5:10:7c:65:a9:8f:
ab:1a:44:15:d4:24:a8:55:e3:23:1b:bd:7b:0b:ec:95:0a:4f:
a3:a7:0e:0e:48:48:09:f7:3c:c6:99:2d:81:14:4b:9e:a6:35:
d5:69:f2:41:00:42:58:04:39:4a:40:41:2a:bf:c3:0f:c3:47:
47:f6:c6:d1:31:b8:a6:83:2d:e8:b1:00:2d:1d:47:19:93:c6:
84:99:1b:de:89:92:40:45:ac:4d:7b:30:56:47:9a:bb:ef:09:
75:26:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:15:06 2026 by rpki-client