This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier: VxECYN+2XDNrYjVbraKsqOmxoIOGsZsboZMIBPdZAy4=
Subject key identifier: 92:C1:2B:FC:BF:4B:56:AC:D3:31:C6:63:80:16:AA:E0:5C:A4:5B:3D
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 019BF4D064E7770505DBDF1F64374A9EFC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number: 17E8
Signing time: Sun 25 Jan 2026 11:00:56 +0000
Manifest this update: Sun 25 Jan 2026 11:00:56 +0000
Manifest next update: Mon 26 Jan 2026 11:00:56 +0000
Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: sOWsy5RHjseXD6N6tAP9WYuOZksefFCzHM2L6SxwjW0=)
2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:64:e7:77:05:05:db:df:1f:64:37:4a:9e:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jan 25 11:00:56 2026 GMT
Not After : Jan 26 11:00:56 2026 GMT
Subject: CN=92c12bfcbf4b56acd331c6638016aae05ca45b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:10:df:88:fe:a1:58:66:ab:13:13:fb:a3:
47:ce:54:1f:b2:d8:d5:68:db:17:69:58:7c:bb:93:
63:cd:fb:2a:87:b2:03:d8:d0:2c:04:f5:f7:d5:a4:
a0:3b:32:0e:a4:65:f5:c0:7d:73:fe:f8:0a:f2:da:
19:7f:23:44:12:68:c0:81:21:03:ba:9d:8c:68:bc:
54:2c:4f:87:71:40:65:ba:ba:0c:15:f2:ce:e7:aa:
72:63:ea:9c:6f:ee:eb:93:7a:05:32:b8:66:68:e7:
d4:e1:aa:ee:40:a9:9e:4c:de:fb:77:55:a1:0e:89:
78:58:56:9e:03:f5:f7:28:41:cb:c9:9a:2f:a0:fd:
2b:d5:3d:10:da:7d:31:3f:db:c2:22:68:23:87:45:
f6:36:fe:8d:e3:b6:61:3c:b6:8f:f0:52:63:31:80:
eb:62:27:16:85:8e:a2:c4:1a:9b:b2:1a:e6:01:e5:
65:f6:07:7c:db:33:35:d0:68:34:b4:23:6f:4d:9e:
e1:69:c0:a6:a1:fa:67:b4:a5:c6:12:41:ba:e6:77:
cb:01:0b:bd:5b:be:5e:d3:a9:01:02:2c:7d:d0:ca:
e2:ac:ce:ac:2f:39:88:d9:47:c2:64:e3:a1:a2:90:
6c:52:8c:7e:37:06:3f:d4:33:0e:b5:44:43:a5:de:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:2B:FC:BF:4B:56:AC:D3:31:C6:63:80:16:AA:E0:5C:A4:5B:3D
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d0:a2:10:86:42:02:df:60:80:2f:c2:0b:82:62:29:67:09:
02:1c:a3:ed:a5:99:d4:e8:ed:22:59:be:d1:f5:c6:21:be:78:
58:4d:cf:76:d9:ab:cd:44:9b:41:64:31:73:b9:b7:06:9f:a0:
40:91:a8:ca:b5:04:63:be:ff:71:ba:53:67:9d:94:0c:28:09:
f9:c8:42:70:dd:02:30:ec:af:bd:18:d9:e5:07:53:2e:72:dd:
fb:b6:66:bc:c6:2d:bd:42:4e:22:2d:15:fa:dc:4f:86:da:44:
9c:6a:11:2d:52:20:38:34:9a:cf:65:16:fc:e1:cc:14:81:44:
99:df:c2:dc:08:39:3a:cf:28:f8:89:4d:38:fa:d9:d6:c4:17:
aa:a7:12:e1:59:73:e7:d9:4c:3a:c6:c6:4b:8a:f9:26:b1:58:
a3:1b:48:71:c5:1b:5e:4a:55:93:30:dc:a8:79:be:d1:da:54:
40:b6:78:8f:ed:66:a2:d7:8e:c4:e3:f0:87:48:1a:4d:fa:38:
15:d0:a7:24:c6:e7:5a:78:f5:7e:12:e9:df:f6:c9:c5:ce:72:
c3:37:79:32:05:ba:3e:4d:6e:f6:a4:49:5e:80:cc:16:8d:5f:
ca:9e:e0:15:bd:d1:61:76:d2:ac:4e:4d:31:90:ce:96:95:c0:
e1:b1:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:08 2026 by rpki-client