This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File: e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier: gE1L/7WdWQ2uBhM91iHbI3Cto7fzE7saifPc67sdxcM=
Subject key identifier: 70:C8:5D:6A:8D:79:BF:8C:F2:CF:BC:89:27:90:5F:36:7C:DC:C5:F0
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer: /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial: 019BF6879D9307A95F3E2428A57400D70AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number: 0B6C
Signing time: Sun 25 Jan 2026 19:00:41 +0000
Manifest this update: Sun 25 Jan 2026 19:00:41 +0000
Manifest next update: Mon 26 Jan 2026 19:00:41 +0000
Files and hashes: 1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: C5vxz2CJ28nTJhUpEPpvlA5O7/slsZaAj7wDz+zeaO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:9d:93:07:a9:5f:3e:24:28:a5:74:00:d7:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Validity
Not Before: Jan 25 19:00:41 2026 GMT
Not After : Jan 26 19:00:41 2026 GMT
Subject: CN=70c85d6a8d79bf8cf2cfbc8927905f367cdcc5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:c4:1e:3c:5f:2e:58:13:75:5b:ac:89:32:
de:fe:6d:fa:05:ab:b8:05:17:0f:1c:12:9d:9c:53:
3b:72:72:ac:d0:7a:7d:a4:7d:39:8d:81:e7:60:9d:
db:64:ba:27:26:c9:23:62:97:30:cb:19:87:c0:db:
96:02:34:1a:de:f4:af:a0:a1:af:65:b4:c7:dd:b5:
a9:9c:6d:7b:a9:c6:93:a2:09:82:1f:9a:74:cd:b4:
8f:e4:f9:8f:18:ab:c9:be:7e:c6:66:2c:7d:4f:68:
60:e6:21:6e:8a:10:97:e9:53:83:8a:66:c8:6b:d9:
dd:ef:bc:52:fe:6b:a1:c1:2b:c8:b9:50:fb:f1:6b:
d4:70:59:c7:15:3b:07:69:1b:b4:4c:46:07:e1:f5:
4b:24:3d:4d:68:31:dc:7a:6e:db:a9:60:8d:4e:4d:
4e:eb:ea:2d:c6:38:dc:b9:df:43:0e:ba:92:93:b0:
f2:f1:d8:94:4f:0c:28:8c:e4:20:cd:f3:c4:19:00:
73:e4:b2:aa:1c:52:f3:25:06:75:a3:61:a5:ab:d7:
f3:ce:47:df:1a:43:4b:2b:68:32:34:b4:e9:20:7e:
96:0a:bd:19:1e:b1:fc:e3:ef:5b:9c:3d:e5:0d:b5:
fb:90:e0:e1:30:29:aa:f4:71:e0:24:66:6c:3d:8e:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:5D:6A:8D:79:BF:8C:F2:CF:BC:89:27:90:5F:36:7C:DC:C5:F0
X509v3 Authority Key Identifier:
keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:cb:f0:7d:f1:16:7a:b9:ae:1f:e9:d6:d0:af:f7:7e:9a:82:
99:40:20:e6:41:e8:e7:b9:eb:a1:59:71:87:8b:bb:12:cf:1e:
88:3f:b6:82:ba:24:be:38:7b:6c:3d:0b:c5:42:47:b8:9a:a1:
0e:8f:34:bc:af:64:a1:18:67:d1:f8:e3:3e:04:88:ae:b9:63:
88:24:4f:85:ba:5b:68:00:97:32:fc:19:54:6f:d2:78:50:a2:
74:6f:a0:dc:c8:35:64:78:d6:f5:a4:d4:81:47:36:0e:4c:73:
1b:6c:4e:a1:ba:69:43:0e:5f:a1:5c:5c:33:1b:22:90:6e:da:
60:2f:d8:4d:0f:93:fd:1d:14:e5:a8:e9:ff:35:f0:db:c7:e5:
93:c5:0e:54:24:50:77:0d:aa:15:32:2e:39:83:2c:37:76:6c:
93:15:da:a3:98:dc:e5:81:fc:ca:57:81:72:c4:f9:6e:c4:b8:
73:54:d8:24:c6:5e:f4:33:36:77:52:68:cd:c4:8e:bb:3a:20:
3e:8a:62:c6:e5:d4:fd:eb:43:06:11:26:b9:8b:d9:c3:5d:0d:
5c:ab:c8:31:06:e7:ec:60:04:42:a4:ae:b4:e6:7a:24:c9:15:
7b:2d:ce:c1:be:e2:72:3e:11:90:46:d5:e1:d9:58:43:15:71:
29:0a:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:52:29 2026 by rpki-client