This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: CSfy8p6aTRZDUEW65XHYemlzf0rAb+j/6jPBKuXritg=
Subject key identifier: 94:83:CE:C6:78:43:8B:E6:D2:C3:74:C0:DA:8E:BC:61:9C:76:7E:2C
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019BF3500F2FBAF7F5D7C7AB48923CAFACEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 07EB
Signing time: Sun 25 Jan 2026 04:01:08 +0000
Manifest this update: Sun 25 Jan 2026 04:01:08 +0000
Manifest next update: Mon 26 Jan 2026 04:01:08 +0000
Files and hashes: 1: AAxqzE_DaNwqJtSiSRt01LrD11E.roa (hash: AsdkBWjUsMF1PMPWszixSJb73omz0Nujo4Z01ynXMW8=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: px3w8TWL5x5Tr06bsJyFCOTUA2Ae6xrUQ2iCSsCipdE=)
4: haFLcC9NWw9ub46milFGifb1wm8.roa (hash: MLM9+m/KRPi8dl+vkuj88InrFcUl/TiXCjaTZOweCP8=)
5: nVrsmiE4mZkUHdQosAPmUQgfiN8.roa (hash: HnvmyHFabWozXyzydQ+3XrK2DXsd/lYo1fc4nVOwXr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:0f:2f:ba:f7:f5:d7:c7:ab:48:92:3c:af:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 25 04:01:08 2026 GMT
Not After : Jan 26 04:01:08 2026 GMT
Subject: CN=9483cec678438be6d2c374c0da8ebc619c767e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:26:b6:3c:ff:b7:be:7a:79:50:bf:5c:76:
03:a0:de:33:a4:5b:1b:f2:f5:08:5b:43:60:c2:70:
95:16:08:74:9d:1d:0f:59:77:0e:70:8a:41:c3:60:
e3:dc:2d:b8:1f:85:aa:57:1f:dc:d0:0f:c5:87:05:
00:51:df:50:b4:86:38:05:37:34:ae:05:3e:c8:03:
c7:7c:63:3e:8f:da:1d:cb:7d:7e:c6:31:99:2c:dd:
e8:ea:55:e2:29:18:6c:0e:f2:8c:ec:50:06:3f:10:
3b:18:eb:a6:48:79:db:bb:82:8f:5f:76:70:2d:b9:
7d:ba:4f:87:86:bb:a7:ed:55:8a:3a:73:16:9f:3a:
d7:5b:10:8f:57:5c:a3:18:49:86:57:9e:f0:83:51:
43:87:8a:63:ac:3d:9a:3f:d5:08:51:02:8b:05:2a:
2a:8e:e5:c3:f3:ed:50:e0:77:33:f1:01:94:c1:ed:
3a:b4:c9:85:37:fc:c2:06:7e:54:3b:e1:76:51:0a:
c6:e9:bc:95:60:e7:e9:15:4b:23:e0:a8:9d:67:9d:
02:40:ba:ae:1f:10:8c:09:1d:c3:34:25:1d:3c:ed:
30:35:dc:66:30:89:a8:08:93:2f:aa:6a:c0:4e:35:
b0:2c:fb:3a:34:db:39:8e:f5:91:1f:47:e2:82:47:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:CE:C6:78:43:8B:E6:D2:C3:74:C0:DA:8E:BC:61:9C:76:7E:2C
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:24:0e:7c:b3:c2:2c:aa:ec:b0:27:4e:38:f7:d7:19:6f:3e:
7a:6e:6d:52:6a:88:58:2b:46:16:82:31:40:2d:9f:34:ca:5b:
d9:3f:5f:70:94:79:ab:4a:1c:ef:82:3c:ae:d6:5d:f0:97:6b:
15:9e:8f:f2:1f:ec:3f:8d:b5:cd:ed:73:bc:04:23:b5:17:18:
bd:76:7b:7e:3c:69:23:08:1a:38:8a:ca:a2:34:a1:88:53:ef:
99:6f:dd:a4:f8:aa:6d:39:44:f8:98:4c:92:ec:da:91:ce:87:
23:52:23:8c:65:43:7e:21:f6:c6:da:13:0c:6b:b0:8f:8a:51:
5b:8a:04:54:50:a0:9a:4f:df:a3:15:15:82:59:3c:7a:0d:a6:
8a:db:ec:72:02:dd:35:35:1d:40:d4:23:5c:9f:4c:64:5d:a8:
04:ef:49:99:ec:2b:92:af:70:97:b6:4c:40:a1:5f:9b:9f:37:
d2:f9:39:eb:8b:5d:96:45:e2:cd:99:0e:be:3a:a0:f0:53:c8:
88:d4:19:ae:17:cf:5a:60:91:64:d5:97:e7:fd:a9:2b:16:f0:
f7:66:47:d1:0c:57:b0:6f:06:3b:46:1d:af:93:15:01:e1:31:
7a:54:20:9f:7f:69:37:73:1b:bc:ba:c0:44:d5:2e:af:94:3a:
2a:1e:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:53 2026 by rpki-client