This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File: egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier: 9lyloT9sEGBTzRkETSfsY13ByGfLKIzYqSrDBEIzNZw=
Subject key identifier: 45:C2:A2:7A:38:94:62:70:8C:A2:D5:DD:D5:D8:A7:2F:34:08:44:CA
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 019BAEDDEBC1F3F1784BB3BF19EB311EF485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number: 1125
Signing time: Sun 11 Jan 2026 21:02:17 +0000
Manifest this update: Sun 11 Jan 2026 21:02:17 +0000
Manifest next update: Mon 12 Jan 2026 21:02:17 +0000
Files and hashes: 1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: 6vUhj4qGOhiZK8RqXCnZg2GI+iPAtfIcLZoAZTVGU+k=)
7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ae:dd:eb:c1:f3:f1:78:4b:b3:bf:19:eb:31:1e:f4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Jan 11 21:02:17 2026 GMT
Not After : Jan 12 21:02:17 2026 GMT
Subject: CN=45c2a27a389462708ca2d5ddd5d8a72f340844ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:62:96:a6:8e:0d:83:76:1f:91:49:1d:6d:
ae:4b:e5:84:b1:ed:b5:87:e8:b3:b4:b8:52:19:25:
62:37:d9:a4:d2:e1:f7:85:0d:c2:3f:a8:fc:d9:69:
9a:73:60:e3:d7:13:c6:79:7c:a1:69:cb:ff:e1:e3:
69:e9:a3:51:98:77:55:bc:79:c9:5c:94:6d:96:c5:
ee:a5:67:e3:68:d7:4b:4d:46:87:87:21:24:1d:6e:
8b:4d:c9:26:a5:9d:e1:66:d9:0f:ee:e5:b6:63:a2:
38:3c:60:0b:69:05:f3:67:91:2d:5d:4b:f4:87:f7:
c5:75:d4:7f:c8:e7:6e:53:1c:80:02:c7:24:8c:63:
68:bf:1b:9f:2c:b5:0c:25:87:03:2c:ac:9f:8d:b6:
20:28:44:75:da:17:06:dd:19:e8:fb:64:5d:8a:73:
f7:b6:24:28:25:de:6a:fd:b0:df:4e:22:2d:89:4c:
4a:ad:67:b1:c2:14:63:58:4e:1c:b5:64:13:bd:8c:
91:4b:c8:ae:1e:5e:b1:83:4e:16:af:8f:67:7c:0f:
5c:53:18:9f:97:1d:5c:10:90:19:07:36:f2:3c:76:
82:f9:49:9c:00:ef:1e:e8:ed:96:c0:87:e4:da:34:
7d:be:29:7a:63:57:f4:85:ea:96:e1:67:a4:31:07:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:A2:7A:38:94:62:70:8C:A2:D5:DD:D5:D8:A7:2F:34:08:44:CA
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:67:ce:0a:27:9d:eb:9c:af:df:bc:89:e1:75:6e:9f:f9:dd:
b7:8e:75:2b:8b:6e:32:4c:9c:8e:23:10:9d:53:42:83:ba:11:
be:e1:86:08:c8:c4:10:10:4b:7d:25:90:36:7f:ee:ae:c3:98:
22:da:9f:5b:74:58:d4:8a:b3:12:54:74:d6:7f:ef:33:3f:2b:
3a:f6:b1:1a:01:e8:b7:ac:23:66:bb:9f:dc:b5:c2:11:39:c0:
69:b0:c8:79:4b:eb:b9:23:76:57:67:71:2c:e5:a7:8c:3f:29:
c8:75:00:99:e5:1d:33:80:25:2d:69:a5:06:8c:08:2b:40:ea:
ae:01:64:f5:1d:c2:f7:9e:01:5a:92:8e:af:4a:96:72:98:9a:
6b:ab:aa:22:16:2d:ef:d7:a3:0d:82:ab:de:db:59:d9:1b:49:
0c:01:83:ab:26:1f:32:97:ba:c6:ad:19:29:83:94:d5:44:96:
8f:88:43:49:cd:f0:fc:28:4c:6a:89:fc:8b:0a:9a:f6:32:7d:
bf:88:28:7f:03:0b:3e:1f:76:47:56:e8:ba:2e:c6:ce:c8:7a:
f0:48:f7:e3:42:84:7e:9c:60:b0:42:ca:30:a5:fe:11:d1:5a:
88:77:8c:d3:c0:81:40:a4:ea:b9:08:fe:13:0d:41:d9:f6:76:
42:2b:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:29:16 2026 by rpki-client