This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: FDeZpBEQCKFS74+z88fmx4d4IchvhUMhp4rRzhE5RzM=
Subject key identifier: 8F:D4:2A:08:FE:11:4D:33:BE:58:6D:40:2B:3B:8A:66:2F:E6:15:93
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 019C4210461D918B1089651D6469160A64BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 0EA4
Signing time: Mon 09 Feb 2026 11:01:28 +0000
Manifest this update: Mon 09 Feb 2026 11:01:28 +0000
Manifest next update: Tue 10 Feb 2026 11:01:28 +0000
Files and hashes: 1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: VQ53lrOPABvfpAUG1ZmWty9p/aC3vJ6V4MikTJ4/d6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:46:1d:91:8b:10:89:65:1d:64:69:16:0a:64:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Feb 9 11:01:28 2026 GMT
Not After : Feb 10 11:01:28 2026 GMT
Subject: CN=8fd42a08fe114d33be586d402b3b8a662fe61593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:18:05:08:7d:9e:20:d5:f9:d8:81:da:2e:
ac:bf:56:3e:1f:e3:32:7e:87:9c:da:b7:5b:0c:9d:
0c:4b:bd:6f:a8:59:58:d7:c4:2c:66:7c:a5:61:2f:
57:14:07:5f:69:98:8d:b6:62:82:54:77:a6:22:3c:
2a:d6:7c:31:28:f2:fd:97:f9:05:d2:37:dd:eb:a8:
ac:dd:c8:27:d2:2e:63:b7:99:80:5e:1b:a2:c4:e5:
17:e4:df:ce:dc:d0:72:da:66:d0:0c:e6:f1:e1:1a:
9e:ec:f5:4d:98:14:44:94:4d:0d:a9:58:35:f6:77:
d0:4f:de:7f:b3:0a:96:22:42:73:6a:03:00:fe:2d:
94:67:40:f7:23:a9:ed:dd:31:a9:ac:e0:44:b8:ad:
af:fb:22:6a:72:25:53:40:49:0c:f5:d9:e7:f4:c3:
47:75:e8:33:e1:53:7a:18:8e:29:eb:99:10:2d:c9:
bd:98:97:f1:63:88:84:3d:37:8c:fa:57:b1:3a:ba:
b8:fe:2d:f9:fd:b3:14:95:4f:c6:83:87:60:42:d6:
81:b3:4e:93:c4:b3:2b:50:70:95:b6:04:1f:7e:fa:
07:12:c0:c5:32:36:5c:af:de:42:db:a5:94:f8:39:
b8:66:93:45:ea:9c:b4:a2:40:e8:b2:26:05:d4:13:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:2A:08:FE:11:4D:33:BE:58:6D:40:2B:3B:8A:66:2F:E6:15:93
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:28:ca:47:04:bb:85:be:41:23:25:51:2c:ad:1c:01:b0:
a0:bc:3c:fc:01:aa:13:60:4a:c0:58:0e:84:c1:3c:55:1b:07:
b2:8d:89:c9:87:69:60:e9:e5:f1:0f:4a:3f:50:66:a6:9d:1d:
d4:8a:2d:2d:9b:8b:d6:f4:20:97:82:14:65:c9:8b:fc:8c:dc:
d0:6f:88:48:ab:06:a0:a3:65:3f:9a:3b:7a:19:76:7b:12:57:
48:5a:fb:8e:6c:6b:a2:76:83:26:0f:05:0c:3c:f0:c9:07:b6:
9a:38:45:0a:d7:de:bd:07:fc:18:74:f8:43:db:7c:0d:81:fc:
d4:1a:ee:f8:cf:55:94:52:49:c6:37:a9:30:6f:a8:1f:8c:27:
09:b3:6a:f2:1a:ff:9b:a0:e7:41:ed:a4:50:89:fb:db:ce:1d:
15:16:7b:f2:89:7e:8b:bd:e4:ef:3c:52:d9:97:06:94:82:d9:
dd:b2:9f:3e:e6:0a:b4:b8:93:55:bb:dd:a5:2f:ca:81:1f:8f:
42:b3:d4:aa:c0:c6:43:cc:7a:24:50:44:29:79:d9:21:84:c0:
e7:2c:bd:e8:c9:4c:3b:cb:66:85:f5:c8:09:d4:15:ee:04:08:
a7:17:15:09:72:42:e4:38:2f:a1:dc:e0:85:ef:dd:74:e0:fa:
28:c9:1c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEEYdkYsQiWUdZGkWCmS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh
Yzk5YzUwHhcNMjYwMjA5MTEwMTI4WhcNMjYwMjEwMTEwMTI4WjAzMTEwLwYDVQQD
Eyg4ZmQ0MmEwOGZlMTE0ZDMzYmU1ODZkNDAyYjNiOGE2NjJmZTYxNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcUYBQh9niDV+diB2i6sv1Y+H+My
foec2rdbDJ0MS71vqFlY18QsZnylYS9XFAdfaZiNtmKCVHemIjwq1nwxKPL9l/kF
0jfd66is3cgn0i5jt5mAXhuixOUX5N/O3NBy2mbQDObx4Rqe7PVNmBRElE0NqVg1
9nfQT95/swqWIkJzagMA/i2UZ0D3I6nt3TGprOBEuK2v+yJqciVTQEkM9dnn9MNH
degz4VN6GI4p65kQLcm9mJfxY4iEPTeM+lexOrq4/i35/bMUlU/Gg4dgQtaBs06T
xLMrUHCVtgQffvoHEsDFMjZcr95C26WU+Dm4ZpNF6py0okDosiYF1BOxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/UKgj+EU0zvlhtQCs7imYv5hWTMB8GA1UdIwQY
MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt
NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi
LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMsoykcE
u4W+QSMlUSytHAGwoLw8/AGqE2BKwFgOhME8VRsHso2JyYdpYOnl8Q9KP1Bmpp0d
1IotLZuL1vQgl4IUZcmL/Izc0G+ISKsGoKNlP5o7ehl2exJXSFr7jmxronaDJg8F
DDzwyQe2mjhFCtfevQf8GHT4Q9t8DYH81Bru+M9VlFJJxjepMG+oH4wnCbNq8hr/
m6DnQe2kUIn7284dFRZ78ol+i73k7zxS2ZcGlILZ3bKfPuYKtLiTVbvdpS/KgR+P
QrPUqsDGQ8x6JFBEKXnZIYTA5yy96MlMO8tmhfXICdQV7gQIpxcVCXJC5Dgvodzg
he/ddOD6KMkcnA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client