This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: CuhiU1IhY/RXk3UPHGuZmMKhhXLkwcdU6vyLP904bCo=
Subject key identifier: 70:CC:97:4B:B3:E2:C5:4F:58:72:19:2C:69:01:2C:28:D6:7E:20:E6
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019C41D846E49DD4E0827DF41CCD1410222D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 181F
Signing time: Mon 09 Feb 2026 10:00:18 +0000
Manifest this update: Mon 09 Feb 2026 10:00:18 +0000
Manifest next update: Tue 10 Feb 2026 10:00:18 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: EHb9zf6d5O6bNeAcozXyc7eqO14On7CZGKgB4Ha6s4I=)
2: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=)
3: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=)
4: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=)
5: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=)
6: Z7EF1vEpMJoxk3gDOGnBciFfSNQ.roa (hash: w5vWOIVuV6xNWFTRCHG5fzGxl2lvYUDewTjO/+mBqVU=)
7: bJ-s2NJ5eywWHFMovcD-LOMTmjU.roa (hash: xgxhhwvW3lfo02BHcwDD9zbM9SrnrImkop0rHRy8xrc=)
8: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=)
9: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:46:e4:9d:d4:e0:82:7d:f4:1c:cd:14:10:22:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Feb 9 10:00:18 2026 GMT
Not After : Feb 10 10:00:18 2026 GMT
Subject: CN=70cc974bb3e2c54f5872192c69012c28d67e20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:f2:c2:4b:fc:67:71:38:4b:c5:f4:53:b2:
40:d6:52:24:2a:ac:ae:7a:01:fd:25:32:83:13:25:
32:df:d7:56:d1:7d:39:ae:6b:ed:98:2c:19:27:36:
d7:62:93:de:73:60:30:a6:44:05:4a:a0:a2:e7:39:
c1:44:97:f3:af:c7:1a:a4:d3:ff:b7:da:6b:93:6e:
34:2f:18:54:2a:d5:75:96:e5:02:8b:48:20:f7:01:
23:49:e1:b6:e2:30:80:95:bb:53:9c:36:5c:f1:4d:
ed:48:e0:3f:73:38:19:3e:ce:ba:4c:4f:af:63:9c:
3c:b8:5a:87:6d:3b:2b:54:05:a8:6b:62:e9:d1:80:
7c:36:27:32:f1:f2:d4:e9:ba:07:a0:ea:50:bb:ba:
54:ab:af:eb:be:45:56:d5:2c:8f:fa:ce:b5:12:92:
46:27:63:c6:79:a4:c0:70:d3:75:80:12:af:99:1f:
26:f0:c3:f6:1e:82:24:ce:e2:4d:99:71:c7:91:fb:
71:d1:80:69:1d:38:3e:dd:3f:5b:28:ca:16:a2:03:
55:65:70:12:48:81:06:b3:99:43:27:c2:e3:44:84:
cf:76:f0:1f:e5:08:5c:08:6c:b6:7a:69:5d:9f:26:
f2:10:6f:43:99:14:5b:6b:55:57:1d:e9:f4:fb:e2:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:97:4B:B3:E2:C5:4F:58:72:19:2C:69:01:2C:28:D6:7E:20:E6
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c3:9e:62:f2:59:3f:69:80:69:1c:6e:de:de:e9:ac:2f:5c:
3a:b1:48:92:a0:b5:e0:f7:07:b1:29:80:b4:cb:d5:07:9e:36:
4c:36:f3:c4:6e:bd:5e:b7:67:eb:f1:8f:86:f6:46:22:84:60:
38:ea:2b:35:a6:1f:54:e9:f2:91:f3:fa:94:44:e2:cc:86:72:
4e:e6:59:e1:e1:a6:8b:ac:34:4f:e1:47:79:f7:61:e7:8a:c4:
80:b8:ad:1d:da:0f:ae:b0:6e:3f:32:76:11:24:68:28:22:0e:
32:9d:53:a0:c9:4c:ff:e5:94:f7:bb:3f:7e:ea:4a:5c:76:f9:
59:d4:e3:78:73:7b:da:53:96:1a:ad:73:45:af:b1:00:7c:8e:
db:35:32:f6:61:fc:f7:7f:1f:f4:a9:af:66:10:7a:16:39:a8:
83:09:b4:6b:3a:8b:85:76:6a:6e:0d:e4:41:ce:ae:e0:b4:90:
d0:c4:88:41:ae:98:66:2a:35:b4:4c:1d:43:01:d0:28:c0:2c:
50:dd:12:15:7f:5e:06:20:c7:38:bb:7b:95:ca:84:06:81:6b:
b3:ad:4c:85:d7:a1:3b:e9:44:a0:19:c5:dd:ba:e0:22:d0:e8:
e8:c2:ec:df:c1:40:2e:08:e9:7c:7a:b0:03:c2:11:a5:27:cf:
25:02:4c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2EbkndTggn30HM0UECItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjYwMjA5MTAwMDE4WhcNMjYwMjEwMTAwMDE4WjAzMTEwLwYDVQQD
Eyg3MGNjOTc0YmIzZTJjNTRmNTg3MjE5MmM2OTAxMmMyOGQ2N2UyMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIHywkv8Z3E4S8X0U7JA1lIkKqyu
egH9JTKDEyUy39dW0X05rmvtmCwZJzbXYpPec2AwpkQFSqCi5znBRJfzr8capNP/
t9prk240LxhUKtV1luUCi0gg9wEjSeG24jCAlbtTnDZc8U3tSOA/czgZPs66TE+v
Y5w8uFqHbTsrVAWoa2Lp0YB8Nicy8fLU6boHoOpQu7pUq6/rvkVW1SyP+s61EpJG
J2PGeaTAcNN1gBKvmR8m8MP2HoIkzuJNmXHHkftx0YBpHTg+3T9bKMoWogNVZXAS
SIEGs5lDJ8LjRITPdvAf5QhcCGy2emldnybyEG9DmRRba1VXHen0++LvjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDMl0uz4sVPWHIZLGkBLCjWfiDmMB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsOeYvJZ
P2mAaRxu3t7prC9cOrFIkqC14PcHsSmAtMvVB542TDbzxG69Xrdn6/GPhvZGIoRg
OOorNaYfVOnykfP6lETizIZyTuZZ4eGmi6w0T+FHefdh54rEgLitHdoPrrBuPzJ2
ESRoKCIOMp1ToMlM/+WU97s/fupKXHb5WdTjeHN72lOWGq1zRa+xAHyO2zUy9mH8
938f9KmvZhB6Fjmogwm0azqLhXZqbg3kQc6u4LSQ0MSIQa6YZio1tEwdQwHQKMAs
UN0SFX9eBiDHOLt7lcqEBoFrs61MhdehO+lEoBnF3brgItDo6MLs38FALgjpfHqw
A8IRpSfPJQJM1w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:27 2026 by rpki-client