This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File: 4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier: JNTaLoDODnbsbhLrmNq4Wn19AvC8dI2vhNoZCLwa9ao=
Subject key identifier: F4:4D:CF:CC:4E:0C:FB:3E:DD:28:76:CB:F0:DE:23:CD:7D:3F:9B:B6
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer: /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial: 019C43221A9CC9B0B38EE517BF278ED1B6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number: 0944
Signing time: Mon 09 Feb 2026 16:00:34 +0000
Manifest this update: Mon 09 Feb 2026 16:00:34 +0000
Manifest next update: Tue 10 Feb 2026 16:00:34 +0000
Files and hashes: 1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: wqWGt6wyPXvlmkzMKIOK+8tv0Prooqss3BSkOEDKtwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:1a:9c:c9:b0:b3:8e:e5:17:bf:27:8e:d1:b6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Validity
Not Before: Feb 9 16:00:34 2026 GMT
Not After : Feb 10 16:00:34 2026 GMT
Subject: CN=f44dcfcc4e0cfb3edd2876cbf0de23cd7d3f9bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f9:46:d6:fc:1e:c9:0a:3f:61:c5:ec:23:dc:
26:10:bc:20:5b:6f:3b:93:5a:85:df:a1:72:6f:54:
70:ec:85:b7:55:d2:47:1c:2c:8d:35:9d:92:40:62:
4d:a4:6a:42:35:8a:3e:5c:9d:4a:5f:39:e0:55:81:
65:67:38:a4:39:c6:05:56:5f:0b:93:33:a4:fa:09:
24:47:75:88:79:61:48:c2:f3:74:93:0e:58:87:5a:
1c:b4:2b:d2:31:76:2c:dd:50:6c:7c:aa:92:e4:dd:
df:f3:f4:c8:2b:a7:80:bf:d9:33:c7:2e:99:a9:20:
74:5e:bc:0c:d6:4a:65:62:29:35:ae:0a:4c:a5:47:
89:9e:76:4a:dd:b1:0e:61:40:85:36:f2:0e:36:36:
89:70:4e:b5:f9:f8:e5:d9:50:d7:71:24:7f:ad:15:
af:26:3d:4c:7c:9e:2a:41:a0:ba:a5:10:df:8d:00:
9f:46:bd:c1:b9:c8:38:24:a4:2f:85:a4:5b:aa:eb:
f1:3d:5c:bc:7e:46:60:14:10:0b:00:1d:69:2b:0a:
d1:b1:71:e8:0e:62:6b:db:12:6a:aa:eb:c4:b6:c2:
f5:06:b3:b9:d8:77:28:ea:a1:74:ee:cc:d8:27:9f:
06:eb:7e:7b:f1:4a:3a:9a:95:2f:d8:4e:58:6c:f8:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:CF:CC:4E:0C:FB:3E:DD:28:76:CB:F0:DE:23:CD:7D:3F:9B:B6
X509v3 Authority Key Identifier:
keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f5:00:4e:72:68:e8:d2:6b:b9:b6:02:65:f6:d8:65:2a:be:
64:64:b1:ad:9c:aa:46:29:99:54:8c:8c:fc:d7:03:db:29:ba:
13:f8:a6:95:77:1d:b8:aa:e5:34:0e:3d:9b:5c:92:79:a8:8e:
7d:34:4a:87:38:1f:ca:c5:6c:34:58:26:9a:db:06:ef:27:15:
1f:cd:89:95:fe:52:ec:fa:65:a3:1d:6a:5b:00:8a:e3:48:9b:
1c:08:77:45:55:a8:72:78:c1:bd:66:42:76:91:0b:70:43:b8:
58:a9:89:60:4a:68:e1:97:0e:20:48:01:d6:5d:62:3f:81:da:
e2:dc:f7:74:d0:91:b8:29:69:21:f8:55:37:99:11:43:5c:f4:
aa:33:8a:91:3b:40:da:96:d9:68:c6:76:6c:89:e0:4b:c2:6c:
eb:49:88:bc:c6:34:11:a7:72:0b:fd:27:60:28:1e:da:e0:72:
8d:fd:f2:bc:05:db:95:a8:9a:80:e8:ee:ba:91:8d:9b:92:05:
8b:2b:78:52:13:32:b5:7d:62:92:ac:08:77:db:89:fd:3d:98:
01:35:ef:2e:33:48:61:eb:2d:7a:83:e6:3a:9f:c7:7e:ef:ff:
65:f0:cb:cd:1f:f8:66:f6:fc:2c:a5:17:21:f5:b4:56:2d:42:
47:74:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:56 2026 by rpki-client