This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier: RTEzup4le+yCnsK6MQETYDybas6cQiBbbAQ0D7+mPdc=
Subject key identifier: 71:1A:E1:D7:2D:FD:4C:97:78:10:31:C6:B4:82:BE:C2:49:6B:17:BB
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019C232970F9785BA73BA1CF9AEB921CBFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number: 04C7
Signing time: Tue 03 Feb 2026 11:00:44 +0000
Manifest this update: Tue 03 Feb 2026 11:00:44 +0000
Manifest next update: Wed 04 Feb 2026 11:00:44 +0000
Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: fx39u2b3MMfbUWnIYwscVWtcKlBF3XvFiS8uHxlmTHE=)
2: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=)
3: IRGg0foxSUGfOHZNIMiC1ewLzAY.roa (hash: giVtmM9q1yhx5JXyoMJ4+6H4vQ40BnaU8PVfW59t+OM=)
4: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=)
5: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=)
6: PhTndQbFXIKAHZSqegiNZCxlT2Y.roa (hash: 5af7C/upZy+ydumWbAy3ozmUi22FoW9akM4L67QX4I4=)
7: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=)
8: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=)
9: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (hash: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw=)
10: gOKSWetg3BIZaPeNqA4kgAoYAhE.roa (hash: hxJCWQ7RrJOG2jqFDCsrVhnOZ/e0q0OcuJr0xguoGEY=)
11: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=)
12: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:29:70:f9:78:5b:a7:3b:a1:cf:9a:eb:92:1c:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Feb 3 11:00:44 2026 GMT
Not After : Feb 4 11:00:44 2026 GMT
Subject: CN=711ae1d72dfd4c97781031c6b482bec2496b17bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:c4:2f:3b:45:5b:29:68:54:5f:7e:90:d1:
a9:5d:27:90:b1:5f:9d:47:33:fc:34:2e:d2:47:67:
af:65:b5:a9:5e:a5:c4:4a:67:3e:3a:98:7e:50:b4:
4c:03:07:9e:b1:83:3a:4e:2e:3f:ce:19:6c:8e:10:
e2:59:a7:69:04:ac:80:5f:08:fd:8a:2d:f4:88:58:
aa:ac:3b:f2:a4:0c:d2:17:84:36:85:66:b4:81:85:
b8:10:45:72:38:43:cd:2f:7e:a9:f0:e9:ba:04:ca:
7f:5d:a0:20:db:6e:0e:5e:c9:25:99:d8:27:db:d2:
f9:b2:7a:02:bb:0d:bd:7f:d0:80:a8:e1:5a:9a:f6:
4f:7b:c7:8e:22:08:2d:45:49:8f:4e:dc:10:87:51:
f5:b2:d5:b9:08:b7:fc:6d:18:fc:bd:56:2d:c6:a2:
ed:83:cf:57:08:63:9f:fb:8a:a0:aa:1b:32:36:26:
22:ba:2d:d3:c4:1c:fd:75:f3:15:ce:0d:18:e3:11:
0c:06:d6:35:52:d2:bb:42:f1:d5:9a:d1:31:bf:a6:
02:5e:8b:37:96:38:af:00:64:8a:80:0c:98:d2:8d:
50:5c:58:28:b7:47:6b:40:63:3e:df:bd:8d:a8:b8:
fd:33:02:bb:42:f9:6a:f6:d0:3c:e8:f1:b3:a5:a7:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:E1:D7:2D:FD:4C:97:78:10:31:C6:B4:82:BE:C2:49:6B:17:BB
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:d5:b0:84:8e:63:06:47:03:4d:a5:ed:68:27:d5:5b:00:
57:40:6e:b7:c3:48:58:3d:f4:f6:2f:ab:a4:2e:8e:b3:48:01:
61:89:bd:26:63:78:3e:72:00:a0:07:5a:c1:9f:86:ab:46:a2:
0a:a5:15:72:4b:4f:47:76:49:8f:4e:13:80:53:c7:ed:4c:df:
0e:f1:f9:42:5a:df:2c:2f:df:f8:e6:bf:c5:d5:ca:26:df:96:
62:04:8c:12:28:52:90:e4:29:04:af:44:a1:95:f0:a2:b8:22:
14:c6:83:fb:7d:9b:fc:76:a2:98:92:4b:c1:7f:3b:a5:ad:e8:
2e:86:25:b9:15:ee:71:34:78:60:03:82:05:23:bd:01:05:ea:
d3:5d:3d:79:de:04:ca:cb:ba:d5:cf:57:30:ec:c5:29:a1:9c:
4f:46:9a:71:81:ad:be:89:62:71:6f:f0:b2:0c:6a:7b:cd:f6:
f7:13:52:a0:1b:3e:64:e2:04:ca:cb:dc:6d:a0:44:9e:c0:4a:
78:c3:1c:03:a3:a4:bf:77:20:80:0b:c3:be:a6:bf:77:53:47:
7f:2f:9a:af:f1:af:3e:72:a3:a4:aa:3f:85:8e:44:1d:21:dd:
2e:1d:5f:14:47:2a:e1:2e:a8:34:ba:55:d0:f5:13:fa:51:e6:
df:92:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 14:22:39 2026 by rpki-client