This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: tfEmBkjqRpsSfeyN+MmX3FGf9ih19nztpVmshX8b7iY=
Subject key identifier: 92:AE:DD:96:73:59:58:3A:4E:A8:5E:1B:35:29:33:DB:BE:0F:F0:5D
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 019BFD655FCE13895598169FC2FC273B8817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 17ED
Signing time: Tue 27 Jan 2026 03:00:37 +0000
Manifest this update: Tue 27 Jan 2026 03:00:37 +0000
Manifest next update: Wed 28 Jan 2026 03:00:37 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: 3QXPyGAb0qWdKJHay50VkFqDgCpl78QzaOJLMY+Hq1g=)
2: W4KHw-He6kWePo83bS5E3YXxts0.roa (hash: HnOkT9H7Ca2rZOkZ/pXWIqV8bBgY7J8LEGyl2k3M+hY=)
3: _a5oTu8gmKTkulokRAA15ZrEXNM.roa (hash: m1okP9QJB17W56hE2P8J+CdYw56KQB54uec3dsvEZRc=)
4: xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa (hash: +vp8PoavLw4YQsjZPIBnjlGldFa1m0sRHbYb6KV//EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:65:5f:ce:13:89:55:98:16:9f:c2:fc:27:3b:88:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Jan 27 03:00:37 2026 GMT
Not After : Jan 28 03:00:37 2026 GMT
Subject: CN=92aedd967359583a4ea85e1b352933dbbe0ff05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:fe:85:db:6c:79:e8:02:ba:58:df:72:d6:
0e:14:41:6a:47:36:ba:18:58:8c:40:dd:f1:06:2e:
a7:46:20:08:05:55:f3:0a:45:2f:bd:92:4a:05:01:
6a:2c:4a:a8:c2:b3:70:c1:6d:ab:95:fd:9c:4e:97:
eb:23:dd:03:fb:20:3d:7f:2c:ca:90:44:d4:ac:56:
60:c9:56:1b:53:0b:4c:ea:72:4b:b8:ae:ad:5b:bb:
c1:66:56:2b:c3:5d:b4:ed:a8:17:45:29:dd:e7:17:
9d:d3:bb:82:bf:9d:8e:e9:08:59:b0:6e:d2:8e:35:
cf:22:3c:28:16:28:24:5d:87:a8:7e:47:50:8b:e3:
55:b1:64:5c:13:e1:0f:b0:11:8e:f5:06:8e:90:85:
77:98:d2:e2:a1:7e:f4:53:dc:49:0d:b8:a3:de:63:
ac:ef:c0:dd:46:6b:6a:52:85:63:b1:2e:b0:55:55:
f4:ad:9e:2b:b5:a8:cf:05:21:f8:08:df:9b:e8:08:
52:92:c1:80:d3:f3:33:8a:d6:c7:ef:91:b0:8b:31:
60:dc:c3:73:dc:bf:af:e1:cd:cc:6e:dc:70:c2:6e:
2d:c6:d1:e6:20:43:c4:e9:e7:94:7e:c1:41:6e:c6:
fb:dc:49:e5:ea:8c:c7:f7:54:2e:02:b6:a2:85:69:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:DD:96:73:59:58:3A:4E:A8:5E:1B:35:29:33:DB:BE:0F:F0:5D
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:64:eb:75:97:d8:2d:f1:ea:de:a0:6c:6a:61:4d:96:16:
6a:93:62:c2:86:28:79:4c:8d:b6:21:f9:47:17:ec:6c:79:b3:
b2:2b:91:8f:ff:30:4e:62:8a:c5:fa:c1:cb:bd:26:c4:de:c7:
21:ee:23:10:b3:ab:91:0e:fb:ca:7a:39:26:cf:96:d5:fd:45:
6e:e6:e1:06:f6:c8:b8:08:25:75:73:e2:08:dc:5f:4d:18:21:
99:c9:84:c0:e5:01:0f:01:dc:c9:3a:55:0b:95:77:53:6d:59:
c6:19:10:7e:50:d7:43:8d:98:36:a7:1e:fb:6c:2b:1b:0f:60:
a2:26:4e:7d:77:b8:f1:97:14:eb:b3:ea:92:e9:16:cc:10:8c:
28:43:bc:22:0b:f5:45:95:e3:6e:1c:dd:72:58:95:22:02:4a:
f6:c3:0a:b7:79:b5:08:24:44:e9:f8:19:8e:53:39:87:76:82:
58:78:dd:e2:66:56:26:e4:6b:a5:1b:ae:a7:3a:02:94:86:2f:
fa:15:cd:aa:13:9f:5d:10:ed:a1:96:f1:46:7e:dd:27:64:2a:
62:3d:4e:cb:81:e8:9e:3a:25:a2:57:f5:28:1e:bf:de:37:a2:
30:0f:71:2b:34:d8:6a:96:e4:67:99:31:9d:5d:04:75:41:96:
70:e3:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:52 2026 by rpki-client