This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: 9906+Yj5bcEnMhhMEB9IhDSHdS35upqeoC02B1Ta7vI=
Subject key identifier: 28:D9:9A:B8:FE:DA:62:FF:B2:A0:75:C8:36:21:DC:34:B4:F9:26:75
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019C416AE40CEBF0F36C80C4655198B664C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 093B
Signing time: Mon 09 Feb 2026 08:00:50 +0000
Manifest this update: Mon 09 Feb 2026 08:00:50 +0000
Manifest next update: Tue 10 Feb 2026 08:00:50 +0000
Files and hashes: 1: 76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa (hash: aIEXIJxpvH5c1txE7w8Ef9ChmAewpEGy4MTuP+uMjCA=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: Gr8Ii3V1doAkzgMEdVwglRVF+VkaNtaCrVsENEA4Ojg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:e4:0c:eb:f0:f3:6c:80:c4:65:51:98:b6:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Feb 9 08:00:50 2026 GMT
Not After : Feb 10 08:00:50 2026 GMT
Subject: CN=28d99ab8feda62ffb2a075c83621dc34b4f92675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:5c:46:3f:ca:ef:f1:10:77:fd:5c:2e:0f:
91:6a:0f:3c:1f:8a:56:00:f9:99:3c:f6:21:d2:9f:
26:d0:bc:08:96:05:a5:6e:3e:59:21:78:86:df:78:
a6:58:76:3d:93:63:a9:79:72:e9:c2:e4:3d:dc:ab:
9b:bf:94:b3:5f:f8:aa:41:48:63:9f:a3:d9:c1:38:
d5:50:84:98:40:74:6a:65:a3:78:f9:bd:d7:6f:29:
76:f2:78:08:b3:55:39:74:51:7c:50:84:40:2d:49:
eb:df:2a:6d:61:be:93:69:36:07:06:e6:2e:f5:4e:
e8:32:20:8a:db:cb:8f:7d:b4:b7:3b:30:eb:cb:c4:
b4:ab:4d:a3:9d:b3:50:6c:d3:b8:e2:9b:ad:f0:58:
11:f4:de:dc:63:b7:b5:ac:a6:cb:90:fb:ab:27:6c:
63:5e:dd:c7:c8:d3:9c:dc:b7:af:60:ef:79:21:9b:
d2:65:98:7a:13:8e:81:76:c0:e5:8e:55:5c:da:af:
4c:eb:a6:79:17:a3:59:2f:21:91:a3:d5:6b:a7:4c:
81:2e:02:d2:ed:c5:9f:13:56:78:59:3b:3f:2c:8f:
9c:f7:68:b4:3e:93:55:9d:8d:35:3f:9e:30:46:58:
80:30:4c:b1:8f:dd:d8:48:18:5c:cb:f5:29:7c:ba:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:9A:B8:FE:DA:62:FF:B2:A0:75:C8:36:21:DC:34:B4:F9:26:75
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c4:4f:84:e2:9f:d0:0d:55:dd:a8:59:15:ab:8a:bf:80:2c:
9e:01:93:0c:1f:2c:e2:f7:c1:25:0e:d4:16:57:c6:d4:5d:19:
4f:2c:53:75:eb:56:c1:f5:ee:77:eb:7d:c8:45:0f:1b:e4:cc:
15:77:cc:3a:9f:df:58:61:fc:20:ea:8b:67:43:44:68:e5:f7:
60:c2:6c:da:b7:dc:c5:4d:0e:79:bb:45:2d:4c:d9:ff:fe:b1:
9a:fa:21:ab:c6:c8:6c:e3:86:bb:37:c0:8d:a5:10:08:da:b0:
7b:06:07:23:ab:4c:2c:d1:d1:02:0f:cd:48:e2:92:34:c3:21:
41:b1:ca:eb:7f:64:a5:d6:e8:23:68:be:4c:2f:35:16:1b:6d:
8d:4c:e1:cf:33:c3:8a:47:d1:63:f4:28:bc:bb:50:21:1d:66:
4e:8a:9f:db:17:a5:a9:6b:ff:0f:06:f2:27:f2:b4:16:64:d4:
86:64:4e:b3:f8:bc:fe:cb:5d:a7:55:26:36:97:69:dd:e2:77:
e3:b3:90:bd:1f:03:ac:05:c1:e8:8f:e1:3a:aa:fd:39:78:2b:
8c:63:6d:10:e2:ee:06:e2:a3:be:2f:94:e6:f1:24:e9:1f:aa:
cf:5b:37:0b:1c:f0:33:9e:9d:bc:a6:3c:5d:a9:5a:99:2c:5b:
49:f9:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:41 2026 by rpki-client