This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: ap5iAZtcI4cGL9mEE6n/hETRMDlk4SqthhN2NFL8TS8=
Subject key identifier: 57:20:38:6F:AF:F8:F3:37:36:9F:E4:64:C4:5A:1C:8D:6D:2A:6F:47
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019C42EB889B40D33BEED359C7F73B0CFFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0C3C
Signing time: Mon 09 Feb 2026 15:00:57 +0000
Manifest this update: Mon 09 Feb 2026 15:00:57 +0000
Manifest next update: Tue 10 Feb 2026 15:00:57 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: mSOZ4nw09HgdyRw9KbccRl7O9U7NLELvk7uc+toUdDE=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:88:9b:40:d3:3b:ee:d3:59:c7:f7:3b:0c:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Feb 9 15:00:57 2026 GMT
Not After : Feb 10 15:00:57 2026 GMT
Subject: CN=5720386faff8f337369fe464c45a1c8d6d2a6f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:1a:38:33:71:27:4e:20:c0:0e:52:f5:9b:
0f:d0:fe:bd:fd:a4:50:ae:de:e4:0e:ae:80:25:0d:
f0:05:44:41:50:a2:e9:ad:9c:af:e4:29:e0:09:d7:
01:46:9b:32:dc:d8:d4:3f:b5:61:87:1e:87:f2:24:
f7:77:64:a2:e1:75:04:44:34:9b:af:a0:be:21:b1:
52:d1:2c:56:e8:4e:bd:18:c2:96:8f:fe:4c:0a:e9:
ec:ad:31:e4:82:17:16:3e:3e:72:f4:80:52:8e:5a:
53:93:8b:ae:79:58:61:f7:2d:39:6f:f4:89:0d:d3:
f6:39:0d:cd:ce:65:e1:ee:0b:54:2f:12:3c:59:c3:
73:8c:b7:c6:55:ff:83:ef:d3:81:77:ca:2c:0e:1c:
04:db:43:b0:be:c1:79:52:22:b3:7d:6d:ca:87:17:
6a:7f:2d:b0:fa:70:af:4a:f6:a9:0c:a1:a7:bf:8b:
1c:d1:1e:b0:38:5d:a5:95:21:66:8b:4f:2e:25:0d:
43:81:cf:80:d7:4a:1d:39:08:5a:42:4a:5c:f0:39:
10:d8:76:49:5e:90:bc:26:d8:96:ad:5a:f9:25:55:
42:0b:05:1f:89:f9:b6:df:13:ba:43:1f:94:d3:c7:
da:93:ba:cf:69:4b:2d:94:b4:be:20:a3:82:d7:eb:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:38:6F:AF:F8:F3:37:36:9F:E4:64:C4:5A:1C:8D:6D:2A:6F:47
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3b:13:84:5d:7b:99:b1:9a:a3:13:a3:38:a5:41:a0:62:68:
f6:37:45:93:fe:bd:d0:9e:29:92:9c:67:09:c0:ec:ff:d8:0a:
56:b1:76:40:6c:d5:4e:d1:e7:2c:15:31:ff:96:40:ee:b2:a9:
99:c5:4c:be:90:cc:49:b5:44:3f:b5:b7:17:0c:da:69:8d:17:
15:19:35:7a:ac:a6:ac:27:81:02:24:dd:e2:62:cf:50:a3:1b:
87:e6:6a:7d:5f:6b:20:80:ca:13:8e:59:a5:82:46:03:ad:9c:
52:c1:75:f8:61:4b:23:3a:e2:e9:ab:cc:95:30:73:9d:3c:a5:
78:3f:ee:57:c3:85:24:ea:92:05:ee:86:7b:3b:d7:cf:3c:6a:
2f:bf:ea:d7:ed:d0:a5:99:19:10:41:5a:64:50:14:7a:ee:f5:
29:8a:da:97:03:9b:c2:8f:cd:04:c5:95:9d:29:a1:68:31:26:
8c:9f:d5:c3:c7:f5:dc:a3:bb:92:a4:5b:0f:57:70:05:18:ce:
eb:2a:b2:c2:87:22:cf:e9:22:43:e4:bb:cb:2f:3a:0c:d8:1e:
4b:1f:2d:6b:65:42:59:58:b5:5f:9c:ce:98:9d:24:a5:fd:1c:
ea:b7:ba:e5:c2:3b:44:82:1d:d6:f9:f7:82:a7:df:8d:2f:0b:
f4:f4:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:47 2026 by rpki-client