This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: rakjrpsX69oZsvje48kkxScUjkmXJ7nqUe4uRspujVo=
Subject key identifier: 24:3A:98:3F:2D:67:55:9D:1D:61:1B:5F:1A:F4:57:26:16:27:BB:A2
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019C41A18CD787A458A6EC35975BE6C602FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0A85
Signing time: Mon 09 Feb 2026 09:00:32 +0000
Manifest this update: Mon 09 Feb 2026 09:00:32 +0000
Manifest next update: Tue 10 Feb 2026 09:00:32 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: xZr1c5xHD2P0DT+kXXKdMpz+5Z2lhxUMcZNhz/4HVxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:8c:d7:87:a4:58:a6:ec:35:97:5b:e6:c6:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Feb 9 09:00:32 2026 GMT
Not After : Feb 10 09:00:32 2026 GMT
Subject: CN=243a983f2d67559d1d611b5f1af457261627bba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:5a:8f:5e:e9:4e:4b:25:83:e4:f0:5c:ac:
6e:b1:30:8a:14:e6:62:86:3d:e5:25:92:20:a5:d1:
8f:37:5e:c5:9b:b3:0e:18:eb:1f:24:fb:47:a5:49:
98:e2:bc:58:ed:09:7f:6e:5c:70:6b:8e:69:61:5b:
74:e4:31:87:3f:4a:ad:2c:f9:35:f5:04:83:87:c5:
a7:0c:a2:cb:b1:4a:ba:44:a4:fc:d1:d0:4a:a6:0c:
a6:14:d0:1d:35:a5:04:15:27:7f:9b:eb:31:e5:21:
ff:2f:d1:98:d0:9f:59:b7:ac:35:73:5c:1d:5a:68:
b7:a9:8d:7f:73:66:fb:40:f0:d1:1a:14:a5:8d:5e:
55:e3:9d:97:8c:f3:c9:65:7f:04:12:d3:fc:36:d0:
f6:e4:47:43:4e:09:8d:0f:66:c7:84:f2:6b:8c:44:
d3:d0:5c:e4:31:68:0a:44:62:ea:d1:98:e0:b5:1c:
cc:b7:51:86:11:8f:d5:85:64:ce:07:30:f0:88:14:
e2:2b:ef:77:01:cc:99:c8:71:28:f4:89:54:c3:24:
26:d6:30:87:99:a0:a3:f8:52:52:1f:25:65:b8:8c:
17:b6:cb:13:27:2b:7b:a3:15:c1:1e:3c:b3:34:16:
f5:27:69:7c:90:2c:88:ac:e4:9c:51:6f:67:aa:7a:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:98:3F:2D:67:55:9D:1D:61:1B:5F:1A:F4:57:26:16:27:BB:A2
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:61:df:07:de:b7:c1:8e:d0:fe:e3:e5:06:57:81:1a:d7:
a9:51:6b:a0:4e:1e:c9:c1:3a:84:76:52:55:03:83:5a:23:70:
19:d7:2e:9f:93:19:ce:d8:cb:3f:37:df:18:af:d1:cf:20:e6:
24:f5:9b:72:21:5d:3a:fd:42:b0:e1:18:b7:33:dd:c9:fc:32:
13:f0:4a:81:0d:01:3d:6e:83:7f:45:30:c0:02:ac:ad:4c:54:
ed:1b:06:d4:02:4e:b4:f5:aa:87:1e:18:a6:db:9b:ab:86:57:
21:9d:dc:68:22:87:68:8d:5f:5a:4d:01:a0:7b:da:8f:8d:bd:
23:5b:83:48:98:04:b7:28:c3:8d:a3:44:b6:ce:bd:ce:d7:e4:
4c:a8:8e:f9:2b:0e:cd:fe:27:e3:b9:a7:75:29:1b:11:1c:67:
56:b6:b9:21:2d:5e:fc:f4:03:d0:3c:55:bd:81:08:27:a5:3e:
32:a5:d8:dd:c2:82:18:9f:a6:8b:03:64:82:70:5d:3d:d4:bb:
1f:5b:35:5d:02:48:bc:59:9d:09:31:24:e5:11:e7:d0:02:ce:
d9:24:a3:75:36:d3:fd:a3:11:5f:fb:69:6f:90:86:38:e0:08:
1e:7c:92:a8:13:33:79:0e:36:25:67:42:34:ef:92:a9:79:7b:
de:5e:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:22 2026 by rpki-client