This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: yRPdtRW0MIhM0GjJ40rlrs8OSY1CqhrQ4D0ued8LvYs=
Subject key identifier: 70:B9:FE:BF:82:4F:D6:3F:79:29:57:86:4B:DD:33:E4:37:7F:62:E5
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 019C4547665BCB3DA83DF135F06CF2275671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 0E12
Signing time: Tue 10 Feb 2026 02:00:33 +0000
Manifest this update: Tue 10 Feb 2026 02:00:33 +0000
Manifest next update: Wed 11 Feb 2026 02:00:33 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: hQt5GXUh5wrD2obR1fi8qFEqCqbniu6lubp16pCuXf4=)
2: CdfLb6TofkWtReh_YXLGBpk_g6c.roa (hash: wzdkGkKknbVJYDWx/Ffoau27HnZpYfEves1fyMYu134=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:66:5b:cb:3d:a8:3d:f1:35:f0:6c:f2:27:56:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Feb 10 02:00:33 2026 GMT
Not After : Feb 11 02:00:33 2026 GMT
Subject: CN=70b9febf824fd63f792957864bdd33e4377f62e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:80:c9:a8:f3:e5:af:52:3e:0c:32:70:4a:
56:3c:4f:8a:b3:11:bd:d9:c6:5d:63:84:86:d2:c6:
8b:de:4c:a9:49:3f:6f:b6:4d:7c:69:7a:4c:1b:3b:
35:ab:e0:38:6e:ad:d2:ca:47:48:cd:d6:96:2b:a3:
26:ec:9b:54:35:38:3c:42:be:e3:07:34:12:9c:e6:
9c:fc:c5:d4:42:01:32:57:79:b6:f3:e2:66:90:10:
b9:3f:7c:18:a8:7b:27:32:6e:29:6e:8a:06:be:6e:
2b:47:c9:0a:9c:16:6c:e5:20:ae:3b:8c:1c:8a:81:
91:de:ab:d3:b7:5f:21:65:49:f8:c5:d5:65:ab:d1:
f3:4f:5c:ef:33:27:e0:9d:88:01:13:4a:79:e3:82:
47:5f:1c:b4:e3:93:2f:f1:fb:11:aa:cd:b7:e2:e5:
9a:0a:86:d6:97:29:6d:74:53:51:54:3d:74:ae:4d:
f2:80:48:92:c0:aa:20:b7:0c:65:89:75:28:92:18:
d4:0e:14:8a:d3:ca:4d:63:d7:88:1d:d0:7b:0b:1f:
9f:c9:ff:67:20:fd:f8:a8:4d:d0:ca:b5:a6:d1:b1:
8e:3b:58:be:f4:a2:e0:08:c1:1e:bf:0f:e8:5a:05:
8b:74:4a:d5:62:19:69:c1:0f:da:7c:0e:ba:36:e5:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:FE:BF:82:4F:D6:3F:79:29:57:86:4B:DD:33:E4:37:7F:62:E5
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:64:13:df:20:2b:5f:a4:3e:95:ef:8e:d8:af:0b:17:9b:f7:
56:17:4f:f7:6d:2a:da:0f:b6:e5:ff:9b:35:e3:ac:00:13:e2:
42:d3:9e:a1:7b:3d:56:60:2b:8d:a7:66:b5:ea:01:90:48:7e:
ff:4e:2c:6f:7a:b0:12:1c:07:65:2f:bf:72:71:13:40:b0:89:
fd:c1:8d:36:a2:d7:fd:a5:da:dd:ae:89:9d:c7:a2:2c:cf:1e:
2f:c9:19:db:73:6e:94:e3:40:8e:93:87:05:64:74:bc:96:86:
35:57:4f:c5:10:3d:97:3d:8c:92:77:cb:7c:a8:88:0d:41:ac:
1d:aa:a7:09:26:c9:11:1c:93:68:2c:6a:0d:99:4d:3f:05:6f:
7f:c8:8f:11:c1:bd:f5:0b:04:54:17:63:fe:e7:4b:13:fc:a8:
ea:9a:59:c7:6d:56:4d:5c:bc:16:f2:5d:20:5a:03:e2:db:eb:
ef:5e:93:c0:31:8f:d9:e7:6d:3e:c2:73:e3:48:db:c0:ed:3f:
a0:c4:b0:20:34:09:69:97:f5:10:97:e3:d9:ca:98:2b:c5:26:
1d:1e:8b:c1:b9:fd:9b:59:62:ba:5f:74:a5:14:81:e1:b1:d0:
ef:2e:d9:85:68:4f:7b:2c:19:74:c1:a2:b7:bf:d1:ca:35:20:
12:5e:11:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxFR2Zbyz2oPfE18GzyJ1ZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjdhN2I5ZGU3NjdlYjk3ZGI2NGU1MTY0Nzg0OTQ2MzNi
ZDU0ZWEwHhcNMjYwMjEwMDIwMDMzWhcNMjYwMjExMDIwMDMzWjAzMTEwLwYDVQQD
Eyg3MGI5ZmViZjgyNGZkNjNmNzkyOTU3ODY0YmRkMzNlNDM3N2Y2MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt+Ayajz5a9SPgwycEpWPE+KsxG9
2cZdY4SG0saL3kypST9vtk18aXpMGzs1q+A4bq3SykdIzdaWK6Mm7JtUNTg8Qr7j
BzQSnOac/MXUQgEyV3m28+JmkBC5P3wYqHsnMm4pbooGvm4rR8kKnBZs5SCuO4wc
ioGR3qvTt18hZUn4xdVlq9HzT1zvMyfgnYgBE0p544JHXxy045Mv8fsRqs234uWa
CobWlyltdFNRVD10rk3ygEiSwKogtwxliXUokhjUDhSK08pNY9eIHdB7Cx+fyf9n
IP34qE3QyrWm0bGOO1i+9KLgCMEevw/oWgWLdErVYhlpwQ/afA66NuVPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC5/r+CT9Y/eSlXhkvdM+Q3f2LlMB8GA1UdIwQY
MBaAFOBnp7nedn65fbZOUWR4SUYzvVTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kNTIwYzQtZGViNC00MzhiLTkzYmYt
NzY4ZjNkNmVlMTllLzEvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kNTIwYzQtZGViNC00MzhiLTkzYmYtNzY4ZjNkNmVlMTll
LzEvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWQT3yAr
X6Q+le+O2K8LF5v3VhdP920q2g+25f+bNeOsABPiQtOeoXs9VmArjadmteoBkEh+
/04sb3qwEhwHZS+/cnETQLCJ/cGNNqLX/aXa3a6JnceiLM8eL8kZ23NulONAjpOH
BWR0vJaGNVdPxRA9lz2MknfLfKiIDUGsHaqnCSbJERyTaCxqDZlNPwVvf8iPEcG9
9QsEVBdj/udLE/yo6ppZx21WTVy8FvJdIFoD4tvr716TwDGP2edtPsJz40jbwO0/
oMSwIDQJaZf1EJfj2cqYK8UmHR6Lwbn9m1liul90pRSB4bHQ7y7ZhWhPeywZdMGi
t7/RyjUgEl4RpQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 06:06:15 2026 by rpki-client