This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: IEhaMTH5V5OMkGXRv49zqqgD5vidm9RBRGS5I7zCRjo=
Subject key identifier: A7:66:05:C7:F5:60:3C:7B:C2:28:2D:15:BC:A1:AC:C6:DE:19:9B:32
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019C42468D796807ED86F580C5484F76C7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 12:00:45 +0000
Manifest this update: Mon 09 Feb 2026 12:00:45 +0000
Manifest next update: Tue 10 Feb 2026 12:00:45 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: 3IYgA+O+mQ0T5gdjGa9J5XOoN35ANRzt713yA95c4d0=)
2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:8d:79:68:07:ed:86:f5:80:c5:48:4f:76:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Feb 9 12:00:45 2026 GMT
Not After : Feb 10 12:00:45 2026 GMT
Subject: CN=a76605c7f5603c7bc2282d15bca1acc6de199b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:92:89:81:03:48:e9:39:99:cc:31:3c:a2:
eb:b2:42:3e:55:a5:c5:3b:99:22:63:20:91:59:8a:
90:a4:71:6e:29:9f:e4:a8:f2:d6:c4:5b:e5:8c:8c:
f3:9b:bf:0d:fd:01:bd:4a:05:c2:9e:dc:07:7b:a9:
c3:9c:16:2c:26:98:3c:e8:64:59:ff:94:6f:8c:57:
eb:fd:1e:e5:3a:b7:bb:c8:07:db:d9:68:3f:dd:07:
c8:10:77:87:23:64:17:34:97:a9:82:7e:17:9f:58:
36:67:7c:84:47:87:5b:01:ab:96:f0:c2:fa:63:92:
5f:be:d5:62:2d:b3:ea:86:fd:bf:47:bd:28:86:ad:
02:32:39:70:b5:3a:b8:ef:49:74:21:41:74:c2:36:
9f:83:8f:7e:71:c7:58:97:4b:85:2b:13:a9:04:c3:
88:38:95:73:3a:41:6e:0f:7e:77:e6:55:5f:4c:82:
32:0a:f3:c4:54:03:0c:bd:70:fa:67:12:1b:b3:a5:
02:e5:7f:02:8d:96:6a:9e:da:63:dc:e8:53:9f:b1:
88:48:46:43:67:d5:85:63:d3:bd:d9:16:89:41:89:
83:60:b8:8b:c7:41:26:cb:48:f8:0b:af:b7:0a:79:
d2:3a:bc:a8:77:56:f1:56:18:f2:0e:03:66:d6:e8:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:05:C7:F5:60:3C:7B:C2:28:2D:15:BC:A1:AC:C6:DE:19:9B:32
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:0c:d8:f1:5f:78:30:f9:ba:28:fd:c0:8b:8d:c5:9b:c8:
c3:d1:65:29:7e:23:6c:f1:e0:49:7c:d7:f4:3d:bc:fc:b6:8b:
b2:c6:0f:fa:22:90:ff:0c:72:84:e6:f5:a1:e0:00:25:96:f4:
b0:81:9f:8a:20:8f:41:b7:f8:a5:e8:44:ce:b1:2c:67:76:79:
bb:77:2f:57:0a:82:b9:c2:01:62:66:28:5d:38:07:61:d2:70:
c7:a0:b6:c3:72:44:b9:1d:1d:00:66:4d:f2:22:d7:54:70:8b:
66:de:a0:33:52:e2:cc:63:7f:17:6b:d5:3e:19:d6:68:e8:05:
eb:57:26:75:2c:d7:2f:f5:f9:75:b6:15:bf:f4:f6:c8:c5:62:
e2:97:35:21:e0:8a:f7:0e:e4:2e:73:52:d6:c9:ca:70:c8:63:
e8:6c:c8:1c:96:b8:42:5c:69:d1:18:c7:73:cc:29:41:e9:f8:
94:e4:b4:68:ed:c2:ed:c5:eb:c5:ca:07:8a:73:0e:82:c8:9c:
19:4a:2f:5d:4b:f6:3e:1f:06:07:02:d1:6d:7f:0b:4e:73:ad:
3d:24:d3:ab:aa:d9:45:cf:8e:cc:60:3d:09:ce:7d:23:c9:e0:
f1:47:86:b8:8f:93:7d:51:09:2a:cb:e9:30:2f:b0:e3:5b:76:
63:b5:5a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRo15aAfthvWAxUhPdsejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2
MTNiYzUwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD
EyhhNzY2MDVjN2Y1NjAzYzdiYzIyODJkMTViY2ExYWNjNmRlMTk5YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPqSiYEDSOk5mcwxPKLrskI+VaXF
O5kiYyCRWYqQpHFuKZ/kqPLWxFvljIzzm78N/QG9SgXCntwHe6nDnBYsJpg86GRZ
/5RvjFfr/R7lOre7yAfb2Wg/3QfIEHeHI2QXNJepgn4Xn1g2Z3yER4dbAauW8ML6
Y5JfvtViLbPqhv2/R70ohq0CMjlwtTq470l0IUF0wjafg49+ccdYl0uFKxOpBMOI
OJVzOkFuD3535lVfTIIyCvPEVAMMvXD6ZxIbs6UC5X8CjZZqntpj3OhTn7GISEZD
Z9WFY9O92RaJQYmDYLiLx0Emy0j4C6+3CnnSOryod1bxVhjyDgNm1ugLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdmBcf1YDx7wigtFbyhrMbeGZsyMB8GA1UdIwQY
MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt
NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4
LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZMM2PFf
eDD5uij9wIuNxZvIw9FlKX4jbPHgSXzX9D28/LaLssYP+iKQ/wxyhOb1oeAAJZb0
sIGfiiCPQbf4pehEzrEsZ3Z5u3cvVwqCucIBYmYoXTgHYdJwx6C2w3JEuR0dAGZN
8iLXVHCLZt6gM1LizGN/F2vVPhnWaOgF61cmdSzXL/X5dbYVv/T2yMVi4pc1IeCK
9w7kLnNS1snKcMhj6GzIHJa4Qlxp0RjHc8wpQen4lOS0aO3C7cXrxcoHinMOgsic
GUovXUv2Ph8GBwLRbX8LTnOtPSTTq6rZRc+OzGA9Cc59I8ng8UeGuI+TfVEJKsvp
MC+w41t2Y7VaoQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:37 2026 by rpki-client