This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: pI++EKL9eCYw9lPFCwidFj9viDwdZD6dj3tvzzpMlWo=
Subject key identifier: B5:FC:C2:86:27:C3:C0:B1:F6:95:CD:96:54:A0:B0:EC:8B:EC:0D:97
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 019C378BB154ED7C5B48A505D380B6B4679D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 0698
Signing time: Sat 07 Feb 2026 10:00:27 +0000
Manifest this update: Sat 07 Feb 2026 10:00:27 +0000
Manifest next update: Sun 08 Feb 2026 10:00:27 +0000
Files and hashes: 1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: pmp/5MGOND5WedS5ONFzSC379tpmVl7uDmPZEC+MGgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:8b:b1:54:ed:7c:5b:48:a5:05:d3:80:b6:b4:67:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Feb 7 10:00:27 2026 GMT
Not After : Feb 8 10:00:27 2026 GMT
Subject: CN=b5fcc28627c3c0b1f695cd9654a0b0ec8bec0d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:aa:8f:d3:71:62:43:97:ed:66:16:d3:ca:
b5:0b:68:70:f2:d1:97:85:42:82:47:c1:2e:63:fb:
62:67:d7:68:f8:f5:78:08:7f:a1:1b:85:ce:99:f0:
da:a3:2b:e0:6a:da:61:4d:db:2f:a4:4e:69:90:6d:
52:2f:3f:7f:d4:7b:ed:ce:aa:35:68:ef:03:5f:25:
ff:76:8f:7f:40:ba:c3:1f:09:d8:dc:6b:71:1b:39:
e9:02:d8:d0:59:63:54:fe:1e:57:d5:9b:ab:29:35:
12:6a:d8:b3:a6:00:08:ea:1a:7f:ab:e8:63:88:e3:
6b:ec:f4:68:14:a1:83:9a:91:85:d6:b6:3d:48:da:
83:93:9c:a2:e1:f9:f8:5b:5c:d2:01:26:69:5a:21:
80:00:04:a6:2e:c7:b0:7a:4b:7d:ee:f5:02:c3:58:
53:e4:79:49:dd:e2:a8:2e:85:33:cf:55:7e:66:d6:
74:3a:49:80:e6:59:8a:a0:3b:49:9f:f4:f4:d4:04:
f7:cc:fc:18:8d:bd:fa:ac:14:c3:97:71:ee:b4:35:
6a:7c:88:b4:ed:59:e7:b7:99:3f:06:06:3e:fd:70:
a4:b1:cd:ac:b3:a4:d0:97:e8:c0:02:a3:f9:cf:d3:
5f:6b:4e:44:ca:14:59:92:f1:3e:ee:08:e0:ae:3b:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FC:C2:86:27:C3:C0:B1:F6:95:CD:96:54:A0:B0:EC:8B:EC:0D:97
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:0c:9a:1e:2c:0f:bb:fb:d1:f8:66:ba:b9:39:98:df:a5:
bc:51:83:50:61:4b:ed:7b:b6:b9:24:cb:6e:42:f2:27:e3:7a:
cf:01:f9:65:34:32:b4:05:c1:10:f9:2b:a1:fd:65:4b:a0:96:
a7:23:c0:4c:c1:0d:90:f1:8e:62:b0:f3:08:c1:ac:0c:0f:30:
e5:bc:a4:a3:36:33:8e:31:94:2e:4d:80:c6:26:eb:c3:da:1f:
42:b6:51:84:c9:50:f7:75:99:da:65:a3:1b:a0:8f:ad:8f:25:
80:07:1d:e3:56:02:79:6f:5b:06:96:0f:c6:0e:77:0a:a0:41:
b1:82:99:71:c8:a7:ae:25:4d:fc:50:ef:f4:62:83:94:81:d7:
3e:11:22:82:2d:c3:ae:01:b8:34:bf:b1:50:1b:23:95:d8:a9:
c6:78:3c:88:35:ee:55:e6:9f:c1:e9:2f:16:aa:cc:8d:bf:71:
cd:65:f7:18:99:73:10:62:9a:c1:cc:09:9d:3f:c6:42:f0:b9:
d5:7f:3c:3c:23:49:24:ae:97:b2:4c:4d:f6:c1:66:d0:86:2c:
dc:0c:57:68:e0:81:ab:c7:5f:58:81:d7:4e:a5:7d:e5:e3:0b:
ee:8a:d6:90:9e:d1:76:16:f7:31:6c:26:39:fe:a8:94:e4:56:
e2:9c:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 12:39:01 2026 by rpki-client