This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier: AzCW/2VVtD/6GkfibuvENU+oB/UhqyRUri2+aRK89aA=
Subject key identifier: F4:3A:83:7B:E1:EC:D8:BB:F9:BE:84:00:80:5F:BD:5A:38:0E:F6:30
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer: /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial: 019C41D89A2FD87625FC392FDCF9A7F51000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 10:00:40 +0000
Manifest this update: Mon 09 Feb 2026 10:00:40 +0000
Manifest next update: Tue 10 Feb 2026 10:00:40 +0000
Files and hashes: 1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: nbMHhuxJR2FEbKbwIOfffGFZcVn7QJIZfUzg3cHwNF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:9a:2f:d8:76:25:fc:39:2f:dc:f9:a7:f5:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Validity
Not Before: Feb 9 10:00:40 2026 GMT
Not After : Feb 10 10:00:40 2026 GMT
Subject: CN=f43a837be1ecd8bbf9be8400805fbd5a380ef630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:86:2c:98:64:03:8c:84:0a:67:6e:a6:cc:
5e:c1:57:ff:87:19:5d:33:8a:a7:2e:97:4d:86:f4:
34:3b:33:ec:da:11:08:2b:84:18:bf:13:e9:d7:dd:
2d:e7:9f:a2:6b:02:3f:0b:17:90:64:a2:40:dd:68:
01:07:13:ab:68:1a:ff:ea:98:09:d9:92:58:3d:5d:
83:a6:a5:c4:d7:6c:fd:c2:d0:8f:84:07:8d:78:82:
91:85:91:f7:e5:b0:2a:bf:ad:c1:5c:59:0e:c6:ea:
da:8a:53:ec:ec:6d:07:ea:04:c1:55:71:4b:d4:85:
56:b6:29:61:97:76:fb:19:99:fc:09:ef:84:8a:38:
31:65:3c:21:b9:b6:a4:b8:3b:0a:0a:7b:d5:bb:12:
57:24:ed:38:f7:ab:2e:23:88:2e:a2:c8:cd:db:39:
2a:90:72:19:a0:3d:fd:3e:64:d6:23:aa:7d:60:8c:
c9:9b:cb:56:32:43:24:63:9a:19:c9:8c:7f:a6:93:
61:1c:5c:61:1c:50:fd:3e:46:b2:f8:78:0e:c0:53:
0e:95:54:f9:dc:4b:08:e3:18:6b:a3:f8:ba:a3:12:
10:68:5f:16:d4:a6:9e:50:d9:9b:7f:97:2f:b5:e5:
d3:48:2d:0e:a5:1d:ed:8a:db:49:bc:78:6f:57:5d:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:83:7B:E1:EC:D8:BB:F9:BE:84:00:80:5F:BD:5A:38:0E:F6:30
X509v3 Authority Key Identifier:
keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:59:19:74:90:a5:e8:c9:df:c7:65:2d:32:c5:f9:e0:b0:
d1:bd:3d:11:37:dd:65:33:66:12:8c:62:2c:3f:63:d8:4b:9d:
35:11:5a:ef:4f:07:2e:b9:f4:69:ad:a5:38:aa:fa:98:f4:c9:
00:16:ba:85:67:18:b4:cf:69:96:da:2c:f1:26:eb:da:5f:2d:
5c:32:8c:bb:7b:79:ff:06:21:b8:45:7e:93:64:4c:c1:27:2f:
4d:44:f3:c8:2d:80:f4:38:fa:65:de:4f:10:de:8a:66:a9:b4:
c2:a1:84:34:4f:5e:a1:f8:bf:77:78:03:98:f5:d0:4d:b2:50:
6b:19:48:d9:7b:e6:7c:7b:21:b5:93:b0:4e:8f:15:be:4d:3f:
fc:2d:fb:b1:9b:d0:56:4e:2a:8b:15:4f:ef:bf:ef:ff:f9:90:
73:e1:8c:f9:be:8f:7d:ea:53:97:9d:40:fc:22:20:06:3e:bd:
f3:f9:c1:69:8e:a7:09:e1:ba:73:dc:26:89:39:71:5f:96:bf:
8e:4a:d6:eb:be:ee:37:95:1f:65:d8:98:b0:79:a4:6a:c7:d8:
f6:b8:df:90:a6:fb:24:85:8b:1a:e6:fd:fc:9f:9b:62:d3:14:
d3:44:e3:29:4a:c1:b5:a3:0d:a0:36:fd:04:9e:62:99:eb:bc:
78:a4:85:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2Jov2HYl/Dkv3Pmn9RAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMWVkNGJmNTAyYzBmMmQ4YmM4NzAyNmMxOGFjOTg1OWIw
ZjFkZWMwHhcNMjYwMjA5MTAwMDQwWhcNMjYwMjEwMTAwMDQwWjAzMTEwLwYDVQQD
EyhmNDNhODM3YmUxZWNkOGJiZjliZTg0MDA4MDVmYmQ1YTM4MGVmNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8+GLJhkA4yECmdupsxewVf/hxld
M4qnLpdNhvQ0OzPs2hEIK4QYvxPp190t55+iawI/CxeQZKJA3WgBBxOraBr/6pgJ
2ZJYPV2DpqXE12z9wtCPhAeNeIKRhZH35bAqv63BXFkOxurailPs7G0H6gTBVXFL
1IVWtilhl3b7GZn8Ce+EijgxZTwhubakuDsKCnvVuxJXJO0496suI4guosjN2zkq
kHIZoD39PmTWI6p9YIzJm8tWMkMkY5oZyYx/ppNhHFxhHFD9Pkay+HgOwFMOlVT5
3EsI4xhro/i6oxIQaF8W1KaeUNmbf5cvteXTSC0OpR3tittJvHhvV138lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ6g3vh7Ni7+b6EAIBfvVo4DvYwMB8GA1UdIwQY
MBaAFEoe1L9QLA8ti8hwJsGKyYWbDx3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2g3VXYxQXNEeTJMeUhBbXdZckpoWnNQSGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85N2M5MTYtODFiMS00YjNhLTlmZWUt
MzU2YTE5ZjU1NTA2LzEvU2g3VXYxQXNEeTJMeUhBbXdZckpoWnNQSGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85N2M5MTYtODFiMS00YjNhLTlmZWUtMzU2YTE5ZjU1NTA2
LzEvU2g3VXYxQXNEeTJMeUhBbXdZckpoWnNQSGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO21ZGXSQ
pejJ38dlLTLF+eCw0b09ETfdZTNmEoxiLD9j2EudNRFa708HLrn0aa2lOKr6mPTJ
ABa6hWcYtM9pltos8Sbr2l8tXDKMu3t5/wYhuEV+k2RMwScvTUTzyC2A9Dj6Zd5P
EN6KZqm0wqGENE9eofi/d3gDmPXQTbJQaxlI2XvmfHshtZOwTo8Vvk0//C37sZvQ
Vk4qixVP77/v//mQc+GM+b6PfepTl51A/CIgBj698/nBaY6nCeG6c9wmiTlxX5a/
jkrW677uN5UfZdiYsHmkasfY9rjfkKb7JIWLGub9/J+bYtMU00TjKUrBtaMNoDb9
BJ5imeu8eKSFjw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:28 2026 by rpki-client