This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: 3yp8GnCwnIY7S8gVzo6dRTmi1n3DRvoCHUVaommlf1U=
Subject key identifier: 0D:7D:62:F3:76:08:CD:C0:8C:FA:35:B2:2C:B9:69:66:55:48:90:11
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 019C435923D3238E451951FFC56BD1260D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:41 +0000
Manifest this update: Mon 09 Feb 2026 17:00:41 +0000
Manifest next update: Tue 10 Feb 2026 17:00:41 +0000
Files and hashes: 1: IoZsqC7U-fQC_aty6wDytMhbNvQ.roa (hash: uSpnth7jpKViFNAUl0BHygMMK1vfeGylmztQwD5Bysw=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: +uZmMQix32YNehwp2l1pHiIfbTSKFC1+YmGAg5uZ13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:23:d3:23:8e:45:19:51:ff:c5:6b:d1:26:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Feb 9 17:00:41 2026 GMT
Not After : Feb 10 17:00:41 2026 GMT
Subject: CN=0d7d62f37608cdc08cfa35b22cb9696655489011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:00:46:82:d2:d0:f2:90:32:15:39:10:21:
76:ff:4e:70:59:21:e3:80:8b:f1:40:0c:3f:34:36:
7e:80:69:00:a7:5f:b3:c2:43:47:05:b4:fb:6f:d9:
38:90:58:62:92:27:e6:4d:7b:24:fb:e0:a9:45:49:
a2:30:29:13:05:45:8f:68:cb:62:80:81:ce:94:5d:
a8:bd:9c:55:7a:32:b3:16:c8:30:61:9f:55:84:19:
59:0f:da:12:45:9a:26:47:43:f0:ae:b5:5c:b4:5d:
0e:ff:e3:c5:75:af:a5:6f:8a:31:29:f4:0a:7c:07:
44:7c:b8:8d:c3:1d:70:9a:eb:86:7d:b2:c4:ac:bf:
ac:f2:40:c3:5c:3c:a8:1d:77:21:e4:d7:20:de:74:
29:3b:3a:a1:8a:7b:e2:c1:6e:56:ec:8a:89:05:7a:
7d:26:cb:de:8f:1e:53:95:e7:9d:60:ca:26:ee:45:
27:b0:4a:e7:4e:32:00:ff:06:5b:85:2c:e9:95:9f:
61:87:51:8a:17:af:49:0c:82:13:21:69:42:c7:e3:
43:c3:00:e6:0f:b2:8e:22:38:6a:0f:70:8d:9c:fd:
8f:74:94:b6:c7:f4:81:5c:9c:61:4d:78:13:6e:c5:
10:db:2b:3b:87:ea:40:63:0c:0e:ed:e4:e7:2c:2e:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:62:F3:76:08:CD:C0:8C:FA:35:B2:2C:B9:69:66:55:48:90:11
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:5b:e4:d0:14:a1:fe:3a:d6:f1:90:e3:24:65:b2:14:21:
fd:94:98:50:7d:0e:27:6b:64:72:4e:b9:fa:50:79:6d:d9:20:
a2:af:d3:f1:e9:78:50:4a:9f:e3:9d:19:b6:4f:b6:e0:d6:2f:
57:65:21:63:52:83:6d:80:6d:7e:05:27:3f:47:b0:95:60:01:
4b:24:75:34:16:cb:93:16:80:44:20:88:7c:44:92:40:ff:b6:
63:a6:55:3e:69:40:0d:33:50:b0:aa:f6:a6:4c:d7:b1:cf:49:
97:78:9a:7c:96:89:c1:c8:9a:4a:43:a6:60:16:2b:ec:d0:22:
ac:88:df:fc:c5:00:ab:b9:5a:6d:ef:94:0a:a6:f6:95:13:c5:
b4:18:4a:6e:d8:0e:88:1f:78:5e:2c:4f:b9:a1:49:e6:cb:cd:
ed:58:30:a0:d5:44:33:c5:db:91:dd:79:27:12:5a:0f:6d:a9:
0e:e7:cf:29:d6:41:ba:ae:fa:20:e8:dd:b6:20:d0:9e:68:39:
32:69:e5:80:6c:c1:0f:4b:09:1c:64:a8:44:0d:30:ac:c1:63:
b1:a8:58:35:d0:b7:db:af:43:49:70:3f:4e:c2:b4:c8:04:83:
41:c2:f4:64:e3:ff:21:86:b1:c8:68:4a:ae:53:0e:9d:02:92:
ba:a4:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:09 2026 by rpki-client