This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: rf5TAF0LFfa15TChPBCgu5ZlIF/FKyTg5veOxuGqxPw=
Subject key identifier: B5:92:3E:E3:31:92:67:C7:4E:29:26:B0:2A:FF:44:E0:48:64:3F:9B
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019C42B42CC0D9DEC1A9FB45E67C73EC1832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 151E
Signing time: Mon 09 Feb 2026 14:00:29 +0000
Manifest this update: Mon 09 Feb 2026 14:00:29 +0000
Manifest next update: Tue 10 Feb 2026 14:00:29 +0000
Files and hashes: 1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: cnmKA6EBuLURxaI8WC3o5H2/uj3QhwZZbZHETEW59pI=)
2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2c:c0:d9:de:c1:a9:fb:45:e6:7c:73:ec:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Feb 9 14:00:29 2026 GMT
Not After : Feb 10 14:00:29 2026 GMT
Subject: CN=b5923ee3319267c74e2926b02aff44e048643f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:1e:f8:3a:be:c6:91:cf:b9:fd:c4:5e:b7:
8c:1c:9b:c0:d9:a9:6d:99:af:cd:b7:d9:0e:14:56:
95:b0:63:72:5f:29:a7:5c:4b:2e:b1:fb:a3:51:f7:
de:20:07:36:c0:93:39:17:34:f5:af:45:38:62:c6:
ad:06:de:14:27:ac:b4:ee:bc:9d:4e:12:77:a4:ba:
86:6b:d8:f8:88:61:9c:33:ca:9c:b5:52:57:2b:5d:
1a:ca:fa:51:68:38:2b:9d:35:58:5e:74:9d:5c:b4:
fa:9c:e3:0f:0d:f9:23:06:c7:38:f0:d0:66:84:55:
8a:cc:c6:a3:d4:92:74:31:b7:69:25:a4:9b:c8:e6:
42:c6:6e:8e:44:9e:d2:72:3f:62:31:54:87:c8:a8:
bb:27:ae:cd:e4:dc:8b:33:5f:90:99:65:79:80:d1:
20:08:be:be:93:a5:12:01:ed:d9:70:16:c6:02:87:
ee:94:da:d6:c4:55:03:5b:82:84:b0:b5:6b:04:a1:
2d:67:1c:17:08:17:80:ad:0e:24:04:67:07:08:88:
7b:ba:6a:26:27:af:6b:32:21:9b:c2:b2:e4:c3:11:
ae:3a:59:4d:ad:7e:e7:3f:60:86:72:94:ef:72:7a:
60:07:2d:0a:26:a2:dd:cf:1a:3e:51:bd:05:31:3b:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:92:3E:E3:31:92:67:C7:4E:29:26:B0:2A:FF:44:E0:48:64:3F:9B
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a5:b1:09:5e:7a:63:b4:b3:cf:76:a0:60:83:3f:d1:ed:c2:
3c:81:5e:fb:3c:90:f7:3c:28:0e:e9:c7:e5:28:8a:bd:0d:22:
86:47:4c:e3:0c:0f:33:28:d9:55:83:4d:0f:66:df:5e:8f:d2:
16:89:58:da:ce:ca:0f:0b:c4:11:e4:b3:92:67:af:01:90:0c:
e4:2e:72:62:97:50:84:3e:96:27:58:67:13:5d:5d:db:16:36:
08:c2:8c:5a:cf:6f:8f:a7:fb:b3:48:40:d6:a8:c2:f7:ec:e8:
2f:d6:7e:0d:05:a5:78:95:49:f0:7c:45:bf:fd:3d:22:d9:9c:
73:69:51:4c:3a:4f:76:db:fe:87:75:f5:0a:b6:8e:40:f8:8a:
6c:57:69:a8:42:7d:8a:58:f2:63:3a:ce:d6:7e:0e:c0:8d:40:
c0:ab:cd:fb:1e:45:59:3a:c0:4e:c3:f7:b1:01:87:08:e0:aa:
b9:bc:9a:a6:89:ca:36:f8:7e:5b:52:0b:2d:99:25:84:78:33:
83:eb:67:9e:96:de:42:61:51:72:69:f4:bc:66:be:72:aa:ed:
13:bd:f8:20:1e:f5:46:d4:27:68:fa:7f:ba:1c:13:0a:6c:89:
1e:e2:8f:0e:36:d0:d9:97:b1:2a:7e:55:0e:af:64:4d:2e:a1:
1b:20:34:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtCzA2d7BqftF5nxz7BgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh
N2MzZDMwHhcNMjYwMjA5MTQwMDI5WhcNMjYwMjEwMTQwMDI5WjAzMTEwLwYDVQQD
EyhiNTkyM2VlMzMxOTI2N2M3NGUyOTI2YjAyYWZmNDRlMDQ4NjQzZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPke+Dq+xpHPuf3EXreMHJvA2alt
ma/Nt9kOFFaVsGNyXymnXEsusfujUffeIAc2wJM5FzT1r0U4YsatBt4UJ6y07ryd
ThJ3pLqGa9j4iGGcM8qctVJXK10ayvpRaDgrnTVYXnSdXLT6nOMPDfkjBsc48NBm
hFWKzMaj1JJ0MbdpJaSbyOZCxm6ORJ7Scj9iMVSHyKi7J67N5NyLM1+QmWV5gNEg
CL6+k6USAe3ZcBbGAofulNrWxFUDW4KEsLVrBKEtZxwXCBeArQ4kBGcHCIh7umom
J69rMiGbwrLkwxGuOllNrX7nP2CGcpTvcnpgBy0KJqLdzxo+Ub0FMTsYQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWSPuMxkmfHTikmsCr/ROBIZD+bMB8GA1UdIwQY
MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt
NGZkMGUxYjljMTJmLzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm
LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKWxCV56
Y7Szz3agYIM/0e3CPIFe+zyQ9zwoDunH5SiKvQ0ihkdM4wwPMyjZVYNND2bfXo/S
FolY2s7KDwvEEeSzkmevAZAM5C5yYpdQhD6WJ1hnE11d2xY2CMKMWs9vj6f7s0hA
1qjC9+zoL9Z+DQWleJVJ8HxFv/09Itmcc2lRTDpPdtv+h3X1CraOQPiKbFdpqEJ9
iljyYzrO1n4OwI1AwKvN+x5FWTrATsP3sQGHCOCqubyaponKNvh+W1ILLZklhHgz
g+tnnpbeQmFRcmn0vGa+cqrtE734IB71RtQnaPp/uhwTCmyJHuKPDjbQ2ZexKn5V
Dq9kTS6hGyA04g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:07 2026 by rpki-client