This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier: kFS0YHrGjWQ5Nn3zv4ljQf4w54MhiXbUxKZC3dqkjqE=
Subject key identifier: 75:53:8F:E9:B3:78:98:7D:F0:7A:CC:FF:C9:99:09:16:6A:7F:B8:D5
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial: 019C4246383ECDCB658D5F6C816413E1CDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number: 06D6
Signing time: Mon 09 Feb 2026 12:00:23 +0000
Manifest this update: Mon 09 Feb 2026 12:00:23 +0000
Manifest next update: Tue 10 Feb 2026 12:00:23 +0000
Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: sZNb3HJfcqcGRHJ8RHG/wsCarOqleJFTaBEH434jqxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:38:3e:cd:cb:65:8d:5f:6c:81:64:13:e1:cd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Validity
Not Before: Feb 9 12:00:23 2026 GMT
Not After : Feb 10 12:00:23 2026 GMT
Subject: CN=75538fe9b378987df07accffc99909166a7fb8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:3b:50:da:18:0a:1c:91:46:fd:72:67:83:
5a:22:1a:51:58:d8:50:4a:c5:94:bd:5d:e3:65:25:
eb:31:15:9d:f5:d8:7f:1c:49:38:50:18:9b:5f:dd:
fa:c7:1c:55:78:81:c6:a9:43:5a:8c:16:13:0e:e2:
15:ad:10:34:12:31:6d:90:aa:3d:71:25:70:ad:67:
2c:26:e2:d9:3d:2c:41:a3:74:41:67:55:20:34:5d:
e8:3b:1f:2f:72:ed:aa:74:ca:37:74:99:27:7c:2d:
0e:76:39:fb:26:93:ad:c3:67:09:cb:0f:58:30:bb:
1e:13:58:78:b7:f1:2a:33:28:a1:e3:19:eb:9e:61:
3a:30:cc:95:78:09:f0:09:28:c9:09:ac:b3:2d:0a:
0d:26:8b:2c:0c:ba:56:4c:01:1d:7a:1f:92:eb:ad:
fa:2f:11:1c:d0:ed:4d:ff:48:dd:cc:43:8f:b7:bc:
5b:0f:ee:01:20:cf:24:39:57:ee:86:0b:a7:54:b9:
62:d3:84:5c:ec:d5:5d:d3:c4:a9:fd:26:4d:0d:71:
89:1a:70:e4:19:21:53:30:e5:30:91:48:54:cc:73:
ec:54:67:b2:ff:db:19:e1:50:0a:bf:af:c3:63:bf:
3e:2f:3f:e5:89:36:52:df:c9:00:37:a9:c8:21:da:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:53:8F:E9:B3:78:98:7D:F0:7A:CC:FF:C9:99:09:16:6A:7F:B8:D5
X509v3 Authority Key Identifier:
keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:b0:f7:7b:fb:eb:0e:36:aa:c5:6b:ac:30:f1:0d:36:b2:
98:1a:db:14:4b:76:66:cb:67:dc:28:b7:b6:a7:4c:26:50:83:
7e:89:3c:5f:90:12:a1:50:bd:9a:ae:b5:16:42:38:1b:84:92:
78:b9:3a:bb:03:17:07:53:63:1e:02:47:f9:af:78:c2:e4:53:
72:23:b0:32:19:e4:a4:79:28:8d:7c:51:c7:de:75:d1:55:ed:
4f:73:ca:09:7e:d9:f5:ca:f8:57:49:0c:85:d6:4a:c0:64:7a:
60:5f:ce:de:11:df:06:0a:13:b2:36:3d:a0:ec:68:03:bb:a1:
08:1e:50:d6:28:57:80:58:be:48:ee:cd:ce:04:ea:6f:f0:c5:
23:14:03:ae:40:00:c6:2d:a7:b8:8a:ed:c9:e4:12:4c:b6:79:
cb:9c:6c:96:17:91:c6:5b:93:64:25:02:3d:e8:b0:14:4b:e5:
8f:25:c7:17:07:ad:3e:78:5c:a7:c7:03:e0:3c:bd:53:45:fc:
d0:47:fa:ba:0f:7a:c1:49:24:c4:7e:07:fb:2f:a7:52:da:fd:
77:8b:be:d2:20:32:2f:34:b7:4b:72:dc:6f:86:83:4d:00:39:
54:8f:14:78:21:66:82:72:cb:0d:ed:39:35:b5:6b:33:fa:21:
fa:2e:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:52 2026 by rpki-client