This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: vYCSNNkCxbBb0S2/0NgrJRPvTdD16Td7K5z2vmQRaD0=
Subject key identifier: 0E:4A:50:ED:78:F9:6E:0F:A5:87:C3:B0:1B:02:E7:78:76:DD:F6:BA
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 019C42B46DD0E7B55D8A510A9C1F2E85B12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 14:00:46 +0000
Manifest this update: Mon 09 Feb 2026 14:00:46 +0000
Manifest next update: Tue 10 Feb 2026 14:00:46 +0000
Files and hashes: 1: 2TejQ9qdrUejplvg2pRdV5ySwCU.roa (hash: z2B5UlkMWFYxdzwShhvSwDpIukaDaNgAut2hvjv+b1A=)
2: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: Xb+TXKJPdYcEmJlUkdH8A3uhmvGUq2hp6R/K2VUOnFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:6d:d0:e7:b5:5d:8a:51:0a:9c:1f:2e:85:b1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Feb 9 14:00:46 2026 GMT
Not After : Feb 10 14:00:46 2026 GMT
Subject: CN=0e4a50ed78f96e0fa587c3b01b02e77876ddf6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:cd:0d:80:86:69:ed:84:14:89:9b:5b:56:
d7:f5:25:26:c0:ac:d8:56:3d:85:dc:b4:fc:ca:f1:
57:5e:5a:ba:cb:6b:65:3a:3f:ae:f1:08:de:94:d7:
f7:43:3c:98:8e:de:b3:97:96:55:a8:8f:38:c5:97:
23:2d:46:12:96:c0:34:fb:49:84:95:3d:14:7e:25:
7e:54:b5:34:c3:18:f0:9d:86:71:cd:9c:63:5d:c5:
50:92:e7:ac:4e:14:05:31:26:c4:f1:49:f2:2f:49:
e8:94:71:21:31:66:8a:47:b5:e9:b8:59:93:15:ab:
f2:2a:cd:2d:96:7c:a8:46:48:6e:15:ae:d2:66:7b:
9f:04:a2:c9:7c:c7:fe:09:d5:58:6e:f0:3a:a6:93:
6b:42:86:25:dc:80:ec:7e:38:db:9d:4f:04:0a:dd:
15:49:35:d4:fa:34:a1:6f:ef:82:36:ef:1b:5e:c9:
76:50:d1:6d:f6:29:82:22:5c:91:fc:10:50:34:31:
c7:2f:0e:1b:7e:ca:fa:68:b5:73:98:f1:29:70:55:
61:ac:2f:9d:ee:38:af:25:79:05:08:ad:e5:aa:e4:
55:da:30:4b:1b:2b:60:eb:e4:f2:03:e0:ba:ed:0e:
9f:86:5c:dd:8a:50:2b:11:40:21:71:a9:ac:dc:01:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:50:ED:78:F9:6E:0F:A5:87:C3:B0:1B:02:E7:78:76:DD:F6:BA
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:2b:8e:38:77:8c:86:06:63:35:e9:23:d1:83:a9:7c:41:
b9:17:94:0c:6c:89:14:c2:eb:bf:e0:56:bf:fe:71:6f:65:2b:
b8:bb:d7:66:9a:14:7a:48:45:e0:fb:3c:76:ee:2a:e4:3c:09:
df:e2:6d:af:b0:23:b9:51:17:8b:d6:c8:a5:13:d4:ed:29:48:
0d:0a:78:a5:d1:aa:d1:de:b6:fb:c6:ff:2e:93:07:f4:a2:66:
50:57:b2:0c:e1:99:fc:21:09:c8:25:f9:13:e8:49:f0:0d:36:
72:ef:22:44:d4:91:06:63:74:22:52:80:31:4a:ea:f2:3c:6a:
75:00:f5:16:1d:20:bd:cd:6c:26:b4:25:74:8d:71:dc:95:ff:
f2:4d:d9:e4:e8:8b:9b:c7:f0:38:9b:bd:39:ba:7d:60:b1:81:
fc:bd:b7:35:c0:7a:6a:fd:46:90:e7:b4:26:3d:47:04:82:e7:
87:a9:76:bf:f9:f8:8a:76:b7:38:36:63:72:16:cd:06:92:73:
fe:dc:af:b7:1c:07:9e:ad:84:5b:08:df:fc:85:f0:e2:b3:d0:
fb:77:c2:c2:f1:bf:06:aa:e7:8f:99:ab:ba:a0:7b:6a:ab:9f:
f8:cf:af:49:bf:46:c0:ab:e7:f3:27:4a:35:c9:67:35:b4:e7:
7e:96:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:59 2026 by rpki-client