This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier: 856JFEH5ec27pqorOnF0AjVT9DcalcX8qgbNqZf3lHc=
Subject key identifier: 53:2C:8C:13:BA:B6:BD:D0:B7:83:4B:34:A8:3F:B6:1E:CD:B4:D8:66
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 019C4390484D71386536943C40649F99C5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number: 1110
Signing time: Mon 09 Feb 2026 18:00:54 +0000
Manifest this update: Mon 09 Feb 2026 18:00:54 +0000
Manifest next update: Tue 10 Feb 2026 18:00:54 +0000
Files and hashes: 1: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: MHZZKs4hMDtAEowkJIYJx59Ar/rYFMddgrCrMIm9Jbo=)
2: bnpZWoK19n1XzIl8GBiTgjFaI8E.roa (hash: +AVNEsf0hyxywK+MPw4MlTXuOoeM9Lhba5oG66zfeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:48:4d:71:38:65:36:94:3c:40:64:9f:99:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: Feb 9 18:00:54 2026 GMT
Not After : Feb 10 18:00:54 2026 GMT
Subject: CN=532c8c13bab6bdd0b7834b34a83fb61ecdb4d866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:71:b5:13:ed:b1:2c:56:77:12:5e:80:19:
00:c6:10:63:bf:5c:0c:86:0b:8b:bc:13:02:19:b4:
bb:7b:d7:8d:47:25:07:4d:9e:76:f9:79:42:84:fb:
14:5c:26:3c:b8:be:7b:e4:40:f1:80:66:2b:42:ed:
3f:00:d7:29:08:ac:20:c2:53:a3:f7:a1:fa:5b:ff:
ab:07:13:a4:2a:91:fb:fa:5d:66:33:1b:fd:da:e1:
89:e8:9e:3d:98:6c:4d:3a:69:83:0b:ea:bf:2b:2d:
3c:5c:b5:a7:64:0b:25:eb:cd:70:06:96:8b:27:50:
0e:04:9e:63:41:aa:cc:3f:aa:48:0b:92:9d:38:22:
13:b9:66:1c:ca:11:fe:3d:05:47:44:c2:de:c8:26:
11:5c:8f:54:57:e0:36:4f:e4:28:30:b4:73:1b:ca:
4c:87:56:6a:fb:d5:2f:b6:dd:63:5f:f7:5f:9e:63:
4e:b1:42:a0:18:3d:96:53:cc:1a:99:e8:26:14:5c:
27:93:dc:0e:cd:6b:1b:20:b1:c0:95:a1:0f:45:e8:
d0:dd:75:95:0d:31:0f:a9:8d:9d:f4:38:67:cd:74:
1d:ca:3a:8e:4e:f8:33:c8:09:dc:38:e3:2f:b9:16:
c0:f4:49:c0:b7:dd:56:c2:db:97:5b:58:4e:eb:e2:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:8C:13:BA:B6:BD:D0:B7:83:4B:34:A8:3F:B6:1E:CD:B4:D8:66
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0b:b3:71:dd:4d:45:59:54:55:45:3e:c3:15:e3:00:7b:cb:
f0:b7:18:90:e7:62:cc:25:d4:d5:16:13:83:60:b3:78:5b:13:
1d:ae:67:3b:e5:08:24:a2:c2:c6:df:66:75:b2:de:7c:60:2f:
99:78:a8:7b:6a:07:18:3e:75:fe:cb:21:90:52:0a:36:02:65:
08:36:db:47:b4:98:a3:be:74:79:9d:9a:b7:42:e5:8f:81:5a:
56:ea:8b:a0:c1:b5:98:8b:f7:ca:42:44:aa:7e:45:24:10:2f:
e2:a7:ef:df:63:16:40:31:87:97:5a:36:f1:59:1b:14:7a:c7:
f5:85:3b:6e:b7:e1:fc:d6:7f:35:d8:4c:4a:04:13:72:17:6d:
f4:30:26:73:58:67:26:0b:08:60:84:a1:a7:7e:d9:72:5c:fe:
c0:6a:7c:e9:96:af:7e:f4:2a:8c:85:2f:99:c2:d4:71:8f:d4:
d9:db:b8:6f:82:8b:ad:fb:d7:58:8e:d6:8d:0b:a3:0f:4d:ad:
8a:27:6c:24:de:9d:d3:99:bb:21:79:e8:a7:ee:60:6a:93:8b:
0e:90:38:4a:b9:e1:2e:e3:3b:6f:f9:2e:52:01:66:3d:a0:0f:
21:1a:58:22:85:f7:a0:e5:e8:f0:1d:23:1b:7f:d3:1c:f9:b4:
87:3b:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:52 2026 by rpki-client