This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: wothMMN7S9bftpbA1iJ0++JtB48BpaqdgVjDEpZsvXY=
Subject key identifier: 67:90:E9:D4:85:5E:71:BC:DB:19:0E:0D:89:62:36:8D:5C:F6:03:1E
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019C424688A8A8245BD131A89924B290E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 08D6
Signing time: Mon 09 Feb 2026 12:00:44 +0000
Manifest this update: Mon 09 Feb 2026 12:00:44 +0000
Manifest next update: Tue 10 Feb 2026 12:00:44 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: Qpyl3khgiIt2THZnbr8rt0Q580FNm/1/5BpoL83j4E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:88:a8:a8:24:5b:d1:31:a8:99:24:b2:90:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Feb 9 12:00:44 2026 GMT
Not After : Feb 10 12:00:44 2026 GMT
Subject: CN=6790e9d4855e71bcdb190e0d8962368d5cf6031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:47:1c:7a:54:97:1e:2d:57:65:54:c1:f5:
9e:e9:b2:fd:5c:c9:26:b6:65:4d:9a:6f:64:04:97:
11:c4:16:23:03:2e:09:b4:4e:30:1b:0b:54:69:31:
fc:a7:12:0c:0a:16:dc:67:4a:27:6c:35:c7:7f:b1:
3d:37:ce:63:6b:89:49:a4:b9:ef:b9:43:6d:6a:e4:
65:18:da:99:ea:4c:eb:fd:bc:2f:92:d3:e8:e9:37:
85:4e:2d:2f:0c:db:51:57:30:84:99:fa:42:24:7d:
07:e8:dc:cb:fd:11:41:d7:28:f7:22:a8:2d:9f:89:
61:a4:1a:20:d9:53:68:3a:84:1a:ac:1e:ad:5c:8b:
b8:3a:88:1f:6c:00:cb:9d:74:62:a0:6c:ff:4d:67:
10:b3:d4:b2:f9:5d:00:3c:c9:39:c9:04:06:0a:5d:
17:04:65:4b:5b:7b:2c:0d:fd:5f:d4:9a:6b:e3:3f:
99:3e:e9:41:cb:36:40:3e:94:33:0a:1c:ab:57:a5:
be:70:16:81:f0:d3:05:d1:41:6b:55:b6:08:b3:cc:
8b:e5:0b:ce:1c:3e:d6:1f:77:f3:10:fa:4f:71:ef:
d0:7b:df:9c:a8:a2:e4:81:52:62:cf:a6:f7:cc:00:
bc:ea:e2:f9:5d:87:70:ad:6d:28:f0:17:81:c2:5b:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:E9:D4:85:5E:71:BC:DB:19:0E:0D:89:62:36:8D:5C:F6:03:1E
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b3:8c:7c:7a:1b:3f:28:75:4a:2a:f2:ca:13:11:29:86:1b:
89:e3:a7:2f:c9:43:ea:a0:b0:be:a4:eb:36:68:0f:af:8e:66:
59:f7:5a:6e:fd:ca:87:f6:58:14:91:03:cc:fc:ad:1f:ca:1e:
f6:29:f9:7d:97:d8:dc:4c:a0:cd:b6:0f:54:d3:8d:f9:e9:9b:
e5:53:6c:ad:4c:c0:65:46:83:a8:fb:fa:8a:1b:ae:4b:4a:3e:
ac:c6:5b:dc:e1:5a:36:cd:ca:f6:24:a4:5c:fb:1c:3c:52:46:
2d:de:ae:b0:53:b4:c3:2b:16:4e:1f:01:c0:ac:21:79:22:df:
d2:93:09:7b:57:9e:3f:01:02:d0:fb:0a:1e:dc:bc:a3:2a:74:
af:d1:12:e9:7d:b3:b6:f0:a1:16:69:a5:fe:df:31:52:32:29:
ef:f8:b4:31:e3:b3:76:c5:af:74:04:47:74:3d:c4:80:e3:65:
ff:6a:15:ba:aa:0e:e6:bd:6a:db:6c:ff:97:57:09:43:93:8c:
16:b6:06:bb:4e:4a:9d:34:0c:ef:c5:9f:fb:28:03:35:a1:d3:
9b:ea:3b:57:ce:19:27:04:bd:a3:14:10:4b:98:b0:27:e4:48:
dd:77:b6:16:5f:11:d0:bb:37:00:e6:b0:54:19:91:f7:a6:aa:
a7:e6:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:52 2026 by rpki-client