This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: fhkUz5O3oJVqsLtEhhUuZnfpPmCIgxeHgeUgFEfTLRc=
Subject key identifier: CF:14:6B:21:90:85:2B:EE:D2:A6:23:0C:81:30:CB:AE:AC:DE:FC:0F
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 019C438FBE9A4914670574C17153047D77D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0EA3
Signing time: Mon 09 Feb 2026 18:00:19 +0000
Manifest this update: Mon 09 Feb 2026 18:00:19 +0000
Manifest next update: Tue 10 Feb 2026 18:00:19 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: j9iAU9/xON5ZgZkLCcLI/HOhdOqwml+baaVzT4HgBz4=)
2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:be:9a:49:14:67:05:74:c1:71:53:04:7d:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Feb 9 18:00:19 2026 GMT
Not After : Feb 10 18:00:19 2026 GMT
Subject: CN=cf146b2190852beed2a6230c8130cbaeacdefc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:20:a1:86:e8:90:af:ac:90:6e:b2:89:b7:
6c:11:5e:e8:f9:72:f4:e9:fb:b6:de:b7:87:9a:b7:
44:63:3a:6d:ed:37:1f:59:7b:3e:a5:dd:84:69:0f:
1a:f3:26:c2:3d:8e:56:aa:e3:ed:3a:6b:1d:29:2f:
e4:01:36:7f:7e:32:1a:aa:42:17:b1:48:c9:52:5f:
0c:14:22:1d:b2:09:54:07:5f:0d:0f:ab:ea:83:bf:
7e:22:b1:bb:69:91:6a:c1:f6:19:33:5a:ef:68:3d:
d7:cb:b7:22:29:0f:a3:cf:64:4c:93:fd:89:f7:77:
1b:fa:03:7a:b1:0f:6a:84:e3:9e:74:1a:3a:7a:08:
d7:c8:87:ce:eb:45:89:dd:68:be:ca:d8:69:3e:1a:
01:7e:2e:06:f2:8b:7d:1d:c1:b7:d8:98:8b:78:b2:
14:b5:27:ba:10:a3:7c:f0:25:79:cb:99:be:1e:ef:
aa:fd:de:8d:28:f8:f4:df:7e:92:b0:bb:3f:a8:0e:
02:d8:a4:34:da:cd:58:8c:97:15:d4:46:01:3d:30:
a0:7e:3c:0b:c7:5e:10:8d:24:59:cb:b7:67:aa:d4:
ab:d3:a0:7e:ff:dd:f8:04:26:5f:52:e4:3b:0a:c7:
db:ee:41:18:d9:aa:24:6b:d5:10:8b:72:08:05:d0:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:6B:21:90:85:2B:EE:D2:A6:23:0C:81:30:CB:AE:AC:DE:FC:0F
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:36:d4:01:96:8b:94:a4:0f:d9:d9:48:67:a8:c9:2b:ca:7f:
c9:08:1d:7d:2c:1a:42:13:b3:d4:6e:10:be:4d:f4:8d:5c:55:
77:0f:ae:9c:7a:80:ec:1d:6c:b7:46:ce:8e:a8:7f:15:fd:68:
17:ab:80:96:3b:4c:c4:63:07:47:f8:37:e3:8b:14:fe:20:57:
8f:93:7b:e7:cf:c8:51:c1:b8:77:76:64:1d:76:77:3c:b4:06:
fc:d5:64:f0:c7:0b:18:75:76:8d:0c:36:1c:45:d6:c1:0a:48:
76:5f:4e:e4:89:1e:86:db:ee:1c:65:35:68:d2:8e:6d:22:c6:
79:ad:23:6e:9e:50:f4:a4:4f:e5:76:86:91:22:09:7c:eb:4e:
b0:b9:50:3f:b7:33:d1:99:57:dd:48:a7:04:a7:f3:e3:b4:5f:
e6:01:07:d5:08:c1:1f:4d:a4:0c:69:0d:09:61:62:8e:d8:66:
3e:29:36:04:6d:cc:ca:10:f4:a4:18:b3:4f:9b:c9:c6:07:be:
76:43:4c:91:33:2b:79:b6:3c:6f:9c:2c:c7:c6:e8:c9:ce:03:
4e:04:bf:f1:ba:6b:1b:a3:68:ca:47:e6:d7:f6:de:aa:f4:8f:
74:fc:ff:f6:26:bf:bc:9e:17:30:ef:1c:1b:ef:71:e9:5d:8b:
08:47:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:54 2026 by rpki-client