This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: O1cH4juAoC/0sG/dgJcchyRYEtrJtR6sFIrzMDv0EB8=
Subject key identifier: 00:A4:A4:00:74:29:BD:6A:67:E5:49:FD:69:31:B7:DD:E4:4D:6A:D5
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 019C42EB2F543F4B20529B49C8DD3CEB34A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0D2A
Signing time: Mon 09 Feb 2026 15:00:35 +0000
Manifest this update: Mon 09 Feb 2026 15:00:35 +0000
Manifest next update: Tue 10 Feb 2026 15:00:35 +0000
Files and hashes: 1: hKDjaD83iRNw9KqUmwJ4dn-wayQ.roa (hash: 10/6EyjVD8LS9DDC/nxhOd/PoDCy15V9W7b4OpC/X6g=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: HJjT1u5v9+Pfz76H5jE1v8+/4r+8XRogkrt6jInWf3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:2f:54:3f:4b:20:52:9b:49:c8:dd:3c:eb:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Feb 9 15:00:35 2026 GMT
Not After : Feb 10 15:00:35 2026 GMT
Subject: CN=00a4a4007429bd6a67e549fd6931b7dde44d6ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:d2:19:b6:f7:02:1e:6a:8f:ee:5e:b0:4b:
45:a0:c5:e0:ef:02:d1:67:09:66:e2:bb:28:5e:9c:
d1:15:81:7d:05:43:67:1f:26:0f:13:ff:d4:0b:96:
97:8e:a8:4c:bb:7d:1e:8d:be:c6:b1:57:ae:0e:ad:
11:8e:d3:2e:58:6d:57:e1:e4:15:dd:74:c4:72:7b:
f7:f1:4e:97:68:db:11:32:3d:46:25:6e:bc:d4:bb:
3d:22:b8:3d:4f:05:a6:ea:e5:cc:6f:c6:2d:2a:44:
e0:e9:30:9a:cd:9f:3b:12:2c:ff:60:e6:db:52:85:
de:87:39:fb:b9:e0:63:7e:6c:87:dd:a3:a3:61:b6:
74:e9:b0:34:97:ed:68:00:82:03:74:91:14:45:78:
5a:bf:84:6c:3f:b7:1c:46:96:80:26:c1:74:63:07:
3d:ca:f6:1a:2d:d9:eb:ed:03:5f:5a:6f:6d:4b:1f:
d7:e4:00:3b:c1:4f:09:da:1c:74:25:21:11:fc:ac:
3c:62:c0:a6:0e:1c:b2:f5:14:e0:5e:d5:14:c4:a4:
2f:77:08:5e:e7:fb:3e:e8:fc:5c:7f:22:b2:a8:64:
00:d6:35:21:43:66:b3:9f:12:7f:8d:b6:f2:77:7c:
4b:95:41:0b:b2:4b:04:ee:0a:9c:1d:d5:c3:df:5b:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:A4:00:74:29:BD:6A:67:E5:49:FD:69:31:B7:DD:E4:4D:6A:D5
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3f:a2:64:53:95:44:e4:53:a5:b8:47:eb:52:21:5a:b7:c2:
fb:6d:09:3d:9c:26:aa:e7:d9:4f:a5:e9:36:a0:03:8c:2e:03:
d1:65:d4:04:6d:98:9a:c6:b0:8d:74:4c:80:3f:1b:a4:ed:49:
aa:bd:4d:26:83:db:e4:39:11:bf:d0:eb:37:03:da:fd:4e:9f:
dd:18:8b:3a:a3:3a:11:3f:94:e1:fd:b7:f4:ab:ac:1b:41:9d:
2c:f2:96:4d:fd:38:28:8d:e1:11:0f:3f:12:32:50:49:d7:c7:
81:1b:76:98:a2:b4:ab:42:c8:17:06:be:d7:12:6f:57:fd:de:
b8:c9:df:ce:6c:c4:78:9c:83:82:2b:60:d3:e0:54:96:ef:a7:
1a:38:ad:37:08:8c:c9:b6:66:18:28:80:6e:fd:c1:30:e4:70:
f2:00:92:bc:bb:7c:be:4f:cd:0b:b5:a1:67:f4:f7:c5:2b:af:
f6:eb:28:5a:6a:fc:b3:9a:b6:f1:c4:4e:15:a0:a1:28:fd:e1:
67:e5:49:04:36:d8:59:f1:7e:20:f9:f1:c2:94:0b:40:87:e8:
20:b6:77:3f:c0:23:03:62:b0:ab:cc:63:7a:b0:ee:69:6d:52:
a5:a1:80:e1:65:be:c4:49:c0:b5:61:6e:78:56:5f:51:c4:18:
f4:4c:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:46 2026 by rpki-client