This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: l+yDuLY8xpl/+o05s6D/eKRp9NahSghMAeDuszhmcb0=
Subject key identifier: 99:F1:D7:C1:CE:DB:72:A8:B7:69:04:CA:0A:DC:24:38:D2:C3:9C:6F
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019C421023B4CD5E7E058139267B01D99D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 11:01:19 +0000
Manifest this update: Mon 09 Feb 2026 11:01:19 +0000
Manifest next update: Tue 10 Feb 2026 11:01:19 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: RrZ1uIO67K/sGlC3gP8vYNUbU4QVdqXwnM5xSMzMllY=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:23:b4:cd:5e:7e:05:81:39:26:7b:01:d9:9d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Feb 9 11:01:19 2026 GMT
Not After : Feb 10 11:01:19 2026 GMT
Subject: CN=99f1d7c1cedb72a8b76904ca0adc2438d2c39c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4e:ad:cf:4e:0d:02:fd:4a:ff:de:4b:32:05:
22:97:62:62:17:1b:48:57:68:0c:08:7d:83:4b:43:
4e:ba:02:03:03:af:2d:9e:2e:f5:22:25:73:16:e7:
e5:ee:ff:50:48:7e:ce:70:63:7a:96:2c:ab:8e:98:
24:96:cd:73:55:5b:59:25:4d:ad:b4:44:1b:5b:10:
f5:93:19:23:6c:4a:79:2b:67:dc:c0:c7:22:14:c4:
06:01:ba:8c:48:12:af:09:12:52:8a:14:c0:62:ca:
5f:e1:c4:45:6e:c8:7a:71:4e:5a:33:85:b1:40:8c:
4c:e3:57:a6:db:4d:8b:34:0e:02:1f:bb:f0:20:58:
35:14:1d:2e:9a:cb:9a:70:ff:d8:4f:f3:af:1b:df:
c3:1f:e9:60:ac:bc:04:c4:34:4b:53:99:1f:77:81:
9d:55:86:a9:be:3c:a5:17:fe:1f:6d:b9:2a:90:b1:
6b:c1:5d:68:3c:1e:75:d8:e8:36:62:cc:e8:31:04:
5e:54:e1:65:5a:45:1c:58:66:7b:b7:ea:30:ed:61:
c1:9b:e9:c7:6d:88:1f:21:fb:4e:c4:23:f1:c1:f6:
86:83:a4:64:97:b4:fb:a0:61:c7:23:49:21:1f:0a:
23:51:a9:9d:9b:0c:71:13:10:e8:c2:b9:ea:55:9e:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:D7:C1:CE:DB:72:A8:B7:69:04:CA:0A:DC:24:38:D2:C3:9C:6F
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:1e:92:48:52:17:78:f2:7c:2d:c4:52:cf:18:49:bc:62:4f:
08:8d:03:28:80:fd:29:87:6f:86:2f:a8:db:28:3d:17:f9:b2:
cb:e0:40:51:83:e7:65:3e:05:02:ac:e6:22:e0:e8:6a:9c:cf:
a5:96:fd:aa:3b:b0:3c:1b:70:b2:a1:bb:b9:eb:2a:58:34:ea:
7a:91:ff:9c:1d:02:38:ac:eb:6a:85:41:fb:f9:98:7c:52:ce:
cc:8f:e8:c5:b4:d4:0e:36:d2:f4:07:80:ff:66:20:19:01:09:
cb:2e:87:5c:a7:1b:9c:de:a0:6d:14:30:16:8b:8e:dd:84:34:
79:a0:96:54:8c:29:42:68:e4:a8:c0:44:be:de:6e:f4:b7:1e:
25:a3:b8:94:94:5b:4d:41:53:ee:d5:f3:7c:65:ac:17:2b:81:
52:ff:b0:a9:ee:a4:40:81:db:eb:55:67:3f:01:1a:b7:e0:3f:
14:2d:5c:cb:ef:44:35:d4:b2:e9:d4:8d:f5:36:34:97:38:92:
53:24:b3:cc:d0:0d:c1:ba:a1:95:4e:58:6e:e8:3c:c4:1d:2d:
f3:0d:73:46:44:d2:76:4d:47:ce:80:07:6b:00:5f:6d:35:10:
0f:9e:72:23:4e:6f:56:3d:b9:b2:31:4f:5d:90:22:a0:01:8b:
88:06:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:42 2026 by rpki-client