This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: GEl9167h7lSIOVnUTuz+MA3QVYvffQvjxgV0mDsM5Pw=
Subject key identifier: 9C:23:DB:44:86:3F:80:81:E1:58:6C:A6:D1:B5:D6:16:42:2B:D5:DB
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019C43226D98CDEC2E3C94C383EFA8C0DF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 16:00:55 +0000
Manifest this update: Mon 09 Feb 2026 16:00:55 +0000
Manifest next update: Tue 10 Feb 2026 16:00:55 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: eiczm23P8vll/WYFgloE9mZiNmHeTkiq6Lgi48bt00o=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:6d:98:cd:ec:2e:3c:94:c3:83:ef:a8:c0:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Feb 9 16:00:55 2026 GMT
Not After : Feb 10 16:00:55 2026 GMT
Subject: CN=9c23db44863f8081e1586ca6d1b5d616422bd5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:e3:ad:06:c1:20:7b:6e:09:32:b7:9b:af:
f7:bc:04:1d:cd:36:5d:c5:30:60:9f:f2:c1:7e:53:
3e:92:98:75:e0:0f:a7:68:f0:e4:4b:36:59:e7:42:
96:b8:fa:5a:ec:ae:dd:3b:80:d4:8b:77:8e:01:e3:
6e:8a:72:58:31:32:78:e4:33:e2:76:e4:9e:c4:41:
14:90:ce:96:0b:ad:dd:3f:8d:9f:91:0f:b4:f5:58:
53:ce:56:79:2c:e5:6f:3b:3f:d0:ec:f1:30:a3:41:
7c:c8:a5:ab:95:54:6f:45:5b:fe:0e:ad:41:04:52:
73:4c:cb:14:cd:d7:44:96:4f:e1:65:95:87:58:51:
78:78:31:9e:6a:cc:47:ac:30:79:fe:48:6b:48:1e:
e3:6a:14:1e:17:ac:16:48:29:8d:ee:f4:96:6f:53:
31:23:8b:f8:fe:ff:e7:73:59:6c:a5:2d:c9:a3:42:
db:0a:c2:7c:00:e6:42:5a:97:e4:fb:8f:c5:df:72:
0c:8c:86:64:54:c2:79:a9:1c:ea:53:b1:d5:1d:d2:
2f:bf:82:44:c8:45:9a:be:34:43:47:7f:8b:eb:c4:
88:a9:c3:48:cd:ca:7f:11:79:28:7c:89:37:98:6a:
72:17:5e:85:7d:e5:69:36:11:52:e9:41:e2:60:07:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:DB:44:86:3F:80:81:E1:58:6C:A6:D1:B5:D6:16:42:2B:D5:DB
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c8:53:22:7f:6a:e7:39:21:2f:de:da:f5:83:32:dc:f6:27:
ad:a8:db:18:49:28:f4:8c:62:18:35:01:58:e2:ec:5c:10:09:
f3:51:02:66:b6:e1:38:3b:ef:2a:ec:b4:10:eb:ab:97:7d:f5:
a3:2a:aa:12:21:6d:70:44:23:65:9c:e0:d9:d1:18:28:e3:fa:
03:ad:de:4b:03:73:f8:d4:d2:c9:b6:68:c4:f9:f1:d4:4a:0f:
e8:b3:28:66:c9:43:bd:71:db:81:90:99:df:59:9d:09:17:f6:
37:6c:ff:02:ef:a7:aa:23:d4:c7:41:07:77:94:f0:b3:48:2a:
85:61:e8:5e:9a:12:fe:31:1b:27:0a:24:d6:99:59:34:4c:a8:
1e:f6:74:3e:cb:af:f8:59:1f:34:c6:e8:9d:e8:b3:1e:86:1b:
f2:66:88:f3:93:74:69:a7:7a:60:81:3f:d8:7b:e7:b1:2b:8c:
94:0d:cc:88:da:3e:18:b0:17:32:15:49:1b:66:c1:74:c8:11:
b0:c5:bb:e5:f5:81:98:be:85:0b:59:8b:5c:6b:7c:f5:6a:ff:
97:57:32:7b:d6:a3:2a:c5:34:fd:99:b5:68:da:da:ca:bc:d4:
38:87:5a:3f:b2:c0:57:49:ea:32:d5:66:fb:73:64:29:84:ab:
7e:99:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:06 2026 by rpki-client