This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: Qvzwemob/LKHmn2lVfvvp6IV413JSUFBfxX0mhRh/Rk=
Subject key identifier: EA:F2:70:B5:03:4B:EE:76:F1:3F:DA:1D:DA:03:25:00:FB:67:6B:5F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019BF763DFCC667FE7A6A2D18B15C4AA2969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1830
Signing time: Sun 25 Jan 2026 23:01:16 +0000
Manifest this update: Sun 25 Jan 2026 23:01:16 +0000
Manifest next update: Mon 26 Jan 2026 23:01:16 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: bXbbyhWa7sL1iWQ4Ka4nPHKbDoeO2If6fL9SybtA53g=)
2: AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa (hash: TG2n+ec91o1/npZ11uH5oNK4E3sR3ZKcNMfWgBS+6WU=)
3: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=)
4: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
5: VYVYQF_ANofE0yejSfmiYhxR2Kk.roa (hash: yiaUDLovZhIcie7kurnGCzzLjpUZchXMWKa1PjoJ5M8=)
6: b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa (hash: XUgOw13/DeGWuBII7wDdMVowQZGJyVYWSAsGuDpvOtw=)
7: ktLQLQ79jgHcsxhu1BFiAsTmURc.roa (hash: eJQ6FZ55P7nS0k0ro2Z4J5rRPruHptyIHKzgVhT0dJE=)
8: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:df:cc:66:7f:e7:a6:a2:d1:8b:15:c4:aa:29:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 25 23:01:16 2026 GMT
Not After : Jan 26 23:01:16 2026 GMT
Subject: CN=eaf270b5034bee76f13fda1dda032500fb676b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:26:bb:91:41:b2:d8:06:d3:b4:4e:00:fe:
ed:3f:b3:e7:8d:02:6b:33:4d:e3:83:ca:de:18:ac:
35:9b:49:43:ae:2e:32:88:39:da:41:d3:76:95:74:
4d:af:31:c7:50:b2:b9:6b:43:39:d8:a6:62:73:8a:
37:1e:d0:b5:d6:53:30:ca:8e:e3:22:56:61:75:b9:
44:a5:fd:8b:9a:1e:68:0b:b6:c6:35:7b:77:a9:9f:
02:cd:66:5c:08:31:9d:6a:01:05:2d:9f:c8:71:2a:
d3:78:fa:c4:85:32:0f:ae:8c:c6:9c:5c:fb:bf:d7:
23:50:cd:e9:84:57:ad:b6:b5:95:3f:73:77:49:8d:
f2:9a:8b:e2:6c:35:5f:f5:5b:7c:9d:38:20:1f:2d:
03:0c:ed:84:29:d9:26:ef:2f:21:59:76:6d:97:b0:
69:e3:99:f1:92:fe:74:15:08:f1:03:18:4e:68:ee:
14:58:9d:aa:e0:1b:46:48:ce:7d:00:c9:68:ae:93:
5f:8a:49:aa:59:06:42:eb:e1:95:b6:03:92:6d:9a:
69:89:d0:21:a6:db:4a:ae:c4:0d:6a:24:b0:06:fb:
77:fe:12:d2:ba:a8:a4:23:1a:b1:b7:ec:b1:6b:fd:
1d:bf:9f:4b:72:95:a1:bc:07:69:fa:00:56:e7:3a:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:70:B5:03:4B:EE:76:F1:3F:DA:1D:DA:03:25:00:FB:67:6B:5F
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:95:e9:e6:ea:ea:c6:5b:cc:b1:b1:59:aa:bd:76:b7:9f:
04:41:5a:8c:0b:89:06:57:2c:44:35:43:d8:30:8d:01:cd:cc:
8f:94:dd:fe:90:06:4c:1d:e9:4a:5c:cf:dd:ef:7b:7a:ff:21:
11:79:54:d8:06:0c:bb:94:be:20:13:43:5e:76:8e:9c:2c:e5:
78:da:91:6a:e3:f7:a0:fb:9e:9c:2c:6d:a5:b6:8d:7f:a1:9d:
0b:b3:c2:8f:69:f0:06:13:b2:28:4c:ab:1f:56:a5:38:3c:62:
d5:3f:2a:2e:2f:cb:f2:8b:fb:e6:0c:94:c7:bb:09:2a:b5:48:
50:bf:0b:a2:66:ca:6b:27:04:c0:46:50:55:84:27:dc:76:bc:
6a:84:66:d5:c6:de:72:57:db:b4:dc:8d:00:5f:bc:b8:df:b2:
bf:f1:bd:4d:55:2e:f5:2d:6f:56:8b:71:a4:16:c6:4b:b5:5f:
1f:c6:5b:36:e0:e6:87:e9:42:e7:52:73:63:1b:85:9f:ab:0c:
a1:8e:24:2a:b3:09:36:9e:4c:fb:fc:53:31:b0:4e:ab:22:6f:
46:e6:7b:b5:d4:24:92:a6:ff:b6:99:6c:ae:03:4e:96:a7:b5:
79:c6:ac:7c:f0:3c:94:08:2d:85:f2:e4:10:7f:f9:39:f7:ea:
c1:52:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:17 2026 by rpki-client