This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: UnJqQugcUiNxppCvW7pPugqRVLZD+NtQTu0kFdQSwbc=
Subject key identifier: DC:8B:B7:F2:86:C1:BA:37:23:2C:8C:66:60:AB:0C:58:A8:ED:D0:F2
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019C42B43F70BBA552CB70E7B64D6C8293A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 14:00:34 +0000
Manifest this update: Mon 09 Feb 2026 14:00:34 +0000
Manifest next update: Tue 10 Feb 2026 14:00:34 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: jdzld0CbgJD8Q0mRUhSegfufYPgAbSC00yBQniiv8JI=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:3f:70:bb:a5:52:cb:70:e7:b6:4d:6c:82:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Feb 9 14:00:34 2026 GMT
Not After : Feb 10 14:00:34 2026 GMT
Subject: CN=dc8bb7f286c1ba37232c8c6660ab0c58a8edd0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:fc:6d:1b:e1:f4:8e:c4:bc:88:97:aa:52:
50:cf:00:00:46:19:18:99:7b:c3:f4:a5:70:aa:3f:
b0:9d:55:2f:72:43:ba:87:63:59:00:52:8f:12:60:
6d:7c:62:66:29:eb:f1:30:da:79:13:3a:ce:b9:ad:
43:0d:0e:ae:e4:38:b0:da:af:f1:10:65:df:64:1c:
a8:e9:2e:b4:ad:44:06:35:87:2a:ca:0d:27:6d:50:
b8:03:25:63:2d:16:21:4a:6d:fd:1b:6c:0a:d9:b2:
fe:d9:3f:c7:a7:ac:4c:a5:12:ae:99:37:7e:b5:0e:
46:d6:58:5e:9e:d7:af:5e:4e:57:47:61:18:c5:de:
6f:3c:21:7d:d8:8c:b8:c8:c9:dc:bd:ae:d3:80:34:
5e:2d:55:c2:9f:17:b1:56:30:db:ad:92:b9:6f:83:
0d:a5:d3:14:d6:23:ad:20:e6:42:e6:bf:1c:a8:93:
fe:60:46:5a:15:4a:f5:22:6a:a0:15:7c:44:74:1c:
11:0c:e7:ee:c0:60:9d:89:f0:17:78:20:7b:5b:2d:
ba:b5:1a:2c:45:37:9f:cc:fd:6f:d8:4b:43:fb:d9:
cb:ce:19:5e:e5:2e:3d:7c:e5:f9:4c:df:b7:c7:31:
31:5a:53:a0:cb:9c:0c:32:3c:80:41:5b:7b:a6:bb:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8B:B7:F2:86:C1:BA:37:23:2C:8C:66:60:AB:0C:58:A8:ED:D0:F2
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9f:82:04:67:8e:f6:19:fb:c2:5e:90:f4:d8:6d:32:70:94:
53:3a:b2:9f:8f:e2:b4:a0:3b:3b:9e:37:77:55:e7:d9:72:00:
1b:ac:91:5d:24:bd:1f:29:17:48:6b:84:d6:35:b5:bb:78:bb:
5d:3f:14:0e:a0:d3:1b:12:9c:9e:c8:1f:5b:74:59:8f:a8:cd:
8b:5c:49:6b:cd:25:b4:44:67:e4:58:7d:b3:da:88:40:27:83:
72:ae:bb:46:23:82:67:f5:5f:ad:5a:d5:1d:7d:85:a6:fe:82:
40:a8:e6:90:11:31:11:47:79:5d:2d:bb:3e:c8:c2:f0:da:fe:
10:59:ee:dc:1f:43:f0:be:39:97:47:3a:68:f7:55:66:67:5c:
87:98:3b:60:8d:ba:93:2c:d0:eb:75:8b:c5:38:c8:48:e5:3d:
d2:6a:a1:c3:53:2c:8c:f1:84:19:f1:41:20:a4:96:31:cc:61:
b2:b1:89:4f:56:c7:e1:b1:b6:d1:56:19:8d:66:e0:64:ec:45:
ca:6d:b6:9c:79:d8:68:c5:ed:cd:01:32:93:ad:77:00:eb:1d:
cf:94:1a:8b:f8:18:d1:36:e1:c3:f9:ac:14:0b:93:d2:be:b7:
ae:52:ff:47:21:df:59:da:84:ea:21:ea:7b:f3:77:e2:1e:d5:
81:9c:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:25 2026 by rpki-client