This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier: 61GFv78LEjvqGlsu8h0ye3w/rrZS+nbfIi0RAA5iS5M=
Subject key identifier: 64:13:CC:06:8A:85:83:43:E1:B3:B6:A9:6C:12:96:FC:CB:BC:44:57
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 019C41A1F70C4A0974BC9156708CC5BA894D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number: 0654
Signing time: Mon 09 Feb 2026 09:00:59 +0000
Manifest this update: Mon 09 Feb 2026 09:00:59 +0000
Manifest next update: Tue 10 Feb 2026 09:00:59 +0000
Files and hashes: 1: 4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa (hash: towBJONDWlEy1Ghtn/h9pt+Tf2v85Qo/Obp+rcJdKYc=)
2: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: bX0sQSzjZuhFzkTacaciZI75DaAbUm/oqZwbLFj/ExI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:f7:0c:4a:09:74:bc:91:56:70:8c:c5:ba:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Feb 9 09:00:59 2026 GMT
Not After : Feb 10 09:00:59 2026 GMT
Subject: CN=6413cc068a858343e1b3b6a96c1296fccbbc4457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:4a:6d:ae:41:d0:42:29:91:59:41:2c:ef:
83:ac:fe:78:b5:a8:c8:13:7d:f3:36:c8:f5:f5:4f:
70:92:fa:3d:1b:7a:86:7e:95:aa:6f:98:70:2e:96:
71:97:9d:3e:3e:61:20:fb:4c:e6:51:e7:1f:f5:7c:
b0:03:aa:06:fc:87:18:e9:56:93:06:e5:fb:68:20:
3b:4b:92:ed:c9:63:f0:02:83:81:54:ea:e1:67:48:
2b:2c:68:6c:49:f6:1e:7d:84:1f:61:49:58:20:2e:
ad:04:2f:04:22:b6:df:33:d5:54:26:6d:71:e6:d5:
3d:f6:31:b6:9e:32:84:8f:1d:ad:37:ea:bf:2b:6b:
cb:77:1a:e9:8c:00:16:2f:a5:bc:fb:64:cb:aa:1a:
55:59:03:4a:05:47:94:9d:b0:2c:65:a3:ba:23:25:
a2:4d:e1:37:22:f8:d6:63:0b:a0:ab:84:80:63:b1:
21:8e:a0:f2:51:3f:2a:42:a0:98:37:b6:f6:e9:8d:
17:52:c8:a1:6a:da:6d:5d:50:64:d1:2c:cd:d1:85:
1c:a6:7a:f2:f5:d5:37:d3:71:4f:48:75:7e:aa:e2:
07:39:dd:eb:69:41:c9:0e:9c:13:f2:9c:e1:72:3d:
dc:22:ae:a5:a2:9b:bb:a4:ae:c2:08:3d:34:25:39:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:CC:06:8A:85:83:43:E1:B3:B6:A9:6C:12:96:FC:CB:BC:44:57
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:62:07:7a:48:d7:91:49:28:be:aa:c0:8c:b7:9d:0b:63:4e:
2d:df:2f:d2:9e:88:9d:e7:e5:d7:98:af:ad:c2:cf:23:83:41:
a1:ae:41:2a:67:0d:c7:33:f6:13:8e:4a:cc:bd:84:f4:ca:76:
c2:60:5d:5a:46:80:64:95:e4:1a:00:55:68:48:15:08:6e:ec:
5d:4b:e8:8b:a9:fd:e4:1a:22:be:2b:2d:a2:2a:62:16:fe:b9:
d0:0b:df:bb:3e:52:79:2d:d8:44:e9:5e:b3:d7:05:77:8a:8b:
e2:52:ff:ea:a6:12:15:6d:9c:7c:26:68:a3:8f:fb:51:fb:c7:
30:d4:de:bf:81:d4:66:0e:4d:fe:26:db:8c:0f:8d:d7:9a:5c:
3f:55:ad:f6:07:ae:49:15:07:85:0f:2e:09:24:a5:65:4d:c8:
ba:3d:87:57:c0:26:23:e9:fb:a9:a9:a8:2e:25:6f:a0:cf:21:
78:3a:4b:e6:53:41:b6:be:fe:1b:40:d3:2e:da:8f:27:8a:e0:
62:51:04:11:bb:54:12:0e:ab:35:19:d5:bb:d7:7a:47:7e:63:
4d:71:cf:c6:4a:87:db:f1:31:d2:b9:db:d6:0b:a0:e4:74:39:
b2:b5:0f:bc:03:fc:02:88:8b:f2:2d:f5:f8:2d:ae:0e:65:64:
27:04:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:29 2026 by rpki-client