This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier: t2supuxlwa9qMogXYgzNpqgDklyapGoRHQlcB+vRjAI=
Subject key identifier: 3A:74:A3:90:75:4E:5D:C3:9B:CF:6C:1B:59:58:0A:3C:CC:F6:4E:B1
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 019BD5EA6AA13A92E6E9D714B3B25CFA6618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number: 0E6E
Signing time: Mon 19 Jan 2026 11:01:08 +0000
Manifest this update: Mon 19 Jan 2026 11:01:08 +0000
Manifest next update: Tue 20 Jan 2026 11:01:08 +0000
Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: grkDmZuWb9dkKyiRYyQW24WT6Qjk5kzRyOY9ziAzplE=)
2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d5:ea:6a:a1:3a:92:e6:e9:d7:14:b3:b2:5c:fa:66:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Jan 19 11:01:08 2026 GMT
Not After : Jan 20 11:01:08 2026 GMT
Subject: CN=3a74a390754e5dc39bcf6c1b59580a3cccf64eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:4a:a6:19:d6:a2:ac:08:2f:9b:c4:f4:e7:
62:63:57:48:2d:36:ee:bf:89:7e:4a:9c:10:f1:c9:
4a:6f:97:78:b1:d3:05:d3:c0:d8:65:c8:9c:74:d2:
20:5c:13:0b:5e:81:57:3d:5e:3d:9c:ae:48:63:23:
00:e8:ab:05:a2:86:9c:dc:d7:3e:63:91:7b:12:03:
d7:c2:f9:7a:d7:f3:d2:e8:e8:80:a1:81:10:f3:bb:
e5:01:57:2e:0d:55:c1:d2:9a:a2:36:d7:5d:f5:e8:
ab:fc:40:d7:00:18:14:6c:7b:a9:17:fb:48:81:30:
48:81:7f:a4:14:3c:ec:f2:79:b2:a4:ea:f1:85:47:
3a:25:de:80:f3:4f:6d:2d:2b:ae:d7:89:84:5e:71:
3f:0d:d0:c5:f2:12:ef:39:d1:a2:49:21:f9:a7:1f:
58:0e:9a:66:a3:b5:9e:a4:25:d5:3a:96:cd:a1:0b:
63:52:2b:ac:93:dd:79:5a:d9:9f:ab:6f:e2:3e:34:
e5:7c:cb:c2:b2:8d:0d:70:10:46:77:40:bc:56:bb:
68:a0:f8:2e:9a:75:89:54:5c:80:d4:ca:3f:81:50:
24:1f:38:0a:f3:10:87:04:57:f2:99:5d:f7:54:76:
a9:50:c7:c4:8a:2f:b1:9c:f2:af:32:29:b6:51:01:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:A3:90:75:4E:5D:C3:9B:CF:6C:1B:59:58:0A:3C:CC:F6:4E:B1
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:54:4a:c0:c2:af:07:c8:7c:a3:e2:c2:9a:b6:90:4a:45:ec:
ba:78:44:20:de:67:b1:c4:8d:75:1c:fa:ad:df:29:ee:af:77:
38:aa:29:88:d6:4f:ef:d9:81:62:e1:b9:96:f8:a6:1f:53:03:
71:c2:36:6c:44:11:38:b4:42:67:b4:a7:99:e1:18:59:cf:dd:
38:95:6a:40:36:f3:2f:04:89:15:95:87:02:84:52:85:e1:d5:
3f:94:0d:3e:66:5d:32:0c:69:a8:5d:37:fa:05:3d:71:c4:e8:
3c:cf:b4:16:a3:60:10:8a:cb:fb:24:b0:21:2b:3a:e6:20:dc:
ec:46:ce:14:d8:a2:30:b0:45:37:fa:93:db:4d:cb:96:c5:07:
01:7d:d9:c5:d2:10:54:19:6d:24:1f:d7:03:0c:93:98:a1:94:
39:1a:f3:14:52:58:ab:d8:30:93:84:33:e4:c7:ab:7c:0e:16:
5c:5f:6f:48:e1:3b:2b:6c:cc:36:c0:72:db:14:dd:5d:e2:44:
d5:f6:53:c6:47:ac:b3:e9:e1:df:e0:47:a1:06:cb:58:09:09:
1e:1e:32:e5:fa:43:50:14:38:31:16:b7:4b:0b:ec:ee:55:e7:
2d:73:78:58:10:9e:3e:5d:1c:29:8f:24:0b:f7:7e:ea:d2:3e:
1d:19:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:29:36 2026 by rpki-client