This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: 2rq8AXWmqOfsBdasCnq+bDtuJel89HDZvKttD4f8/Bo=
Subject key identifier: DD:91:32:A3:F0:89:7F:5E:69:9E:D6:E9:34:D4:EB:73:43:12:08:4D
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019C420FC0FC65AB4818CDF1EC3F9FD4EC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0EE0
Signing time: Mon 09 Feb 2026 11:00:54 +0000
Manifest this update: Mon 09 Feb 2026 11:00:54 +0000
Manifest next update: Tue 10 Feb 2026 11:00:54 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: 3s88/OGCuGUWvBpw8gZLN96F9HuBzRYmS/9cuCjCJRE=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:c0:fc:65:ab:48:18:cd:f1:ec:3f:9f:d4:ec:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Feb 9 11:00:54 2026 GMT
Not After : Feb 10 11:00:54 2026 GMT
Subject: CN=dd9132a3f0897f5e699ed6e934d4eb734312084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:cb:6e:99:fa:ec:58:9f:fc:25:49:87:ff:
ed:d5:f8:ef:60:3e:6c:a3:39:62:5d:75:d6:9b:5d:
6f:ba:b3:48:51:75:ff:a7:7c:9f:31:b4:14:da:57:
fb:67:e4:4c:11:b4:a1:61:3d:b2:ed:52:9c:05:f2:
0e:7c:00:19:98:a3:6b:0e:33:05:ec:b5:0e:a2:32:
e1:a6:61:da:98:e8:44:b1:3a:f6:8e:e6:6b:61:67:
c8:93:89:72:c5:98:88:25:61:f6:5d:ca:ef:2b:fa:
74:1a:c5:53:f8:ab:b3:2f:11:58:dc:4c:9d:3b:a4:
c1:2a:7a:3d:ab:8d:6f:ec:66:3e:5b:11:da:2c:c0:
30:b4:16:e4:33:72:cf:02:5f:83:6f:de:38:9a:f4:
7a:f0:95:e8:4d:b7:1a:a4:c1:36:f7:76:76:4c:02:
09:b8:c1:b1:5a:f3:0c:ca:8e:56:01:3a:b7:64:54:
5b:cd:48:8e:ad:ef:fc:0c:b5:a6:7f:30:de:ab:ca:
c2:d2:dd:62:42:3e:64:8c:ce:a4:42:bf:7e:65:c4:
cc:56:6f:64:5b:ac:0c:eb:be:65:9c:c8:7a:08:59:
8c:86:8d:6e:d5:2a:e0:ef:14:56:31:f4:d1:75:01:
e1:3e:e5:b7:b0:81:5c:14:45:82:e7:b9:7d:ae:cc:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:32:A3:F0:89:7F:5E:69:9E:D6:E9:34:D4:EB:73:43:12:08:4D
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:15:7d:8a:a1:97:ab:1d:fc:cc:c2:98:c2:95:6f:cc:06:
2d:bf:6d:38:78:eb:93:e5:b2:19:1d:cc:08:6d:1d:17:07:32:
02:46:cc:b2:4f:ae:2c:25:10:d4:dc:05:b0:99:be:e2:52:32:
21:f5:56:b8:f7:af:3f:31:1e:c2:9c:88:46:f1:50:5a:95:b8:
2e:ad:f2:e9:58:ec:b0:ef:7c:80:49:c7:1a:8d:00:78:48:34:
47:63:6b:73:5b:c4:2e:92:08:fd:e5:56:6f:af:0a:cb:cc:dc:
39:1f:e0:fc:dd:2f:6c:37:a9:41:f7:f9:5b:3c:fb:e1:d6:46:
b9:1b:9e:9f:23:0a:9d:f9:5b:e5:f1:cf:54:bc:c3:0d:8e:64:
86:66:51:f2:85:09:c1:4c:2e:02:cc:82:76:7b:1a:4d:3d:3e:
11:34:4a:97:49:e8:d6:0d:81:49:a2:07:0f:60:f9:35:ea:0d:
6d:42:38:a2:e1:1b:e4:59:f1:30:a8:45:d5:30:96:f5:07:86:
dc:96:4e:bf:ec:25:b5:a3:03:db:36:d4:70:38:a5:08:46:9f:
46:75:e5:3c:a8:ca:82:bd:26:2b:1a:9a:0b:78:43:5b:86:54:
f5:66:ff:0a:d4:e7:d5:3c:fe:ac:8b:33:26:13:1c:2a:c3:96:
9b:d5:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:37 2026 by rpki-client