This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: jAIDQvp5tlCjRdB39JbY+V/T1klWztmGltnrhTRKxLo=
Subject key identifier: 5A:9A:D1:5B:00:37:33:F5:8F:A3:08:9A:55:7C:3D:6D:A2:2A:49:09
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 019C427D458DE0A3518043B99292654DA0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:31 +0000
Manifest this update: Mon 09 Feb 2026 13:00:31 +0000
Manifest next update: Tue 10 Feb 2026 13:00:31 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: 3gK6R1WFTOI0jJ8ImbMdXcuMkPZaCi+ICSt4X5yK2vM=)
2: KBLYjGsoc6I_Jnk5DngPmO4ePQU.roa (hash: XFoKkPbZxI2pK2o+bv+Ogt5LDh4mQTF9jwqVRi7HCtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:45:8d:e0:a3:51:80:43:b9:92:92:65:4d:a0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Feb 9 13:00:31 2026 GMT
Not After : Feb 10 13:00:31 2026 GMT
Subject: CN=5a9ad15b003733f58fa3089a557c3d6da22a4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:23:c9:c5:81:c3:5b:c1:4a:b3:1f:fc:30:
35:c6:41:25:4d:89:7a:15:20:fb:85:b9:e3:1e:66:
d7:66:a5:42:71:4f:4d:46:35:19:ef:72:4e:f1:63:
45:9f:0c:d0:88:93:9b:d2:74:6d:05:b1:c3:5b:41:
ca:2c:70:ba:66:41:fd:4f:e8:aa:8d:8f:f6:d1:34:
11:f3:37:57:24:0a:bb:33:f8:83:5a:bf:15:22:49:
76:09:5f:67:50:db:b1:0e:fc:43:1c:b3:7f:2f:3d:
58:3e:14:3c:c2:f8:fa:83:e7:67:a9:02:4e:2f:09:
32:d2:ae:55:30:74:32:a9:b7:d9:f8:c3:0a:02:b0:
87:e5:e6:c6:96:1d:20:12:88:5c:72:a5:f5:bb:21:
26:76:f8:62:41:ba:04:1c:92:ec:97:58:2c:8a:04:
ea:02:bc:18:43:18:ad:ce:ca:40:a0:48:2e:9b:e5:
c2:3f:ff:6e:c5:9d:c7:7f:11:f7:91:79:39:46:2a:
e9:e0:0f:8c:82:09:54:d6:a6:df:94:76:a6:03:72:
8e:86:eb:cd:92:d7:b8:7a:85:ad:8b:15:34:2c:ed:
e4:9e:13:6e:4a:73:17:f2:72:f0:ef:26:c9:1d:7a:
58:ee:6a:80:76:8f:c4:83:e5:7b:02:a7:cd:d1:33:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:D1:5B:00:37:33:F5:8F:A3:08:9A:55:7C:3D:6D:A2:2A:49:09
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:71:a4:a5:d3:09:5e:69:ea:72:88:3d:d4:1c:ef:7f:11:
46:b4:8e:7e:8b:d7:0f:c2:a1:fe:dd:ec:09:ab:39:a9:9e:30:
f7:ec:e5:4e:e5:0a:6b:75:f5:fe:e2:01:88:19:96:ef:3f:36:
b2:1b:ed:08:47:ba:9b:80:34:af:94:3e:b0:dd:d3:7a:d5:a0:
9c:7b:6c:d8:5c:b3:2a:91:2c:68:b6:33:2e:3b:fb:60:53:08:
a9:64:3a:d4:ca:ca:58:2f:76:7c:eb:fa:cd:53:2c:18:8d:a7:
0a:0a:e1:78:8d:70:e9:cc:85:7f:aa:09:a5:72:42:02:b8:e8:
16:46:c0:63:e7:58:14:22:81:2d:45:21:bf:52:a6:f7:95:8a:
1f:b7:2d:e4:a0:bf:54:94:5d:b8:02:38:0d:a1:ec:4e:60:9b:
7d:8d:46:f9:4e:e3:ba:50:eb:6a:bd:00:f5:73:68:ce:5f:b4:
40:06:38:30:2d:0c:f3:60:6d:6e:c6:e9:88:ce:53:a5:9d:f4:
80:19:06:1b:79:ef:9d:2b:82:9b:10:12:65:61:d1:e5:d9:51:
91:0a:f3:05:4b:bd:f1:f0:21:3c:c2:8b:14:63:c2:d8:86:13:
c8:9c:a5:08:ac:6a:fc:17:a1:bd:69:30:62:76:a1:6c:ca:05:
58:71:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:51 2026 by rpki-client