This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: 9OPNoQCRgohTHuVfvZVRdarFpeD1X7DS873LMRAGGow=
Subject key identifier: B7:FB:4F:C7:74:C5:2C:BC:8A:3A:EE:88:29:43:E2:1E:42:03:6E:03
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019C4322AF7D68CF7F1381991CD5F062B4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 03E1
Signing time: Mon 09 Feb 2026 16:01:12 +0000
Manifest this update: Mon 09 Feb 2026 16:01:12 +0000
Manifest next update: Tue 10 Feb 2026 16:01:12 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (hash: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: Whb1DBYcF99EdKtbtEQm4hfuCUvZa1EOIRA7QOpeM9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:af:7d:68:cf:7f:13:81:99:1c:d5:f0:62:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Feb 9 16:01:12 2026 GMT
Not After : Feb 10 16:01:12 2026 GMT
Subject: CN=b7fb4fc774c52cbc8a3aee882943e21e42036e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:6e:a1:17:c2:02:ce:2b:29:a6:d8:91:3c:
f2:61:8a:42:98:c9:92:95:18:19:72:a4:29:99:27:
0f:30:b1:25:46:a7:56:9b:f6:d7:29:f9:23:a9:87:
a0:80:b7:6b:14:cf:58:9f:9f:d8:28:04:4f:6b:5a:
19:c8:c5:57:0d:3e:22:62:e1:d1:a3:9a:59:35:6f:
11:e6:20:e3:bd:57:81:6a:cb:ec:e3:e0:6c:93:3d:
65:ad:93:0a:0b:51:30:3f:9c:5c:ff:81:f3:ae:1b:
f9:a1:39:a4:40:22:50:1b:f8:26:b2:41:fa:c5:2c:
46:a8:24:8f:b9:95:e4:00:ea:85:a1:d9:ae:55:09:
90:04:52:7c:59:a9:4e:a9:e7:a9:78:da:02:98:49:
6b:0e:d2:c0:ab:a5:e8:10:68:89:41:6f:31:2d:a1:
02:4b:0e:54:d1:06:e2:d2:e9:b1:ae:08:6e:89:a3:
b1:2d:96:c8:27:f3:e2:df:5d:e6:50:49:9d:a9:71:
69:28:26:81:0e:c2:68:0c:a4:b1:13:57:f5:8c:ce:
55:70:ec:33:14:f4:88:0a:5a:7e:d8:1f:5a:80:22:
2d:e7:d4:0a:0c:9e:0e:f4:be:f7:bb:8c:f3:50:5b:
98:c9:51:24:ce:18:45:2b:ae:58:a2:0b:8c:d8:63:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:4F:C7:74:C5:2C:BC:8A:3A:EE:88:29:43:E2:1E:42:03:6E:03
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:74:51:8e:6d:c9:44:fe:76:26:46:6f:48:31:b4:b9:80:c0:
a4:b1:19:73:ba:ed:57:1c:e2:d0:57:eb:57:d0:91:a5:5b:04:
0a:2e:23:31:ce:53:cd:80:44:40:f7:5a:36:4b:1c:4c:39:b9:
71:44:cd:e6:49:d2:70:2a:53:27:cf:37:af:45:7f:8e:c2:c3:
34:28:c7:08:56:bf:e5:f4:2a:ae:11:6f:4d:f0:c0:19:ab:2c:
59:49:31:54:13:ec:e1:de:e8:45:a4:0c:28:0d:b6:99:26:8d:
a2:3c:bc:a7:f0:7d:61:3e:cf:2c:56:92:49:ca:26:fe:d2:27:
19:e1:3a:ac:38:cd:6a:a4:2a:38:e2:b1:69:5c:50:06:a6:25:
19:70:9d:5c:68:d8:93:38:65:da:3b:67:67:04:dd:ff:84:3e:
33:89:b5:63:77:31:91:b0:f0:ba:00:96:e5:ff:5a:13:0b:40:
0c:4d:31:97:ad:c9:94:c6:12:b1:2a:c5:09:f4:7d:a0:de:cc:
9b:47:5d:f7:ff:d0:36:79:d5:5c:1b:69:bc:63:76:54:2c:5e:
c6:e3:7e:9e:de:5a:0a:55:ae:03:b3:3b:ce:31:1e:e6:84:f1:
13:04:7b:75:7e:19:24:45:07:b9:47:52:7a:8b:d4:50:02:5e:
fe:38:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:54 2026 by rpki-client