This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier: tGAk/dap6qMXmZOQKB1Phl0IV0g10WoOYbfDOPgYbPo=
Subject key identifier: 43:F8:F5:C1:F6:86:6D:31:AD:E7:33:E5:54:B1:6F:9B:AD:A9:AE:3C
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial: 019C416A8F52F50A67F7F1B63B045CA7A862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number: 03AC
Signing time: Mon 09 Feb 2026 08:00:28 +0000
Manifest this update: Mon 09 Feb 2026 08:00:28 +0000
Manifest next update: Tue 10 Feb 2026 08:00:28 +0000
Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: 1i3QPT5arbAgywjgK7cSuj5quhCkqH7eBpWayEESK6w=)
2: FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa (hash: GRwxJaIJLS4eVDlQIIx4t+X6+buzHRZw5GpMOZnwve4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:8f:52:f5:0a:67:f7:f1:b6:3b:04:5c:a7:a8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Validity
Not Before: Feb 9 08:00:28 2026 GMT
Not After : Feb 10 08:00:28 2026 GMT
Subject: CN=43f8f5c1f6866d31ade733e554b16f9bada9ae3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:61:a6:b9:fb:bc:c9:09:39:16:2d:3a:93:
b2:6e:91:5f:78:d6:49:c9:b0:32:33:5c:da:87:20:
ff:bb:f2:d5:9d:87:36:37:9b:f4:86:47:5d:d3:7e:
de:fb:29:e7:4f:88:5a:2e:70:9b:ff:f1:e3:57:c8:
19:06:63:ba:0c:74:08:68:d2:c9:da:e7:ab:86:94:
ef:d7:70:6f:3a:1d:19:0d:05:5c:5e:fa:28:2f:7f:
9d:b7:5c:6e:de:07:c8:b7:f2:a4:69:55:b9:83:c8:
8b:39:8d:29:8b:a2:f0:19:76:d9:a4:61:e1:1e:b0:
81:a1:89:e8:af:5f:68:0d:a5:0f:c7:44:12:87:3d:
ad:a0:ce:9e:0c:a1:3b:81:59:f3:e7:6f:8b:c3:49:
ed:c7:df:50:97:ad:a7:c8:0e:10:ec:76:cc:70:38:
f4:8a:8c:95:28:06:69:21:ed:f3:84:af:91:eb:40:
89:4b:aa:85:d1:cd:23:73:5d:76:9b:a0:88:df:d2:
37:17:8d:36:c7:f1:82:2c:04:ac:12:4b:9d:4a:c3:
5d:74:de:dd:9f:dd:70:9c:f0:f5:4a:db:d2:54:93:
ea:14:32:88:cf:99:3f:6e:3c:ca:1c:77:9e:73:5d:
dc:fa:97:23:ba:e7:ab:e7:a3:af:6f:b9:66:28:a2:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F8:F5:C1:F6:86:6D:31:AD:E7:33:E5:54:B1:6F:9B:AD:A9:AE:3C
X509v3 Authority Key Identifier:
keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:31:e1:98:8c:c9:1e:71:82:ed:1a:2b:4a:60:72:0e:a9:ab:
5a:34:ec:4f:78:f8:4e:4b:1d:a4:57:c5:d3:d3:37:81:b2:cb:
fa:b7:92:82:99:b0:c3:98:d2:93:84:c5:73:9d:72:12:98:c1:
7d:5b:e1:5b:7d:41:00:e1:cf:e1:81:79:37:2e:16:c9:9b:2e:
3f:db:e6:89:5a:33:e0:a9:29:67:f9:bc:24:e0:12:11:30:74:
35:e9:a0:07:3c:d4:7c:a4:7e:47:8a:6d:01:ee:8d:16:eb:d3:
41:97:04:7f:3c:67:f0:b6:a4:ae:ce:e2:66:2f:47:2c:73:ec:
ae:03:7d:5d:02:19:de:f4:fe:0a:00:aa:1f:0d:ef:36:72:e1:
42:40:d3:61:0e:72:08:6c:0c:90:61:6b:6f:a4:c8:37:b9:3b:
1b:92:ca:21:08:d4:5d:c4:75:0b:47:03:91:6c:8e:b8:12:8c:
40:5c:95:59:7d:66:cd:11:ba:e7:93:53:59:6c:c2:f9:05:b0:
41:8e:e9:6a:e2:d9:7e:4b:87:36:e0:8e:49:42:13:3a:ac:2b:
cd:74:a9:11:b8:7f:14:3e:19:f9:0f:92:a9:92:ca:37:c8:02:
cf:e3:34:2f:83:74:cf:e9:75:2a:a2:1c:71:52:a0:54:bc:4e:
49:f4:16:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBao9S9Qpn9/G2OwRcp6hiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5
MGU3MmYwHhcNMjYwMjA5MDgwMDI4WhcNMjYwMjEwMDgwMDI4WjAzMTEwLwYDVQQD
Eyg0M2Y4ZjVjMWY2ODY2ZDMxYWRlNzMzZTU1NGIxNmY5YmFkYTlhZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQJhprn7vMkJORYtOpOybpFfeNZJ
ybAyM1zahyD/u/LVnYc2N5v0hkdd037e+ynnT4haLnCb//HjV8gZBmO6DHQIaNLJ
2uerhpTv13BvOh0ZDQVcXvooL3+dt1xu3gfIt/KkaVW5g8iLOY0pi6LwGXbZpGHh
HrCBoYnor19oDaUPx0QShz2toM6eDKE7gVnz52+Lw0ntx99Ql62nyA4Q7HbMcDj0
ioyVKAZpIe3zhK+R60CJS6qF0c0jc112m6CI39I3F402x/GCLASsEkudSsNddN7d
n91wnPD1StvSVJPqFDKIz5k/bjzKHHeec13c+pcjuuer56Ovb7lmKKLVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP49cH2hm0xrecz5VSxb5utqa48MB8GA1UdIwQY
MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt
YjgwZWZiZDY4YmZkLzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk
LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTHhmIzJ
HnGC7RorSmByDqmrWjTsT3j4TksdpFfF09M3gbLL+reSgpmww5jSk4TFc51yEpjB
fVvhW31BAOHP4YF5Ny4WyZsuP9vmiVoz4KkpZ/m8JOASETB0NemgBzzUfKR+R4pt
Ae6NFuvTQZcEfzxn8Lakrs7iZi9HLHPsrgN9XQIZ3vT+CgCqHw3vNnLhQkDTYQ5y
CGwMkGFrb6TIN7k7G5LKIQjUXcR1C0cDkWyOuBKMQFyVWX1mzRG655NTWWzC+QWw
QY7pauLZfkuHNuCOSUITOqwrzXSpEbh/FD4Z+Q+SqZLKN8gCz+M0L4N0z+l1KqIc
cVKgVLxOSfQWgQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:34 2026 by rpki-client