This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: mBBJvDL+AP9ETX8W3AlfYZdL7I/Sw8g4Q8PRo2NIPtc=
Subject key identifier: B0:E6:42:47:5C:0B:47:76:FF:5E:EE:B6:B9:A5:C9:3F:D8:0A:2F:30
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019C42B476EE3F363C65CCF26465DCFE42F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0539
Signing time: Mon 09 Feb 2026 14:00:48 +0000
Manifest this update: Mon 09 Feb 2026 14:00:48 +0000
Manifest next update: Tue 10 Feb 2026 14:00:48 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: msnt9B6Lff5H0Z5pUL0UAP5290zWDsJS0fP50vB/BVA=)
2: JqYIovUOhpMaXbCswunFuuxrXZA.roa (hash: pzyg9bet0YZqCdKyQjx/ZoPH6pBnBtJrgE7rSpscrOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:76:ee:3f:36:3c:65:cc:f2:64:65:dc:fe:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Feb 9 14:00:48 2026 GMT
Not After : Feb 10 14:00:48 2026 GMT
Subject: CN=b0e642475c0b4776ff5eeeb6b9a5c93fd80a2f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:fa:38:d5:de:c0:49:a8:e8:4e:10:3e:69:
4b:84:b7:04:b4:43:6d:3d:69:90:59:72:6c:50:ee:
ba:a4:39:80:65:46:09:00:e0:aa:74:ad:43:f3:51:
14:19:47:a9:79:27:84:2c:35:a2:7d:16:fb:9a:cd:
09:be:54:f3:4b:e5:b6:e6:d9:1e:93:6f:07:7b:6d:
4b:8e:cf:a1:b3:97:40:b1:a1:49:19:ce:d3:5a:38:
c2:72:ff:06:63:dc:b7:d8:66:ac:bf:80:cb:8e:00:
3e:e3:13:5c:eb:6d:68:4f:be:2c:64:ea:2f:9a:17:
95:b1:ca:0a:27:da:16:ac:8b:13:bf:b3:f1:e5:7b:
05:aa:84:42:aa:d3:38:8e:dc:99:d8:82:9c:43:83:
19:2e:5b:36:c0:13:1d:98:b1:22:94:0c:f0:13:e5:
17:ec:f0:e1:15:cc:26:9e:1d:a6:bf:c2:1a:ad:98:
4b:13:67:27:fc:99:50:5e:63:fd:41:98:74:90:b5:
bf:bf:42:de:99:04:0a:47:4b:16:78:18:bf:8b:26:
13:44:62:77:cb:7f:f8:3a:a6:08:28:a7:9e:40:9c:
25:e1:55:42:23:51:5d:17:07:37:a0:72:3a:2b:73:
06:02:e2:1e:b7:fe:0b:ac:ca:25:12:70:ac:22:cd:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E6:42:47:5C:0B:47:76:FF:5E:EE:B6:B9:A5:C9:3F:D8:0A:2F:30
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:57:39:c5:4a:83:bb:b0:4e:35:8a:81:e0:8e:85:99:d9:87:
39:6b:2c:bb:f0:06:b7:0d:4f:90:9c:e6:bc:b9:3a:08:a9:14:
d8:c9:11:4b:aa:65:0e:65:5e:4a:90:1c:50:76:9d:d2:37:45:
7f:cc:4d:f0:6f:ab:86:1d:c3:91:0a:db:0d:a5:28:a2:01:d8:
25:4c:4a:6b:03:a4:5f:f5:95:4a:1b:ac:a4:c6:6e:00:4a:8d:
9e:f3:ec:a1:62:6e:5c:78:04:00:5d:8e:4c:56:ac:28:14:03:
52:6c:fe:4b:72:4a:86:ff:27:16:c2:6d:82:bf:d9:da:d5:4c:
f9:06:37:39:9e:79:62:f4:71:48:70:82:cf:1b:d9:75:4a:19:
30:85:ed:f5:40:4a:10:41:34:d0:d8:75:cc:2b:4d:3d:1b:d0:
c8:2d:11:1a:aa:0c:32:19:59:9b:55:42:1f:0d:b3:07:96:69:
5e:27:f2:a7:ea:fb:e0:6a:b9:6f:53:13:99:a5:68:9b:16:a6:
cb:c1:2e:6c:37:65:b1:ac:7f:99:04:4e:37:1c:91:ef:0e:fe:
57:2c:1d:ef:2c:29:b6:bc:f3:35:71:61:5b:2d:64:08:7a:88:
a7:dd:b4:9f:47:25:11:f7:32:ce:4b:d7:c6:57:47:da:e5:26:
f4:d1:bf:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtHbuPzY8ZczyZGXc/kLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzFiOWVmNDFhNTM4Mjg1OGNkOWVlZjk4YTdmYjlkMTI2
YWE0YWUwHhcNMjYwMjA5MTQwMDQ4WhcNMjYwMjEwMTQwMDQ4WjAzMTEwLwYDVQQD
EyhiMGU2NDI0NzVjMGI0Nzc2ZmY1ZWVlYjZiOWE1YzkzZmQ4MGEyZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4T6ONXewEmo6E4QPmlLhLcEtENt
PWmQWXJsUO66pDmAZUYJAOCqdK1D81EUGUepeSeELDWifRb7ms0JvlTzS+W25tke
k28He21Ljs+hs5dAsaFJGc7TWjjCcv8GY9y32Gasv4DLjgA+4xNc621oT74sZOov
mheVscoKJ9oWrIsTv7Px5XsFqoRCqtM4jtyZ2IKcQ4MZLls2wBMdmLEilAzwE+UX
7PDhFcwmnh2mv8IarZhLE2cn/JlQXmP9QZh0kLW/v0LemQQKR0sWeBi/iyYTRGJ3
y3/4OqYIKKeeQJwl4VVCI1FdFwc3oHI6K3MGAuIet/4LrMolEnCsIs3P4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDmQkdcC0d2/17utrmlyT/YCi8wMB8GA1UdIwQY
MBaAFOBxue9BpTgoWM2e75in+50SaqSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWIt
YmIzODBiY2FiZDI4LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWItYmIzODBiY2FiZDI4
LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Fc5xUqD
u7BONYqB4I6FmdmHOWssu/AGtw1PkJzmvLk6CKkU2MkRS6plDmVeSpAcUHad0jdF
f8xN8G+rhh3DkQrbDaUoogHYJUxKawOkX/WVShuspMZuAEqNnvPsoWJuXHgEAF2O
TFasKBQDUmz+S3JKhv8nFsJtgr/Z2tVM+QY3OZ55YvRxSHCCzxvZdUoZMIXt9UBK
EEE00Nh1zCtNPRvQyC0RGqoMMhlZm1VCHw2zB5ZpXifyp+r74Gq5b1MTmaVomxam
y8EubDdlsax/mQRONxyR7w7+Vywd7ywptrzzNXFhWy1kCHqIp920n0clEfcyzkvX
xldH2uUm9NG/9A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:37 2026 by rpki-client