This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: Zb/pjLeNDaD8jP5MGC4SdxlAalT/Kxe0oUuOfaW1cMo=
Subject key identifier: 5A:9E:14:BD:65:4B:BA:F3:71:E7:02:EF:B9:EC:B6:5F:C9:DA:DC:BC
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019C42EB64414685F0C6270E10AAC18BCBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0D18
Signing time: Mon 09 Feb 2026 15:00:48 +0000
Manifest this update: Mon 09 Feb 2026 15:00:48 +0000
Manifest next update: Tue 10 Feb 2026 15:00:48 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: yUUMZGgTeeLkHg8ggL0LhN3MxD98MH/F+BS7/KHnI1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:64:41:46:85:f0:c6:27:0e:10:aa:c1:8b:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Feb 9 15:00:48 2026 GMT
Not After : Feb 10 15:00:48 2026 GMT
Subject: CN=5a9e14bd654bbaf371e702efb9ecb65fc9dadcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:b7:d6:04:55:97:0f:76:b8:a2:ad:35:3f:
92:ae:70:fa:22:ec:a8:85:15:f8:05:60:e3:a8:c2:
10:79:58:18:d5:cf:5a:ba:0d:4c:5d:d0:41:b2:19:
d1:0a:40:07:2e:d7:ac:09:22:c7:84:2d:2c:de:1c:
a6:ff:74:cb:59:31:e0:18:50:8c:03:de:27:f2:b3:
d7:cf:36:f4:70:53:b9:9b:0e:7b:13:92:de:a9:ad:
72:dc:6e:61:4f:5f:c2:c4:bf:e4:18:4e:80:db:a2:
cc:fe:41:81:e0:2f:c0:9e:b5:66:98:1e:25:ee:d6:
a5:cd:ef:24:e2:d6:b9:59:c7:52:d8:43:db:45:75:
8e:b4:92:14:18:2e:1b:2f:24:25:a8:7c:28:aa:d1:
a3:94:64:6b:7b:33:d4:75:89:7f:e3:fc:eb:eb:69:
08:99:7b:c7:50:a5:89:35:59:93:03:76:62:50:a4:
8a:b2:4f:1f:17:c5:08:92:21:27:50:f8:b9:83:14:
93:5c:e8:8f:54:df:98:84:fe:e0:a9:ac:d1:a1:59:
27:0f:28:2f:72:a2:ff:e5:db:d0:c8:dc:a2:db:cd:
e7:19:3c:4e:4a:37:71:ac:e0:34:fb:36:67:5e:e6:
f6:d5:e9:b8:b5:e6:e3:ea:33:01:1f:ac:89:a4:60:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:14:BD:65:4B:BA:F3:71:E7:02:EF:B9:EC:B6:5F:C9:DA:DC:BC
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c5:69:51:c8:68:1f:4c:44:54:6d:27:8b:08:29:89:bb:7b:
01:7a:9c:a1:26:cd:22:80:03:4d:e6:be:23:38:d1:2b:22:48:
b4:c3:11:11:5c:6b:98:8e:0f:5f:7e:58:d1:60:9e:b6:55:9f:
d1:91:08:67:6f:99:94:11:6c:85:96:2c:5d:63:a8:0b:08:0d:
6c:d7:33:fa:8c:85:10:3c:71:23:92:c2:9a:c1:a0:eb:af:aa:
90:c8:81:e8:f2:3a:cb:5b:75:d3:68:a3:1e:a6:a1:cf:bd:bc:
16:10:bd:af:82:d4:71:70:03:dd:61:d7:cb:9a:9e:93:07:1a:
49:12:80:57:0b:39:37:68:51:9a:9e:7a:f6:65:1b:12:e5:9b:
da:fd:72:ea:ee:31:a3:11:a9:3b:11:4d:d5:b5:f5:59:0b:42:
ba:42:0c:03:49:3b:f0:4a:c1:62:80:d3:c7:6d:77:c7:6c:4c:
95:63:50:5f:13:8b:60:7a:68:43:db:b4:c8:0c:7c:6b:1d:5f:
f0:30:9f:92:b0:3c:fe:89:0b:f2:ba:58:9a:72:ea:2a:fe:6c:
2d:86:a2:5d:98:64:ff:fd:09:cf:92:70:6b:5b:d1:54:19:f5:
48:26:26:1e:25:a0:8b:ed:3e:6d:9c:34:75:3b:d4:a8:65:d8:
95:d7:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:05 2026 by rpki-client