This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: VVJcpm8UvXa4wZ3V1nB9BLl+qkthZYh6FBxxmWblBYs=
Subject key identifier: B6:37:47:B6:4A:CB:A2:7A:43:26:A4:87:15:2E:AF:68:A9:26:86:50
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019C43594C3CE7F46BA738774687237C1802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 162C
Signing time: Mon 09 Feb 2026 17:00:51 +0000
Manifest this update: Mon 09 Feb 2026 17:00:51 +0000
Manifest next update: Tue 10 Feb 2026 17:00:51 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: YbinkbybmmNA1v5nxCxYrJ93xOKXhJ82bo9lm5JTmJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:4c:3c:e7:f4:6b:a7:38:77:46:87:23:7c:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Feb 9 17:00:51 2026 GMT
Not After : Feb 10 17:00:51 2026 GMT
Subject: CN=b63747b64acba27a4326a487152eaf68a9268650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:ea:ac:fc:67:93:0f:f4:fa:62:59:51:97:
79:7c:ef:01:eb:d9:e8:13:67:20:a5:40:60:d0:04:
3c:23:8d:fd:81:00:ac:3d:58:b1:60:07:45:af:b2:
09:8b:16:96:23:22:75:93:03:95:2e:9e:6f:bb:fb:
37:39:54:2e:37:a1:72:70:bb:5f:30:7e:d7:c3:14:
d2:76:0b:12:71:c3:8a:f8:59:31:9e:c9:07:47:c6:
df:d8:1e:db:a9:8d:f6:d3:32:22:e8:dc:14:1a:ea:
3d:0d:30:49:e2:7d:22:7b:74:38:63:4a:c5:35:d6:
38:a9:3a:b8:20:98:f6:4c:32:14:49:ad:2b:94:61:
77:67:56:8e:8b:b6:32:8d:25:5e:ea:80:fe:4d:86:
e0:8a:2e:5d:11:6d:0e:11:87:92:ae:b5:b8:e9:77:
38:45:33:2e:4a:02:38:a3:f2:b6:22:2f:c8:07:dc:
28:1d:69:21:16:9e:e7:34:8e:ff:96:b0:81:e1:2d:
46:0b:74:aa:3f:19:4f:af:02:b6:65:5d:cf:9a:9b:
73:08:99:17:98:36:1e:03:73:30:99:9b:90:09:bd:
04:9f:61:17:bd:0c:7a:e5:7a:71:69:45:b7:31:44:
73:3d:8e:71:23:40:c4:08:1c:53:bf:0f:00:b8:c9:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:47:B6:4A:CB:A2:7A:43:26:A4:87:15:2E:AF:68:A9:26:86:50
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a7:64:91:d5:42:29:0f:15:a2:28:8e:35:9a:ac:cf:ca:b6:
48:fb:8b:52:0d:aa:1d:a3:41:60:6f:c0:a9:25:82:42:8d:17:
0b:48:95:42:8a:4b:04:4c:3d:f0:ff:b5:4f:b3:32:a3:0f:49:
4e:b7:c1:59:5c:ee:38:d2:d5:48:37:95:48:98:8f:92:88:c5:
c4:9e:76:a2:a9:a9:6c:c2:43:87:72:26:90:18:20:7a:ff:07:
c0:8a:b0:00:15:a4:5e:77:2a:58:ee:58:eb:bf:cd:26:07:01:
a7:a9:34:5b:a8:ba:e8:6d:b6:1c:bd:43:88:b7:ed:95:7d:9d:
f6:e0:ba:05:42:79:36:37:d2:f3:34:58:80:8a:0a:fa:96:9c:
7f:f3:96:f7:6c:94:fb:6c:d4:d6:03:53:88:9f:af:05:10:ff:
01:6f:1d:8f:fe:37:81:d4:bc:c9:40:b8:96:69:86:6a:80:cb:
04:83:b2:f7:9d:2b:1a:b2:c2:26:f6:f7:c4:53:f6:4a:1b:1f:
3b:6e:6f:e7:dc:ee:01:ac:d2:8e:70:4a:c2:d7:80:de:c8:a5:
df:8b:31:b9:0b:1e:46:92:73:02:fb:0d:f9:03:5a:df:f5:81:
11:75:9a:0f:e9:17:f2:d1:e0:00:7a:65:82:17:ec:08:08:28:
63:48:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:29 2026 by rpki-client