This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: 5JUaQWkEBB7inaKjN76tBUmKms3fqPYm0+ZMTqEI8Wc=
Subject key identifier: 5E:54:42:02:22:85:79:DE:D4:D4:4E:DB:33:C9:F0:28:4C:02:F1:F3
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 019C43C71D12097024A103CFC06E0A3B5916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 170B
Signing time: Mon 09 Feb 2026 19:00:48 +0000
Manifest this update: Mon 09 Feb 2026 19:00:48 +0000
Manifest next update: Tue 10 Feb 2026 19:00:48 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: rTtoYP2nDLL8zXUEcnZYLRwa/0pOiVCqM6OpsAuUxDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:1d:12:09:70:24:a1:03:cf:c0:6e:0a:3b:59:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Feb 9 19:00:48 2026 GMT
Not After : Feb 10 19:00:48 2026 GMT
Subject: CN=5e544202228579ded4d44edb33c9f0284c02f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:03:7e:4c:76:50:b0:fc:20:ca:c0:06:92:
a8:83:c5:45:00:c5:7b:a5:b3:f1:b7:bf:41:28:1e:
b8:cf:db:70:91:d9:e9:03:2e:e8:8e:60:ed:6f:ec:
bf:3f:fb:7f:e2:cd:af:20:97:da:fe:8d:58:aa:ab:
45:e1:10:a6:65:94:e2:8a:32:b6:f6:f6:36:64:8f:
6e:39:d5:9d:75:06:51:fb:dd:dc:9a:eb:32:8e:87:
15:02:ef:4b:71:8b:c0:13:61:56:4e:a0:92:69:87:
bd:ad:43:c1:1d:16:8a:d8:f3:7f:b7:f5:d9:7d:82:
3a:5d:21:88:e8:f8:b4:0d:97:97:20:12:9c:3f:48:
ef:63:68:b0:c9:ef:49:b9:b5:9d:c0:9b:14:ca:c2:
7f:f2:b0:88:d2:95:6f:0f:05:ea:b4:51:41:87:75:
07:21:2e:dd:00:6d:3b:f7:59:6b:68:8e:e1:c7:b2:
96:17:c6:a7:1d:27:75:b6:f9:8c:6c:01:e8:55:9c:
71:0a:97:9e:f9:f6:da:56:36:4b:bb:7e:53:c0:d3:
33:58:84:de:fb:f9:5c:eb:17:4b:56:df:7b:19:35:
f8:72:e6:61:5c:81:a8:2c:e3:44:8d:a4:4f:ae:4c:
cc:c7:30:39:4f:8f:45:50:4b:6c:6b:a9:76:ad:e3:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:54:42:02:22:85:79:DE:D4:D4:4E:DB:33:C9:F0:28:4C:02:F1:F3
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7b:bd:db:70:0d:92:5b:87:3e:44:d7:6e:20:66:56:7b:b6:
8a:de:0d:d8:3d:a7:90:40:f1:e0:63:3f:db:d4:48:d3:c3:ef:
ae:f8:1c:37:bf:16:dd:4f:f5:31:5d:bc:22:24:06:e5:9d:2e:
30:42:40:fe:ea:b7:d3:e9:d1:ff:33:79:25:b9:67:d3:b3:65:
0b:8e:97:7b:dc:4e:91:cd:56:1f:04:ae:e1:b7:e7:fd:f2:1d:
37:cf:10:f6:bf:7b:4b:f4:49:36:8a:ff:10:da:52:dd:78:d9:
62:d6:a0:b0:5c:9e:bc:22:ea:96:a7:f4:8f:99:55:bc:3a:d9:
2e:97:5a:06:d0:cf:7a:6a:cc:38:a1:31:54:46:e4:12:fc:ba:
5c:d0:24:4e:60:31:e1:90:cc:d0:eb:99:53:d9:80:88:75:8e:
7a:6e:12:75:ef:f5:e8:ae:36:07:99:d4:d7:6b:25:17:26:fe:
74:25:46:06:94:7f:07:5c:bc:87:a5:99:da:75:de:13:e4:0a:
18:2c:c2:93:60:50:d9:0c:ae:24:fd:df:78:c7:5e:e0:56:25:
ce:4a:4c:08:02:31:26:53:6d:2c:bd:46:03:99:da:0e:40:71:
e1:1b:bc:47:3a:8a:de:8d:f3:3b:b3:13:ad:a5:71:12:bc:c7:
53:6a:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:28 2026 by rpki-client