This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: wJYruc5vn/VWTh9CB40YVnIU59PnxxsbC0XYxJXkapE=
Subject key identifier: B9:6F:99:00:15:D5:D7:E3:10:E6:6F:46:01:FD:65:CA:E5:4B:41:30
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019C43C70A2BE09809E43476D14C8C7DF9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0F23
Signing time: Mon 09 Feb 2026 19:00:43 +0000
Manifest this update: Mon 09 Feb 2026 19:00:43 +0000
Manifest next update: Tue 10 Feb 2026 19:00:43 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: /KZ3iFggZ1eJRH8i5cGvtEub3jgFV1vNvZvJqbJlXjg=)
2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:0a:2b:e0:98:09:e4:34:76:d1:4c:8c:7d:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Feb 9 19:00:43 2026 GMT
Not After : Feb 10 19:00:43 2026 GMT
Subject: CN=b96f990015d5d7e310e66f4601fd65cae54b4130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:f7:3d:0f:a7:6a:bf:ff:ae:53:3f:09:1b:
63:28:25:d2:69:f7:f9:51:ff:fd:7d:eb:21:82:c1:
15:a6:cf:71:87:6e:87:de:d5:57:b4:c0:e1:3e:79:
51:ff:72:f3:64:e8:a0:cf:34:32:48:ce:34:b6:b3:
d1:4d:68:bd:8d:37:c1:35:14:75:c5:ed:f4:ee:f8:
4c:cc:88:81:fa:a0:25:f5:1f:70:59:67:a7:8f:c7:
f6:5e:41:46:d1:21:28:f1:36:34:f1:43:b9:09:9b:
ee:43:e9:ea:4e:50:1b:ab:f6:28:5e:f8:10:ee:c3:
c4:fe:df:b4:c3:5e:b0:10:24:c3:53:25:76:91:1e:
0b:28:73:9f:1f:44:26:52:26:0e:9c:4c:11:a4:c5:
0b:c8:da:9e:6d:4c:ce:a0:ff:74:79:25:99:4e:44:
bc:73:72:91:6f:6b:b5:e9:41:34:7f:dc:81:6a:fc:
93:4f:ef:f4:73:63:2c:4a:f6:c7:70:2f:09:c6:6a:
70:20:88:47:86:ba:9a:ff:9d:6b:54:31:4f:26:e0:
55:99:e0:62:3d:31:95:cd:c3:17:88:7d:0e:e9:c1:
11:30:13:86:53:82:24:1c:c2:dd:01:b7:e4:59:38:
d2:c2:1c:35:19:a2:04:df:9a:ca:f3:c6:8a:7d:1d:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:99:00:15:D5:D7:E3:10:E6:6F:46:01:FD:65:CA:E5:4B:41:30
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:08:08:35:85:3b:98:86:41:aa:88:20:8d:8e:21:30:37:db:
79:9f:a3:4f:a2:54:9b:05:70:7f:5e:ae:4e:de:df:e5:02:6d:
79:e2:42:3b:2a:a0:da:40:0e:7a:b9:96:9c:c6:b6:c3:cd:c5:
3d:9c:9d:03:cb:46:26:0f:62:b5:01:99:91:3e:91:6c:ce:7d:
b1:d0:ac:e1:22:b3:b5:41:af:0e:83:dc:4c:7b:1f:90:20:fd:
bb:d5:2e:60:e0:7c:26:55:96:71:98:14:84:13:17:1c:df:c3:
50:4b:7b:e8:8b:69:6e:1a:2a:ed:ab:5c:e4:3a:c0:3b:b7:d8:
4f:11:1b:70:d1:bf:e3:e7:6d:05:93:b5:cf:52:6a:f4:ad:b5:
da:b1:69:38:7f:81:4b:9c:22:d8:91:00:ca:af:a5:62:b6:a6:
c6:87:da:b3:ec:2a:0a:13:04:68:48:09:78:1e:a4:b1:e6:70:
d0:4b:df:ad:ab:53:9f:54:b8:d2:96:a0:ac:42:f4:05:81:04:
ee:a3:3e:c2:fd:be:0d:99:c4:26:e9:e8:f1:c9:18:74:a3:05:
b7:9b:c5:01:36:f9:c8:97:eb:1f:59:69:76:60:85:ab:55:5c:
95:30:0a:15:ba:f1:74:05:e8:02:b0:b3:9b:d2:81:24:ea:f8:
af:2b:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:22 2026 by rpki-client