This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
File: 04nufcekvqjSach0bP59NhmNIh4.mft (raw, json)
Hash identifier: 2A6f0bwdqBUNdZWP/3lFbLqexQN23rzW2iHpEY345qg=
Subject key identifier: E9:A8:47:BB:BA:9B:C5:FF:C8:B8:62:CB:60:AC:FF:00:7D:E8:5D:04
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 019C1BA6F6592D736FC50295CFEFE261293B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
Manifest number: 27
Signing time: Mon 02 Feb 2026 00:00:52 +0000
Manifest this update: Mon 02 Feb 2026 00:00:52 +0000
Manifest next update: Tue 03 Feb 2026 00:00:52 +0000
Files and hashes: 1: 04nufcekvqjSach0bP59NhmNIh4.crl (hash: iJcTkz+hHmZ8cQjalhJkKraC/KyelXgXf5RtZfxi8w4=)
2: DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa (hash: 1IKdEVdxinUDX4GEoCU9iDa0wsb9FYEO+VbnWoVZHRQ=)
3: uldmgPFlTuQeBt-ipePLSPYN-eI.asa (hash: kElPpLT8qkmreugOZZKYSI8vXfLFDf0CKmt+bqNFxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:a6:f6:59:2d:73:6f:c5:02:95:cf:ef:e2:61:29:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: Feb 2 00:00:52 2026 GMT
Not After : Feb 3 00:00:52 2026 GMT
Subject: CN=e9a847bbba9bc5ffc8b862cb60acff007de85d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:db:c6:16:db:57:2b:11:c7:8c:c4:48:78:
65:47:25:b8:e7:4e:a3:96:e1:c6:50:13:66:3f:a9:
14:f2:6a:a2:e7:14:94:a7:90:4c:33:98:be:d7:5a:
3d:94:b9:7f:52:eb:b1:30:ee:00:f2:6e:fa:2a:e9:
b5:6d:ce:1a:45:09:9a:e3:cf:9b:69:16:6e:4c:c0:
86:8c:98:5e:e6:fc:60:52:85:b1:8b:ec:cb:a5:bf:
23:74:f9:ce:31:3b:5d:65:e2:88:76:70:fd:70:bc:
12:56:33:64:cd:07:5d:10:fb:42:37:4f:25:bc:de:
24:5a:77:13:93:8a:b1:79:7a:00:2a:ba:c0:06:74:
30:70:09:3f:67:87:cb:12:75:b4:fe:79:36:58:36:
d6:49:d1:52:75:8e:6d:d1:d8:f3:d2:a1:a2:5b:ca:
bd:68:07:f8:52:74:5a:15:87:0c:50:0c:81:20:69:
94:99:21:ba:2e:06:0e:75:4e:03:71:69:56:a9:b6:
77:5e:bf:25:f5:07:6d:56:db:11:72:a2:4b:c0:80:
f7:5c:ac:4d:23:bf:db:d4:17:2e:46:a4:af:00:7e:
57:f0:e7:ba:c8:46:3f:c4:e4:12:b7:3d:78:2c:61:
dc:28:32:71:ad:57:fb:ad:d2:16:2c:ae:5e:63:10:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:47:BB:BA:9B:C5:FF:C8:B8:62:CB:60:AC:FF:00:7D:E8:5D:04
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:cf:90:7d:08:5a:c8:76:f7:f6:c0:ab:bd:7e:8f:74:43:
b7:e0:9d:85:f0:72:37:ac:a6:73:6a:3e:72:dd:ba:e8:34:be:
bf:bb:bf:6f:c2:6b:34:c1:f3:fa:51:94:00:bf:f1:97:98:3f:
53:4d:a8:32:40:56:8b:a5:a4:01:60:55:ce:78:19:e9:49:70:
9a:9f:e7:8f:9e:ec:dd:14:18:51:36:33:c8:58:56:2e:36:53:
3a:01:00:00:be:bd:7f:98:67:45:5a:3b:d6:34:e4:51:94:05:
c4:18:1a:3d:a7:9e:51:02:a7:88:a3:f3:00:2a:31:63:9b:c0:
60:cd:9f:a7:4b:df:fb:ca:d1:4c:90:bf:03:ef:c4:72:fa:14:
86:4c:56:d1:0c:b6:7c:bc:75:f5:46:71:ba:aa:89:d4:7c:99:
00:e4:db:82:f2:21:d7:6b:9a:6f:71:18:c7:5f:cb:c8:83:7a:
f7:6d:fd:d8:32:db:8f:dc:73:c5:25:16:7d:a4:e7:25:b0:b7:
b0:19:de:0b:10:98:b1:13:dc:79:86:ab:d7:a9:83:fd:e3:30:
42:3f:8e:8d:4a:46:30:27:2c:36:f1:71:26:06:e4:78:d0:01:
fb:da:cb:78:a7:b4:ab:fd:cf:e5:15:0a:72:87:d7:2e:a5:4b:
b1:d5:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:41 2026 by rpki-client