This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: BhGHBC5cZUgoH0RrOCCZUnLc0wdpSZrpxv0erIDUKJo=
Subject key identifier: 27:CA:C7:F1:9B:A6:EB:3D:51:79:8F:15:AD:22:5E:6B:96:37:87:4F
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 019C43591F20ACAE172A49F3D9125798D974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 0FA9
Signing time: Mon 09 Feb 2026 17:00:39 +0000
Manifest this update: Mon 09 Feb 2026 17:00:39 +0000
Manifest next update: Tue 10 Feb 2026 17:00:39 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: NxpUPaSW10I8dzsWqV6sG4+D8Nxm18YjF+BTCSFkUnE=)
2: QZoElNh2G2nwMP88BsRDda3tDUQ.roa (hash: Z+CRbrBSzZz6HmMemjR2fLmNJfImRQn2RnMbj7m1gdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:1f:20:ac:ae:17:2a:49:f3:d9:12:57:98:d9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Feb 9 17:00:39 2026 GMT
Not After : Feb 10 17:00:39 2026 GMT
Subject: CN=27cac7f19ba6eb3d51798f15ad225e6b9637874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:58:ac:57:9b:1d:5e:19:3e:a5:dc:a3:95:
2e:1e:f8:0b:cc:1e:65:7b:3c:18:6c:56:7e:82:5e:
15:37:7d:6a:bc:bb:fe:a8:87:d0:72:1e:af:1b:cf:
be:06:ac:e5:1e:cc:3f:e4:a7:81:1a:ce:a9:32:21:
64:15:7b:dd:8c:4f:54:47:ae:c6:c5:04:86:f9:a4:
6b:1e:42:68:44:bb:df:bc:73:33:46:6f:72:4b:bc:
78:e9:95:6c:23:84:66:fc:8d:92:7e:82:21:05:a0:
8d:1b:ee:bd:a0:87:65:21:96:fa:04:3d:59:83:80:
be:1f:f0:5a:48:1f:14:ce:c9:a5:e0:69:1f:d9:97:
ae:2a:7d:8c:ab:4d:ac:02:4d:5d:af:cb:b4:c9:a7:
21:c9:44:db:75:a5:01:13:61:3e:9e:16:f5:ab:58:
cf:c8:b4:e6:93:8b:03:ab:d8:2c:9d:1e:c3:79:49:
bc:61:93:e0:10:9b:7d:94:f5:eb:ed:66:f1:be:34:
3d:3e:3e:b2:61:ae:79:35:d3:d2:b7:87:fc:49:ad:
86:85:4b:bb:d5:9f:75:20:41:35:c1:73:f9:d9:cd:
92:5d:2f:b6:a4:84:60:1f:60:3e:1c:37:b5:b1:bc:
88:7e:22:69:f1:f3:ee:9d:87:bb:b2:89:c1:15:45:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:C7:F1:9B:A6:EB:3D:51:79:8F:15:AD:22:5E:6B:96:37:87:4F
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:c9:9d:ab:b0:ca:dc:70:7d:b3:45:ee:04:b0:1c:24:43:
68:4f:1f:4f:ca:5a:72:3f:27:8e:4b:91:47:5d:e8:85:68:a6:
67:eb:63:42:54:27:76:b1:c0:58:ad:12:b0:c7:d6:e6:2c:e4:
b1:09:73:5f:eb:c7:44:35:b7:77:cd:a1:7b:f1:b0:15:bd:e4:
2f:87:d9:f1:6c:df:d5:0d:62:00:78:e8:f6:96:e8:33:bf:25:
35:82:57:b5:1d:4e:0a:a6:42:ac:11:67:8b:cd:1e:ea:d1:71:
3b:f4:76:9e:40:0d:4d:4a:a0:7f:35:d9:0d:d7:f4:98:00:b4:
0c:76:17:8e:95:ba:91:58:ed:ec:6f:aa:29:23:3c:07:8a:d4:
16:8a:92:d5:07:50:42:7f:58:35:d4:06:72:2a:02:7d:8b:4a:
80:04:0c:b6:f7:a2:94:1f:cb:b7:43:a6:2b:0d:b8:7b:f1:17:
5c:0c:8c:98:0e:2b:9a:5f:33:0d:3f:64:86:9c:24:17:a8:f0:
d3:0c:4b:26:d3:d0:69:f8:eb:5d:c4:09:ad:7b:6b:e9:57:24:
47:8e:24:39:3f:18:95:b3:b7:59:e7:d3:87:7a:e9:cf:50:c0:
b7:1d:a6:f1:a5:9d:32:a1:91:fa:ab:22:10:10:c2:ca:60:0b:
aa:85:ac:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWR8grK4XKknz2RJXmNl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGEzMjI3OGNlN2I0Y2IyMDVkZmNjYWQ3ODYwMTRhM2Iw
YWUzMjMwHhcNMjYwMjA5MTcwMDM5WhcNMjYwMjEwMTcwMDM5WjAzMTEwLwYDVQQD
EygyN2NhYzdmMTliYTZlYjNkNTE3OThmMTVhZDIyNWU2Yjk2Mzc4NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZYrFebHV4ZPqXco5UuHvgLzB5l
ezwYbFZ+gl4VN31qvLv+qIfQch6vG8++BqzlHsw/5KeBGs6pMiFkFXvdjE9UR67G
xQSG+aRrHkJoRLvfvHMzRm9yS7x46ZVsI4Rm/I2SfoIhBaCNG+69oIdlIZb6BD1Z
g4C+H/BaSB8Uzsml4Gkf2ZeuKn2Mq02sAk1dr8u0yachyUTbdaUBE2E+nhb1q1jP
yLTmk4sDq9gsnR7DeUm8YZPgEJt9lPXr7WbxvjQ9Pj6yYa55NdPSt4f8Sa2GhUu7
1Z91IEE1wXP52c2SXS+2pIRgH2A+HDe1sbyIfiJp8fPunYe7sonBFUWUXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfKx/Gbpus9UXmPFa0iXmuWN4dPMB8GA1UdIwQY
MBaAFOJKMieM57TLIF38yteGAUo7CuMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjct
NzdhYjA1ZTBjZjYyLzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjctNzdhYjA1ZTBjZjYy
LzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+DJnauw
ytxwfbNF7gSwHCRDaE8fT8pacj8njkuRR13ohWimZ+tjQlQndrHAWK0SsMfW5izk
sQlzX+vHRDW3d82he/GwFb3kL4fZ8Wzf1Q1iAHjo9pboM78lNYJXtR1OCqZCrBFn
i80e6tFxO/R2nkANTUqgfzXZDdf0mAC0DHYXjpW6kVjt7G+qKSM8B4rUFoqS1QdQ
Qn9YNdQGcioCfYtKgAQMtveilB/Lt0OmKw24e/EXXAyMmA4rml8zDT9khpwkF6jw
0wxLJtPQafjrXcQJrXtr6VckR44kOT8YlbO3WefTh3rpz1DAtx2m8aWdMqGR+qsi
EBDCymALqoWsEg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:14 2026 by rpki-client