This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: Ba2gFyibxjw7JCn68GDLxyTx0SiR0OgNS3Zru/vM91o=
Subject key identifier: 4B:94:5F:5F:74:90:4F:B3:DE:A0:BA:8B:AC:C6:6F:D8:61:CB:BB:F4
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019C43C6AD96212614BA8AF908BD5440FFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 19:00:19 +0000
Manifest this update: Mon 09 Feb 2026 19:00:19 +0000
Manifest next update: Tue 10 Feb 2026 19:00:19 +0000
Files and hashes: 1: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (hash: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: gIwoAgZJu7RbnEpONGRWRZuu3BEG9qIruRqaCtM7Am8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:ad:96:21:26:14:ba:8a:f9:08:bd:54:40:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Feb 9 19:00:19 2026 GMT
Not After : Feb 10 19:00:19 2026 GMT
Subject: CN=4b945f5f74904fb3dea0ba8bacc66fd861cbbbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:d2:01:7d:c2:e4:0e:99:d5:97:6f:b6:e7:
91:7c:57:65:e5:f5:53:11:80:52:7c:c5:d6:0d:2b:
b9:b6:0b:95:7b:94:8b:89:45:86:63:55:23:7e:d0:
7f:57:56:87:ad:9c:eb:ea:49:d5:b7:3a:ba:4e:12:
fe:bc:7f:db:9f:0a:8c:08:ee:15:40:43:d6:55:28:
52:74:aa:7c:f1:90:6e:75:8a:50:d6:bc:19:29:25:
26:c3:a7:e0:b8:48:a0:37:07:4f:7a:c5:2e:e5:53:
c3:43:47:00:04:d4:66:6b:f7:33:37:df:0d:14:e9:
99:61:ed:87:5a:2f:54:19:59:31:e0:13:f1:13:8f:
14:dd:ee:eb:3b:a6:c6:3a:d6:28:02:0d:38:3e:b2:
89:be:7b:2f:08:35:ac:3f:2d:43:ec:1b:ec:c0:b1:
aa:91:73:75:09:d1:0e:c1:2b:3f:14:1c:ea:c0:0a:
43:98:a1:5d:3e:a5:94:79:1b:fc:45:0a:58:3c:d1:
bf:49:91:9a:77:ed:92:0d:be:2d:00:83:92:7b:2d:
25:35:fc:9f:a9:65:f5:79:01:03:b5:8a:dd:93:49:
55:81:e2:3d:31:43:34:fa:f2:00:88:58:19:23:c5:
63:a6:ee:ec:a1:46:c1:68:5e:e3:ba:4e:59:0c:c4:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:5F:5F:74:90:4F:B3:DE:A0:BA:8B:AC:C6:6F:D8:61:CB:BB:F4
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:68:05:71:34:de:7d:98:7d:f8:47:fd:bc:72:d5:7e:eb:
f2:41:f5:40:80:86:0d:50:f8:ce:8b:f9:41:2c:bf:b3:d6:12:
48:e2:a9:67:ba:e0:7f:28:06:ab:f1:e6:78:4f:31:be:a3:33:
40:0a:9f:fc:fe:e8:e5:54:1c:08:9a:72:69:01:51:ab:83:78:
44:45:86:93:1b:aa:47:af:fb:71:1f:14:7b:f5:06:1f:a4:b1:
dd:67:e3:94:4e:8a:0b:aa:8d:29:ab:5d:48:94:53:13:ae:20:
e1:1a:2a:56:de:75:bd:ce:27:59:18:f6:69:6b:37:09:5f:2f:
0e:2e:4d:7d:49:de:a9:ce:eb:b9:dc:9c:c6:22:3d:bc:34:d1:
fa:e8:48:45:f7:3e:fe:86:41:d4:7e:b1:31:3c:9a:4e:4c:4e:
da:3f:54:b5:7d:95:b7:13:44:23:02:be:27:a7:cc:b4:36:08:
6b:6f:e5:8e:17:a6:aa:90:d6:21:ba:ad:46:1f:2b:23:c9:d1:
9d:2a:1a:20:15:3d:dc:59:e6:27:d8:c2:89:9f:a6:94:e2:61:
be:c6:0a:69:ff:ae:a2:a8:d3:9a:58:18:65:ba:87:42:1d:66:
c8:3a:cf:58:d8:d9:bc:9c:49:d4:27:79:c3:07:14:cc:ea:64:
09:a9:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:33:28 2026 by rpki-client