This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: Ay4CTUvODy+NNEB1EyrDbI/uxLjLsrNu+oRUQPeALrA=
Subject key identifier: 84:BC:29:13:EB:55:5B:68:88:2A:8A:51:F1:85:AC:63:9C:0C:13:D5
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 019C41A17B81E796988E37C1D1C7024C6CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 09:00:27 +0000
Manifest this update: Mon 09 Feb 2026 09:00:27 +0000
Manifest next update: Tue 10 Feb 2026 09:00:27 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: pQ5/o8lUdlj70n52qhx7la6k4j+RSnmiPdfkNyLHvK0=)
2: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:7b:81:e7:96:98:8e:37:c1:d1:c7:02:4c:6c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Feb 9 09:00:27 2026 GMT
Not After : Feb 10 09:00:27 2026 GMT
Subject: CN=84bc2913eb555b68882a8a51f185ac639c0c13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:f0:7f:76:ee:8e:c3:a7:8a:f2:4e:8d:d3:
eb:55:56:96:df:32:f4:52:08:85:e3:7d:8e:53:32:
03:66:9b:4c:12:cb:3e:6e:2b:33:ac:18:95:38:97:
8a:d2:82:e0:eb:0c:83:2a:eb:58:ac:97:64:da:d9:
2e:c1:56:c4:14:f5:05:af:9e:2b:da:f8:1d:63:df:
53:8f:74:e0:8f:2e:cc:52:8e:73:f0:7d:c8:c4:fe:
74:a2:37:8d:f8:b2:ce:70:57:c3:18:69:c1:e4:04:
87:98:ec:91:73:92:06:78:4b:c8:61:d9:ce:40:19:
1f:be:84:d9:17:e1:3f:40:e2:db:33:c4:8c:fa:12:
5d:a4:80:6f:af:32:68:0e:4b:d5:b0:76:8a:5a:a1:
57:85:f6:43:be:b4:86:90:82:28:be:53:50:5a:9c:
a0:b6:ef:b0:ff:54:1b:5e:2b:d3:26:4c:1a:dc:0a:
d4:69:88:7f:31:7a:ac:85:6d:ad:7b:c8:24:ac:85:
2c:8e:12:01:f4:a4:ed:14:01:7f:d9:c0:a2:18:ad:
d2:53:fc:c8:10:54:05:07:97:ee:17:af:d0:6a:1c:
4f:89:e6:62:c5:79:4a:27:8f:5d:1b:17:b7:ea:2d:
b3:f2:37:2e:ae:e7:7a:bb:52:27:03:2f:e4:de:a0:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:29:13:EB:55:5B:68:88:2A:8A:51:F1:85:AC:63:9C:0C:13:D5
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:b0:9b:9e:8b:58:ae:22:5f:48:8a:b6:11:ca:a7:0d:97:
dc:cf:d8:f9:7d:82:24:cf:19:9b:9d:ca:3e:45:85:13:4a:7a:
cc:f8:3e:7d:b4:51:08:06:5c:48:88:8f:07:51:40:c8:f3:d2:
58:f6:47:fe:fb:f6:98:8b:b5:9c:4d:ae:a2:ca:1b:d3:a4:07:
ba:3b:d1:1c:0e:f7:46:32:e2:76:65:2d:e9:5b:dc:b0:8c:c8:
3e:e6:df:9c:71:a8:72:b0:13:80:77:63:b5:0e:e4:56:dd:a9:
fa:03:14:2c:18:5f:02:26:4e:22:99:61:f2:99:b6:76:15:f9:
9e:9d:12:c3:ce:93:26:b2:c6:7c:0b:94:53:09:d0:32:26:00:
cc:93:38:c7:64:35:f0:d5:e3:43:bc:75:ac:63:82:87:ea:a7:
0f:60:7d:c1:4c:a8:f1:80:d8:99:f4:4b:95:c8:22:4c:a1:65:
5f:60:8a:25:4b:ac:3a:ee:c6:9c:fd:db:f2:bb:f9:de:ec:2e:
ed:8b:e1:b8:cd:3e:74:9b:8a:ec:fb:ec:80:e0:ad:7d:f9:46:
76:6c:ec:16:cd:4a:cc:d3:f8:e7:de:5d:ff:83:8e:c6:a1:9d:
e5:7c:6e:bc:52:35:de:17:4e:97:fd:35:3f:f6:1a:20:34:76:
bf:e7:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:33 2026 by rpki-client