This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: ongo9NLizj87v6aHuS1SKyKcbc0IQlQQqkZHKriUsmA=
Subject key identifier: 4B:C6:31:93:64:6B:5C:B6:FC:AD:A0:C5:01:91:D9:F1:06:09:6F:1C
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 019C438FC25DB574EF204CBFA70552589DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 0724
Signing time: Mon 09 Feb 2026 18:00:20 +0000
Manifest this update: Mon 09 Feb 2026 18:00:20 +0000
Manifest next update: Tue 10 Feb 2026 18:00:20 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: 3NJrUdNW/5lGkXxwKbHRhqQSb84g/OS3iqnMfrEtqbw=)
2: g299YTC_iLV4aJ1WAKAFuHKoAG8.roa (hash: RjwHc0a+p7SBX5dpTWoPHb71J5KbWW0USQUJuMMvXuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:c2:5d:b5:74:ef:20:4c:bf:a7:05:52:58:9d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Feb 9 18:00:20 2026 GMT
Not After : Feb 10 18:00:20 2026 GMT
Subject: CN=4bc63193646b5cb6fcada0c50191d9f106096f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:95:91:89:ca:8a:0a:36:ac:5a:bb:53:04:
1b:f3:5b:b4:33:30:be:b3:38:fa:ca:de:5f:f7:6b:
20:73:b3:2d:a2:3e:8a:d1:f9:ac:74:ee:f7:42:7a:
c6:a9:91:56:9c:90:39:73:19:a7:59:0b:a4:2a:3d:
d2:ff:b3:95:a9:a6:0f:a7:dd:79:d6:1e:9c:bb:c2:
05:fe:62:d0:7d:c5:cf:46:10:43:59:e2:ea:89:4a:
e0:60:00:e3:d1:c3:82:1d:f6:90:04:17:95:f0:c1:
12:70:94:10:2d:e9:c1:7b:db:3a:59:d5:9f:cc:98:
39:a0:3e:67:64:95:d0:20:58:4d:91:a5:7f:11:95:
a6:52:66:d5:79:55:6b:8c:0d:19:9a:08:03:dd:af:
7a:0a:64:db:a9:05:33:2c:53:7d:db:a7:cc:7c:b7:
3f:ce:2a:a4:81:55:89:2b:a3:9e:31:42:90:64:33:
b2:26:e9:48:58:91:66:00:40:a3:ac:63:6f:3c:a5:
8c:0e:59:df:b3:63:dc:1b:f9:02:7f:9e:14:d7:da:
b0:58:5e:b0:94:f7:14:cf:21:b7:b1:42:c6:78:78:
ea:fa:37:8e:78:c1:10:a4:31:c1:45:d6:09:aa:36:
fe:8f:74:ef:4f:6e:97:44:39:9c:79:3a:95:9d:3d:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:31:93:64:6B:5C:B6:FC:AD:A0:C5:01:91:D9:F1:06:09:6F:1C
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:26:15:c2:45:67:9d:cc:8f:cd:ac:19:73:71:57:9e:44:
4f:46:36:ce:8e:76:a7:7b:af:0c:29:27:22:c3:31:83:a5:fe:
d3:17:5e:fe:9b:3c:d6:b7:0e:c4:e4:39:a8:19:d8:ef:67:cc:
b8:69:2c:9a:f3:21:ae:f6:f6:22:b9:87:d0:36:b2:db:15:23:
cd:58:6d:4b:90:c1:71:75:5a:6a:a4:77:56:45:32:6d:74:a7:
27:f5:47:97:ab:b1:c8:6c:12:5f:e9:d5:6c:05:7c:2f:82:76:
c4:ef:16:dc:a7:4c:d2:fb:8a:28:0d:3b:90:bd:23:18:e0:1a:
95:c9:d5:98:24:e2:cf:67:f5:7f:b1:50:b0:be:a3:f7:bc:3b:
d2:08:1a:16:21:09:54:b0:d4:f2:dc:c5:e9:db:8e:e2:b5:fb:
f8:34:0c:2a:4c:22:43:3c:5e:a3:97:c6:fd:e7:4c:3c:49:da:
ca:23:f4:43:3b:e9:48:9f:21:7b:a6:5f:a7:a7:20:da:ce:50:
c5:5d:89:e9:f7:e0:3d:6c:8f:63:ab:f1:25:97:73:e5:30:86:
4d:28:e9:85:9b:66:cb:2e:53:7c:fd:4d:b6:d1:70:4c:37:fd:
a8:33:4f:c4:62:19:04:e4:4d:67:f9:2c:d6:c2:dd:9c:ae:27:
55:2c:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:38 2026 by rpki-client