This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: FNIOJPAHczeWuzndfXCrA4EVv4QxNsXeJkOtVUcn+TQ=
Subject key identifier: D4:7D:33:5A:34:84:4D:0E:4B:92:CC:DF:50:69:57:56:8B:B4:AC:2A
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019C432228C5C09EF966FA275CAD91DA42AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 16:00:37 +0000
Manifest this update: Mon 09 Feb 2026 16:00:37 +0000
Manifest next update: Tue 10 Feb 2026 16:00:37 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: DPRBghsCc+kvhzKKsD2RdViYOMsKhkA5sObpsPrsyn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:28:c5:c0:9e:f9:66:fa:27:5c:ad:91:da:42:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Feb 9 16:00:37 2026 GMT
Not After : Feb 10 16:00:37 2026 GMT
Subject: CN=d47d335a34844d0e4b92ccdf506957568bb4ac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:90:e7:cf:04:b8:f1:4f:75:e9:32:8b:49:75:
8f:ff:f8:02:27:fb:c8:29:1a:58:16:57:f0:af:4f:
b5:2f:ca:8c:f0:f0:aa:ae:5d:2b:b9:5c:15:bd:d3:
f7:11:13:61:76:bf:dd:c5:ed:a3:ca:e4:b0:78:1f:
57:d0:de:cc:b9:33:47:08:7b:3d:ae:0a:94:de:00:
0f:c4:ed:c0:1b:2e:b4:54:73:c5:90:bd:43:82:4c:
db:cc:d7:d4:b1:0f:bd:c7:84:57:d2:bb:a7:42:1c:
20:73:cc:7c:b5:76:76:97:55:ac:91:f2:ea:a9:5a:
d9:41:ba:0a:fb:28:71:a8:6f:50:14:6c:41:0a:06:
5b:f0:4a:11:9a:8f:01:44:ba:7f:cb:c9:83:d1:a2:
8a:80:a9:2f:74:43:67:7e:74:ac:2a:ec:f8:76:24:
af:18:11:74:19:4f:dd:eb:d3:5f:c7:29:79:b3:d3:
db:6b:d6:09:79:ec:f7:14:64:8d:c6:06:87:71:de:
22:a6:f2:c4:c2:45:c1:20:cc:1c:d1:c4:23:72:e2:
e5:99:4f:5f:e4:1b:6e:ea:50:8e:ca:49:6c:6a:a9:
e4:f7:9b:e2:d2:57:9e:15:23:5b:2a:ad:f8:5f:85:
6c:5e:64:da:87:9e:9e:5f:4d:1b:39:9f:0e:c4:23:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7D:33:5A:34:84:4D:0E:4B:92:CC:DF:50:69:57:56:8B:B4:AC:2A
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:51:9e:93:16:5d:71:78:55:2a:a9:c0:76:0c:31:be:84:b4:
ef:d1:75:ef:41:5a:f3:24:2d:63:89:b2:f8:88:b7:39:29:74:
34:bc:97:2c:b1:2c:61:72:eb:97:4b:5e:0b:c1:65:e9:51:0f:
cd:ea:1f:55:23:3c:f6:a8:a0:74:83:ec:b1:91:ce:35:37:96:
8c:0c:cf:95:63:33:4e:86:4a:39:8b:fe:85:68:ef:74:ef:2f:
27:e9:4f:22:ba:3d:a5:d2:dc:d5:41:b1:8e:7f:97:4c:fb:b2:
f6:7d:06:64:37:23:4d:65:5d:ef:e9:42:e5:99:84:c8:6c:9b:
3f:bc:eb:01:7c:c5:60:25:c8:d0:3e:e2:ac:de:eb:35:42:d1:
a9:28:c0:14:ac:83:c8:46:da:eb:8e:ea:6d:fa:b4:51:87:2e:
7e:d4:4f:82:31:7c:44:b9:2c:21:1a:0d:b0:b9:e4:0e:cb:c1:
22:ba:b3:66:e2:bd:52:ef:35:a2:a4:85:56:8e:61:9c:72:4d:
30:bb:d9:1b:dc:65:a0:72:4d:1d:89:68:ab:b3:f6:78:01:47:
20:68:a9:88:50:ce:ed:9e:d8:3c:c8:75:16:1f:3a:01:4a:da:
51:fe:3f:1a:33:69:c1:70:e7:33:20:ac:93:9c:73:71:39:04:
1a:9f:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:56 2026 by rpki-client