This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: I5KCKR3Wq6a18L79LVN7J3Gu4Ryd8TEU57Ers+EWtio=
Subject key identifier: 6D:63:3B:AD:EF:5B:6F:EB:BE:C0:8B:FD:45:21:BC:98:94:8D:6A:27
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019C420F6929CAFE3311B5EED7E77D2DB516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 174E
Signing time: Mon 09 Feb 2026 11:00:31 +0000
Manifest this update: Mon 09 Feb 2026 11:00:31 +0000
Manifest next update: Tue 10 Feb 2026 11:00:31 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: +tzmfJcYnBFnWAdnwUS2o1tRDCejHTGpGhIYvwaBzeY=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:69:29:ca:fe:33:11:b5:ee:d7:e7:7d:2d:b5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Feb 9 11:00:31 2026 GMT
Not After : Feb 10 11:00:31 2026 GMT
Subject: CN=6d633badef5b6febbec08bfd4521bc98948d6a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:05:ce:55:9e:c6:0c:7d:67:77:64:80:2d:
8e:0c:21:4a:8e:d3:a9:7b:6b:72:4f:11:47:36:c9:
bf:ed:72:6e:78:f3:be:61:8b:07:e2:d4:45:d0:84:
a0:fc:c9:51:a0:76:e6:ba:f3:e2:81:e7:18:c7:87:
f3:8e:75:89:f0:d1:f5:3a:cf:24:b1:27:3d:7d:1f:
2f:ce:9f:9c:59:01:02:e7:15:d0:ff:bc:db:10:22:
4e:4f:ce:15:a5:75:51:42:ec:3e:f3:65:5d:b4:09:
02:dd:59:7b:a6:87:fe:c3:1d:ae:21:fc:9d:a6:f6:
fb:07:e5:a7:68:22:be:0f:3a:0d:cd:d6:a6:8b:54:
1c:8e:84:27:a7:19:e5:e8:52:11:19:e5:b4:e4:48:
e0:52:64:c0:b6:38:c7:10:81:a9:86:79:d4:05:88:
17:8a:81:a4:76:9b:6f:46:a0:8d:56:74:a3:9d:a5:
aa:23:be:d7:cf:63:64:6c:89:0e:5f:fa:d5:78:e7:
f7:9c:5f:32:14:92:5a:6e:81:f7:46:d6:45:41:0f:
c8:72:31:56:09:d1:14:13:23:50:d1:a2:72:f3:e4:
56:6f:ec:9c:9e:17:bf:42:eb:23:51:9f:d3:18:57:
b3:56:96:13:3e:42:ea:e8:cb:bf:79:44:55:9f:be:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:63:3B:AD:EF:5B:6F:EB:BE:C0:8B:FD:45:21:BC:98:94:8D:6A:27
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:c2:38:d5:de:f9:65:d1:9f:9f:cf:6c:b2:98:15:3e:25:
1b:2b:91:7f:fb:d0:ce:67:37:13:56:d1:50:d0:48:cd:69:19:
4b:40:4d:67:0f:e1:fa:9b:11:c3:26:37:32:c8:70:f3:06:a5:
30:ed:2c:a9:d3:8a:8b:fa:fb:fc:f4:b3:e4:c5:ef:fb:b6:15:
5d:42:b1:cc:93:b4:ad:bf:15:36:1d:76:81:34:37:f6:3d:14:
2e:05:b0:ae:70:bd:e5:20:fe:ef:39:91:ef:dd:80:6c:83:44:
ce:d4:2d:77:65:25:47:a5:67:c0:27:3a:18:17:42:4a:aa:8f:
33:05:03:b6:1b:93:a6:06:cc:93:4a:76:bf:69:d1:b8:39:35:
1e:53:86:6e:4b:c5:71:9b:4e:42:43:df:f6:69:4d:fd:f6:91:
d1:bc:3f:69:d6:c9:86:8f:7c:d6:12:bd:e7:98:05:eb:e1:5d:
2e:be:4d:be:d9:9a:90:a2:42:61:40:f9:34:3d:00:46:4f:de:
ef:0e:a4:74:ef:c9:86:44:0d:ca:ae:28:87:82:d1:21:32:91:
69:d3:3b:cd:b1:85:c3:08:5a:86:b2:81:a9:7d:f1:6e:16:c6:
5f:4d:02:d9:9f:d4:b9:22:46:2e:4d:4f:24:02:5b:0a:5c:ed:
f5:60:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:09 2026 by rpki-client