This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: Vap/11L/84HgEOLBca8Kn+lHKB0ZQIeESJwn7RxMHoI=
Subject key identifier: 02:1C:50:E8:EF:B5:CE:03:A4:EA:1F:9D:12:56:7C:B0:54:7F:B9:7E
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019C40FD0BF01562CECEDBCC641BF4D5A03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 130E
Signing time: Mon 09 Feb 2026 06:00:51 +0000
Manifest this update: Mon 09 Feb 2026 06:00:51 +0000
Manifest next update: Tue 10 Feb 2026 06:00:51 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: Qc0yMlBNyAh2AJvc9+u1O3r9lRRzAXPmCbKsV/sMc0w=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:0b:f0:15:62:ce:ce:db:cc:64:1b:f4:d5:a0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Feb 9 06:00:51 2026 GMT
Not After : Feb 10 06:00:51 2026 GMT
Subject: CN=021c50e8efb5ce03a4ea1f9d12567cb0547fb97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:b9:f0:d4:3e:6c:1a:29:21:5e:53:a8:2d:
ea:3c:37:e8:93:a9:c1:d8:41:1b:48:a3:54:4a:fe:
44:c1:b4:a9:2f:4f:b7:4a:0b:92:2e:b1:c2:8d:6f:
75:69:aa:9f:cf:0c:d3:4b:84:0e:bb:1e:ea:a8:74:
1e:f7:18:0f:96:76:75:e1:4f:a4:24:3c:9b:70:2b:
f6:97:bd:45:12:b4:c1:54:7c:55:7b:8e:c7:be:b9:
58:ac:61:ec:e3:0e:10:c4:4e:a9:43:73:77:49:21:
7d:c1:b7:79:f2:a9:ad:98:97:2a:af:49:8f:b6:88:
a7:7e:1d:aa:f0:1e:4e:ee:ae:5b:3a:e5:37:d7:e2:
2f:70:f5:a5:c8:72:c4:1e:cf:29:1e:0d:ad:8c:6d:
e1:a1:d5:dd:05:3c:0b:38:17:5e:36:59:16:9c:75:
64:51:96:44:79:10:97:84:c3:cc:87:79:91:09:a4:
e7:90:ee:43:d7:ab:e4:63:cf:db:bb:42:1f:dd:62:
68:00:ae:10:2a:18:29:95:9d:33:6d:59:7b:70:50:
37:80:c9:a0:85:82:c3:9e:4e:f2:ed:b6:b2:cf:a8:
c5:68:47:ac:83:4a:2c:70:3c:86:a8:5c:bf:cc:df:
50:94:0b:c9:64:ee:2e:a3:48:f5:b3:40:c9:1b:b2:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:50:E8:EF:B5:CE:03:A4:EA:1F:9D:12:56:7C:B0:54:7F:B9:7E
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e3:86:72:a4:55:e2:4e:e3:b7:b6:34:68:db:0b:a5:67:1b:
4c:56:19:c1:37:30:b2:5b:38:98:bb:0a:a4:bf:fc:e3:fe:14:
b8:10:17:84:db:9c:15:c8:d8:bb:d4:d1:55:eb:0d:be:b0:9d:
3f:bc:3c:9b:22:1a:c2:82:2d:a9:fa:c5:6c:e3:51:e3:1e:a8:
8f:41:f3:ba:6f:e9:9c:8a:fd:24:62:c2:bd:c8:fb:bc:b8:b8:
58:42:76:7c:05:08:b8:eb:dd:81:13:05:53:93:a6:a9:c5:73:
79:a3:a9:35:a0:4f:46:6f:93:56:d8:34:53:36:77:be:87:eb:
ea:e4:4c:73:69:10:a3:d4:e4:38:37:3b:6c:dc:f7:0a:fa:ac:
09:a9:03:c1:7d:e4:ef:a3:5d:1a:0f:47:9a:49:51:e2:7c:f8:
6c:4b:16:41:1f:04:0a:3b:13:7b:0f:f1:a3:74:af:1d:e3:94:
b6:ea:7f:67:79:6b:a7:a1:d8:db:0c:18:bb:c3:46:c0:2e:ea:
56:e3:dc:ea:9a:67:6b:b6:17:27:50:20:d3:d3:bb:23:6a:e2:
cd:c2:e2:6c:7d:d5:fb:96:cf:3b:36:3e:93:cc:ae:7a:2d:29:
e5:8a:21:35:e3:19:b8:c6:56:b8:ec:ea:c0:f6:99:e9:05:c5:
10:e1:d8:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/QvwFWLOztvMZBv01aA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODRlM2QyZjFhMjFjODJiYmIzZDY2Zjc2ZjBiZDkzMzM1
MTNjOWEwHhcNMjYwMjA5MDYwMDUxWhcNMjYwMjEwMDYwMDUxWjAzMTEwLwYDVQQD
EygwMjFjNTBlOGVmYjVjZTAzYTRlYTFmOWQxMjU2N2NiMDU0N2ZiOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhG58NQ+bBopIV5TqC3qPDfok6nB
2EEbSKNUSv5EwbSpL0+3SguSLrHCjW91aaqfzwzTS4QOux7qqHQe9xgPlnZ14U+k
JDybcCv2l71FErTBVHxVe47HvrlYrGHs4w4QxE6pQ3N3SSF9wbd58qmtmJcqr0mP
toinfh2q8B5O7q5bOuU31+IvcPWlyHLEHs8pHg2tjG3hodXdBTwLOBdeNlkWnHVk
UZZEeRCXhMPMh3mRCaTnkO5D16vkY8/bu0If3WJoAK4QKhgplZ0zbVl7cFA3gMmg
hYLDnk7y7bayz6jFaEesg0oscDyGqFy/zN9QlAvJZO4uo0j1s0DJG7Ll/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIcUOjvtc4DpOofnRJWfLBUf7l+MB8GA1UdIwQY
MBaAFOKE49LxohyCu7PWb3bwvZMzUTyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgt
OTAxYTM3M2RmMDgwLzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgtOTAxYTM3M2RmMDgw
LzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+OGcqRV
4k7jt7Y0aNsLpWcbTFYZwTcwsls4mLsKpL/84/4UuBAXhNucFcjYu9TRVesNvrCd
P7w8myIawoItqfrFbONR4x6oj0Hzum/pnIr9JGLCvcj7vLi4WEJ2fAUIuOvdgRMF
U5OmqcVzeaOpNaBPRm+TVtg0UzZ3vofr6uRMc2kQo9TkODc7bNz3CvqsCakDwX3k
76NdGg9HmklR4nz4bEsWQR8ECjsTew/xo3SvHeOUtup/Z3lrp6HY2wwYu8NGwC7q
VuPc6ppna7YXJ1Ag09O7I2rizcLibH3V+5bPOzY+k8yuei0p5YohNeMZuMZWuOzq
wPaZ6QXFEOHYDg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:39 2026 by rpki-client