This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: 9DRC5r7OPNq4YjZ6hBoa1ZB5Pp+9aYtDtaDKSuNNQ+4=
Subject key identifier: 1F:79:AE:47:5B:A0:99:10:80:24:D5:D2:AD:8E:7C:C3:C4:14:C5:2E
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 019C4322496B345ED081831F6E682F2BCF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1817
Signing time: Mon 09 Feb 2026 16:00:46 +0000
Manifest this update: Mon 09 Feb 2026 16:00:46 +0000
Manifest next update: Tue 10 Feb 2026 16:00:46 +0000
Files and hashes: 1: 7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa (hash: 5G/O/em7a1btfI5sEj4BLe5JKY4pGeRIT+C2NR1XoD4=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: 5rrYC463Q6dDO4Cobv6vNA//gBcU83kYYNdAYGut0Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:49:6b:34:5e:d0:81:83:1f:6e:68:2f:2b:cf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Feb 9 16:00:46 2026 GMT
Not After : Feb 10 16:00:46 2026 GMT
Subject: CN=1f79ae475ba099108024d5d2ad8e7cc3c414c52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:77:88:f6:4b:c0:cd:e1:d4:f9:37:c5:17:
65:57:71:c4:24:44:fc:e5:7d:7e:1a:42:59:e8:d5:
e7:40:4c:aa:de:4e:f3:25:76:f2:73:40:d1:17:97:
0d:a5:8d:7a:45:e1:af:03:72:03:d5:09:91:2e:5e:
af:2e:0c:ea:0e:1d:52:8d:cc:c6:36:93:c4:f5:d5:
08:42:ea:ad:cb:db:c7:68:e5:1e:91:44:9e:2c:fc:
ab:1c:83:54:5c:e4:a8:95:f3:bb:ab:8f:22:34:df:
0e:65:79:81:82:78:f0:a7:8e:af:53:44:ea:2b:73:
cb:eb:e9:83:4f:bf:03:09:35:5b:6f:de:31:81:c6:
dc:83:73:9a:15:13:f2:ab:67:03:49:db:f9:cc:bf:
47:35:2e:c5:dd:ef:e4:c1:a3:85:c3:2a:b1:e8:23:
bc:3c:ed:05:f6:f6:d7:44:79:a9:46:58:4d:c4:da:
5f:f2:ed:b3:04:90:c2:74:6c:66:54:04:ed:85:de:
73:6c:e4:72:b7:2f:8f:45:61:32:1d:e3:bb:98:e7:
4e:f2:1a:80:b9:39:10:f3:44:cd:be:6d:38:b3:ca:
bf:27:a3:82:2a:e9:85:c1:91:f9:5f:3f:66:0b:fa:
af:06:19:07:9c:6a:dc:f2:09:09:1d:a2:be:68:33:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:AE:47:5B:A0:99:10:80:24:D5:D2:AD:8E:7C:C3:C4:14:C5:2E
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:b4:b9:16:40:8f:f5:e3:f1:87:79:f4:7a:9a:89:92:04:
73:59:47:5f:1b:99:84:a3:22:40:c6:ed:44:aa:70:4b:57:82:
5e:a4:ee:82:81:9f:13:a7:a3:96:15:6b:86:00:01:de:fc:97:
9c:76:f6:5c:13:39:28:34:65:66:1e:5b:c2:64:fd:f5:74:16:
d5:59:6c:a5:e8:63:69:5e:47:7e:93:2f:95:a2:b7:3d:85:21:
4a:8c:07:85:79:28:83:05:37:db:8a:86:15:68:ae:8d:be:18:
33:c0:94:71:f7:dd:89:db:16:4c:bb:23:ba:8c:5f:78:b1:10:
2e:70:e9:60:ad:89:66:02:21:51:88:5d:c0:b3:6b:68:62:98:
9b:86:62:9f:87:61:e4:99:a5:df:22:83:77:de:3c:09:ea:54:
23:2e:01:78:b2:3b:21:5d:24:f5:7c:c4:af:e3:5b:d1:27:0a:
6e:6f:b6:a1:bf:41:a3:20:5d:0f:47:e2:03:b2:e3:5d:01:06:
35:73:74:b9:55:4f:5f:75:20:04:c1:ba:3f:6b:7b:97:06:93:
65:58:14:d9:6d:c1:ad:58:3c:46:e3:b2:1d:d5:81:71:0e:30:
04:e4:0c:25:72:80:5d:0d:11:51:2c:ef:b8:9a:1c:92:53:1b:
f2:27:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:44 2026 by rpki-client