This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: AH9tosjtHGeIubUIqzoq+xzeNtp4jPgL4pDg5BsN5Vs=
Subject key identifier: 55:8D:78:AD:1E:96:C6:9D:11:32:82:01:DF:E6:AC:C1:56:0E:63:B0
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 019C424674FE681174037C6601A92D6326DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 04E5
Signing time: Mon 09 Feb 2026 12:00:39 +0000
Manifest this update: Mon 09 Feb 2026 12:00:39 +0000
Manifest next update: Tue 10 Feb 2026 12:00:39 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: uA2aJae+hD2JtOQ+oDPF7voXiVI+WNvKESG/LxhW+no=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:74:fe:68:11:74:03:7c:66:01:a9:2d:63:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Feb 9 12:00:39 2026 GMT
Not After : Feb 10 12:00:39 2026 GMT
Subject: CN=558d78ad1e96c69d11328201dfe6acc1560e63b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:ec:d1:07:ea:34:d0:89:76:d4:7a:ee:ae:
21:86:3a:98:2a:4f:8b:cd:70:6f:8c:42:9a:e4:5f:
95:d3:9d:ce:03:04:7f:b8:71:3c:43:74:b7:b6:6c:
6c:97:04:63:6e:5e:3c:68:2c:4f:a8:14:c0:5d:36:
ef:96:e4:7b:e0:65:79:dc:e6:de:74:c2:79:3c:c4:
a3:c5:bd:db:71:9f:67:bb:60:c4:aa:89:21:7c:6e:
47:7e:a8:08:e7:7b:e7:61:cd:ac:8f:2c:cf:a0:e5:
45:a8:03:98:7a:e4:73:d1:d6:8d:27:26:31:30:16:
9b:1b:59:0f:03:da:df:23:cd:19:ad:55:9c:a2:9d:
15:50:dc:30:c1:7c:6b:0d:d8:25:41:0b:fd:6e:31:
54:7b:2b:70:91:93:81:5f:e6:5f:b2:13:c6:45:0e:
09:3a:bc:4b:7d:34:06:ab:0a:c6:21:83:91:c6:76:
b4:dd:af:55:c1:cd:8d:17:19:9f:a0:11:d4:ef:de:
d9:9a:36:20:2e:7e:bb:0a:f1:1e:c0:a5:f0:65:06:
c2:25:ff:c1:fe:30:b1:64:e9:d1:1e:95:a8:6e:ef:
9d:f4:a2:b2:99:dc:23:ec:4a:f8:a8:cd:36:a4:76:
dc:df:06:c4:84:92:30:90:83:95:c9:83:a1:06:62:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:78:AD:1E:96:C6:9D:11:32:82:01:DF:E6:AC:C1:56:0E:63:B0
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9c:3a:8b:3f:3a:e8:0f:43:46:52:57:a1:15:30:62:86:d9:
5b:61:0a:a8:ee:d7:0a:64:9e:8b:83:d1:48:61:fe:d4:4c:6c:
b2:6e:c9:f1:e5:79:06:b8:20:95:75:5b:65:95:5c:45:e5:86:
1a:5a:db:d2:29:d8:33:ab:2f:b1:69:71:41:39:01:94:86:06:
c5:3b:32:8a:22:1d:0f:d6:d7:45:b7:4e:5d:12:34:9f:2e:5b:
0d:5a:12:a6:78:e0:93:6f:ba:d6:de:02:bd:cc:39:f4:7b:ba:
a1:4f:fe:b8:0b:9f:a2:bc:78:2a:f1:ac:d9:2b:78:42:64:c5:
7e:3c:44:ed:3a:3d:c4:63:16:ad:12:45:6a:31:76:c6:e0:85:
78:fd:20:e7:ae:d4:b3:b1:7c:a7:60:cb:c4:bf:76:06:4b:b5:
8e:18:b4:7f:27:26:13:df:f7:db:b0:b9:b3:80:04:d8:88:08:
34:63:99:ee:fb:af:61:48:da:85:4a:fe:c5:ed:bd:78:65:3b:
f2:93:10:bc:ed:0d:ca:d3:97:a2:55:04:9c:09:1d:e7:82:5c:
91:81:e3:c8:e2:80:68:89:86:5e:a7:b8:dc:4d:24:d6:12:11:
25:ab:66:20:92:8a:65:a8:ae:8d:d9:4b:d2:66:c8:d7:44:60:
16:de:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:29 2026 by rpki-client