This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier: fSTM4Ph+WeJpXuf36AOMcB2hVjxhNu0q//H7que4gEE=
Subject key identifier: 4D:D7:4D:51:3B:7F:05:3B:74:61:8F:94:01:1E:A9:64:D4:DA:3B:0D
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 019C43C6E7E0A06A888F0F2442E7A07AA9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number: 013F
Signing time: Mon 09 Feb 2026 19:00:34 +0000
Manifest this update: Mon 09 Feb 2026 19:00:34 +0000
Manifest next update: Tue 10 Feb 2026 19:00:34 +0000
Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: kjsvfIBMvvPmyEQKt966ZDek44XiFj14wef5X9ApU9I=)
2: fJC9vmdZueXz61wAYAD-WUsaH2A.roa (hash: k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:e7:e0:a0:6a:88:8f:0f:24:42:e7:a0:7a:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Feb 9 19:00:34 2026 GMT
Not After : Feb 10 19:00:34 2026 GMT
Subject: CN=4dd74d513b7f053b74618f94011ea964d4da3b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:fa:f7:4d:5f:3b:9c:22:8e:51:f8:dc:05:
26:47:37:67:0b:c5:e5:27:bf:53:62:29:01:dc:90:
38:24:d7:ec:13:d0:b7:79:ec:87:20:4e:29:2c:99:
fe:0c:db:e2:f6:90:4b:22:59:a7:c4:ca:c8:b1:39:
78:2b:d8:a7:14:ce:65:c7:08:40:b6:d2:23:ac:bd:
ba:c0:39:72:4f:97:50:aa:19:a9:a6:87:9a:60:bc:
b3:f8:7c:87:7d:1d:84:17:f5:a2:f6:97:87:3d:ab:
39:1c:9e:57:01:19:41:0e:b7:38:0b:3a:ca:b9:2a:
30:95:32:c1:a3:cb:62:4c:28:df:6a:78:02:7f:df:
2d:20:81:df:ea:64:fa:ee:a8:06:91:a8:a9:ca:3e:
36:9a:f8:c0:d4:38:98:61:16:18:36:e5:7d:71:46:
cb:f6:b8:ab:dc:00:a5:0f:3d:59:71:4f:87:f4:5c:
d6:bd:d8:5e:95:65:75:bc:87:7e:87:f9:06:b8:db:
0c:a3:4d:25:d1:83:e7:24:91:63:25:e3:42:bb:f3:
ef:47:5d:1e:e9:14:9e:20:bc:72:eb:b5:04:be:98:
0c:9c:26:29:1f:bf:ff:51:27:e7:fe:72:35:d0:55:
0f:53:ae:54:fc:2d:b6:7f:ed:ea:e7:46:77:90:86:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:4D:51:3B:7F:05:3B:74:61:8F:94:01:1E:A9:64:D4:DA:3B:0D
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:c5:fd:60:2f:bb:e9:ee:2d:cd:e4:12:0c:5a:a3:39:46:
0a:5e:6d:ca:85:bc:51:a4:a4:c4:2f:4f:cf:5b:f9:3d:ce:3f:
e7:86:e6:5f:b3:7e:e1:c6:63:aa:32:9b:21:87:42:ab:9e:cf:
81:12:1b:7b:de:20:0b:ae:97:1d:34:2b:c4:30:88:8b:23:ff:
1a:f6:f9:ff:73:0a:d1:04:d7:6a:c0:39:58:7d:09:16:7e:f4:
72:7e:c0:f3:73:99:42:90:92:fa:30:c7:b8:7f:33:b2:7a:f2:
29:76:b1:9e:ef:f8:e5:1c:bb:98:b0:18:63:7e:39:24:89:2d:
09:c0:22:bc:dc:a0:7d:56:68:b9:f9:a7:e5:87:08:15:a4:ca:
08:65:ae:14:e3:39:6d:9f:92:9c:6b:ca:bd:ac:0e:e2:f1:89:
22:f1:fa:4b:29:55:c7:c1:e3:e9:3c:b2:ee:57:25:a5:81:18:
ad:ab:80:fe:55:fa:c0:51:e3:aa:b5:3c:3b:c8:8d:73:00:e8:
a1:f5:3b:d4:28:f6:8c:c9:c3:5c:47:b9:dd:15:44:a7:d6:22:
cc:35:e1:9d:39:f7:86:4c:40:a5:3d:2c:c3:63:81:0c:96:bc:
bb:31:f5:9a:83:4a:b0:84:06:2f:f7:e4:c1:77:7f:e4:2c:4e:
35:2e:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:04 2026 by rpki-client