This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: onjrOOHPR01BETPQrspMXCcTNt6EEC86Z2Ob6fFVUBo=
Subject key identifier: 18:28:DE:47:69:70:12:3C:E8:16:64:77:6D:AE:77:FB:B4:17:58:74
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 019C438FC60F54AFCFD0E8C04617236BBE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 18:00:21 +0000
Manifest this update: Mon 09 Feb 2026 18:00:21 +0000
Manifest next update: Tue 10 Feb 2026 18:00:21 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: OwpsD7AeOOgPCjdzHZ9CTvlrSoi4BE1yAp0nqc2/MLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:c6:0f:54:af:cf:d0:e8:c0:46:17:23:6b:be:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Feb 9 18:00:21 2026 GMT
Not After : Feb 10 18:00:21 2026 GMT
Subject: CN=1828de476970123ce81664776dae77fbb4175874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:bc:72:69:50:a9:8d:d6:26:12:4a:db:4d:
c2:9c:1b:e7:66:e1:02:22:17:cf:09:72:99:7c:87:
3f:90:27:5d:d8:2e:1a:0c:b6:aa:43:60:41:cd:5f:
fa:df:31:ed:7c:07:ef:5a:95:ac:3d:1c:dc:70:f9:
5e:4c:a4:cf:b1:1d:d3:28:f4:7d:00:2a:d7:16:1d:
9c:ae:5c:4d:3e:ce:23:9d:6f:e1:26:8e:44:a8:62:
1c:4b:2c:57:60:2c:da:d4:d6:fa:62:84:46:d6:f7:
aa:2b:51:60:e6:b4:8d:3d:f3:59:d7:dc:ab:55:05:
3e:c8:5c:fc:cd:54:b2:a1:20:1a:3e:13:70:8c:86:
a9:2e:2e:3a:08:ea:91:38:2a:27:2f:6f:33:65:67:
ae:dc:60:f3:47:5c:53:de:3b:e1:47:83:ed:ec:3a:
cd:bd:9f:a9:28:19:2f:bc:70:b2:d0:d6:29:d8:68:
aa:67:2d:b8:9d:97:80:01:b9:31:67:4d:d0:b0:1b:
10:ac:ea:3d:52:63:7a:fd:56:68:73:72:4d:7f:35:
1e:2b:ad:85:b9:80:1b:33:f8:02:2f:7f:e4:11:4a:
35:40:79:97:48:c2:1c:df:f1:0f:fb:13:b6:0d:c1:
b4:a0:cf:77:84:5c:e1:07:5e:56:a9:ed:a8:21:a1:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:DE:47:69:70:12:3C:E8:16:64:77:6D:AE:77:FB:B4:17:58:74
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:56:6b:0a:91:b8:49:d0:a4:02:ac:6f:ca:a1:d8:93:ba:
2f:05:61:44:69:cd:fd:92:85:a2:77:95:0c:b1:38:7d:0f:99:
c7:8c:0b:f1:16:1f:b2:b6:b3:b3:bd:8d:4e:b0:6f:01:96:b3:
fa:6c:f8:a2:1f:8c:79:bc:3a:1b:01:bf:ad:b0:43:e0:49:4e:
89:5b:cd:ab:cf:2e:7e:51:7d:f3:ef:1c:e8:9a:97:41:21:16:
e5:86:f7:03:36:c4:82:b0:34:d1:d1:1d:9c:33:45:ac:27:34:
96:bb:a3:22:f9:38:1b:ae:cd:8c:2b:e2:ee:72:23:ed:7f:17:
46:e5:72:13:37:99:8d:21:1f:1b:7e:cd:46:3d:22:72:84:09:
58:36:fc:9f:0f:75:ff:d4:f8:e8:5b:11:87:cf:ff:52:39:db:
c2:0e:98:f0:30:6b:f0:af:67:e0:16:74:18:bf:8c:ed:7f:c8:
9b:be:6b:40:5a:8a:b5:9a:fa:93:b2:c2:29:b1:2c:f7:e7:48:
0a:a7:69:62:5c:4c:fb:90:8b:7d:d5:8f:6d:9c:18:7a:a5:90:
a1:9f:e3:b4:dc:ff:89:bb:fc:b6:fb:cf:cc:43:9c:6e:3b:02:
14:12:6f:ad:ec:a6:ab:32:71:61:25:d9:43:84:37:5b:3a:9a:
6f:75:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:23 2026 by rpki-client