This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: 2a2PDwMU2xOOYyrBwzKU2HJWQhLls89+AFO3lhhjDLo=
Subject key identifier: 28:F4:6F:87:0C:81:77:39:9D:BF:60:13:BD:17:D9:CD:1C:99:88:E8
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019C427D8C8A1669F9E2A952DBA71F2156EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0BA0
Signing time: Mon 09 Feb 2026 13:00:50 +0000
Manifest this update: Mon 09 Feb 2026 13:00:50 +0000
Manifest next update: Tue 10 Feb 2026 13:00:50 +0000
Files and hashes: 1: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: Hsd5BBpMYKwYG1XSCAYHeO0QV5Ag0lzLddWKidR9BYA=)
2: o7A96UnzoRTZUSuVj7u0eveSlFA.roa (hash: FF0zn80ZmtefbQSduZMh5HE52BLjPHqOv0VeweTxfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:8c:8a:16:69:f9:e2:a9:52:db:a7:1f:21:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Feb 9 13:00:50 2026 GMT
Not After : Feb 10 13:00:50 2026 GMT
Subject: CN=28f46f870c8177399dbf6013bd17d9cd1c9988e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:c1:91:3b:af:f7:f4:d3:ff:55:16:c4:80:
82:71:62:f0:f2:20:13:e2:53:ad:2b:7b:dc:d1:7b:
a4:81:70:b9:11:1b:38:f8:a9:d0:a4:48:84:d2:c9:
86:00:de:d9:b0:b0:69:4d:71:1c:79:58:85:11:67:
67:1d:95:47:68:7c:92:f9:42:1f:95:34:51:20:fb:
7b:87:de:eb:b4:60:46:95:96:a3:33:fc:ba:dc:b1:
d7:11:f7:a0:5d:e5:ac:43:f2:8f:4b:a6:fa:eb:d9:
1c:48:b4:e5:f0:25:0c:21:fb:1c:60:d0:aa:b2:1e:
ab:aa:dd:d0:e6:84:0c:d4:25:db:92:e2:9d:a2:f0:
58:7d:a0:ec:07:e2:f1:5a:8d:3d:e8:b9:52:40:1f:
f1:b1:61:77:ee:15:9d:6b:6a:09:7b:f0:4d:4d:db:
0b:e6:93:8b:7b:bd:57:cc:c2:e1:7c:f1:9a:d2:4f:
77:40:c0:1d:78:e2:ea:c1:6f:ec:f5:0e:56:b3:42:
1a:1d:64:ba:00:55:43:04:90:38:bf:ea:2d:e4:9c:
41:bb:1b:27:92:36:99:dd:b1:13:a0:ec:35:68:d9:
b1:1c:b3:5c:36:b5:ae:9f:48:6f:69:06:0f:6a:d4:
b3:a2:c4:8c:91:60:01:f1:0e:fe:bf:9d:13:4b:3f:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:6F:87:0C:81:77:39:9D:BF:60:13:BD:17:D9:CD:1C:99:88:E8
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2a:37:c9:d4:7d:b5:82:6e:8b:ea:ee:55:67:a9:04:8a:92:
74:83:80:9c:94:69:98:14:e6:8c:93:8c:73:b4:cd:ef:f2:12:
96:7e:f4:3b:af:f6:1e:01:a6:dd:62:e0:7f:2d:d6:df:f5:c7:
04:db:91:48:53:65:f8:39:42:f8:da:57:f6:19:c1:7d:d3:68:
19:fb:e0:57:3f:b7:d3:83:1d:26:1f:59:96:d3:53:94:1f:7c:
42:16:5b:0c:81:d9:4f:66:63:77:08:2d:8a:89:4f:3b:15:80:
86:5b:c7:e2:39:d1:c7:f0:07:7b:f6:b4:ed:3d:2a:25:fa:3b:
67:79:92:f1:58:2c:f7:8d:2f:b9:76:ff:3f:ea:31:87:c9:53:
40:49:87:7b:6a:e7:e7:5b:dc:fd:b5:1d:bd:d0:54:71:2e:37:
2a:04:4c:8f:02:d5:38:29:58:3e:62:fc:3e:2f:6b:62:49:5e:
00:0d:fc:11:ae:0a:a7:bc:a4:d7:02:d1:b6:28:ca:28:0f:ee:
e0:48:64:c1:44:2e:c4:9f:db:67:9e:d0:49:b7:50:de:cb:5b:
80:1b:ac:5d:a6:ae:89:4d:b5:68:9a:b1:f8:11:5d:71:ce:63:
fb:b2:73:c5:6f:45:5e:c7:19:66:98:a9:11:68:5a:1a:9d:ec:
0b:1f:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:36 2026 by rpki-client