This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: f5s1sGLln/jGUqj9aZNS2+j+d7zlumviwCUQayPCIBU=
Subject key identifier: E0:23:7F:62:70:C6:33:1D:C9:F0:2E:77:AA:C4:2E:72:D1:FB:78:F7
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019BF72C8B0519809791453642FE396D7ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 22:00:50 +0000
Manifest this update: Sun 25 Jan 2026 22:00:50 +0000
Manifest next update: Mon 26 Jan 2026 22:00:50 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: V2zJc9ccjqWRoZLMX/iXD+f5N1Lp9ouyLcn7WoBIwEs=)
2: YaozTdvah4PyD6CuJmnyOrAMFLM.roa (hash: TPg/XsH5Y8UGf7ia69jAJB3rN1a2sdNkkH/G/KTnbJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2c:8b:05:19:80:97:91:45:36:42:fe:39:6d:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Jan 25 22:00:50 2026 GMT
Not After : Jan 26 22:00:50 2026 GMT
Subject: CN=e0237f6270c6331dc9f02e77aac42e72d1fb78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:7c:fc:d6:e9:08:ad:fa:df:e5:77:93:7e:
71:bb:31:32:05:09:8a:2b:fd:9a:54:58:b9:c9:97:
d0:8e:37:a2:cf:12:c1:31:74:3d:46:b8:0f:8a:99:
25:43:66:93:73:49:d8:e6:9f:27:e9:88:7e:83:b5:
e3:8b:6c:98:2b:97:16:98:9f:64:53:4e:6c:67:bd:
24:2e:b1:7f:5f:37:16:c1:50:43:a1:b0:7c:3f:9a:
97:1e:de:9a:7f:69:c5:14:fa:bb:34:86:30:6b:99:
19:b0:d8:ed:2a:bb:c7:00:65:eb:61:e5:20:e4:01:
91:a5:ba:fd:99:7d:91:cb:f8:b2:cb:9e:08:71:00:
cd:67:83:47:81:f5:6f:6f:49:59:1d:96:39:93:50:
2d:7b:31:be:55:cf:12:a7:36:41:54:4f:89:f5:90:
db:3f:a7:d0:ef:40:70:41:7c:e6:46:6a:e7:55:67:
df:6c:0b:a5:27:24:23:4d:e6:0b:58:35:85:bb:d6:
cb:a0:71:ef:70:35:cf:f9:5b:c9:67:df:ca:fe:ca:
9e:b1:4e:e2:92:e3:5a:05:aa:11:ed:e3:a8:d1:07:
53:66:1a:91:8d:09:a0:c2:64:26:b5:06:81:f7:52:
c1:9d:a5:0d:1c:f6:72:00:7c:d8:f9:28:12:52:8a:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:7F:62:70:C6:33:1D:C9:F0:2E:77:AA:C4:2E:72:D1:FB:78:F7
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:07:e6:f3:91:a2:b0:fb:74:ee:53:51:3c:b6:38:95:55:8f:
26:ee:fb:e4:d3:56:a0:b1:9b:91:b1:92:9f:45:98:e7:dd:9a:
f6:8e:4b:f2:7b:9b:2e:20:b4:dc:ab:6e:1e:0c:1b:7c:65:35:
bf:89:86:4a:cb:2c:9b:38:3a:3c:45:6d:7b:ba:52:cf:82:2a:
38:e8:c8:a9:58:37:ed:a5:b4:f2:12:23:eb:4e:2c:d6:1e:65:
e4:29:02:2b:5e:a8:d4:74:63:02:d8:06:a2:b4:5d:a0:b0:88:
03:c5:f0:71:c4:48:71:2a:17:4c:89:28:fd:41:00:20:92:fa:
6a:d3:e5:e6:bd:dd:65:aa:8a:18:68:ea:d7:16:49:4c:6b:c5:
e0:ea:b7:b9:b0:33:75:3b:06:d8:6d:9f:d1:09:08:e4:e9:b3:
a7:da:1e:54:b8:2d:03:a2:5b:e0:30:0f:7f:36:58:3b:6d:b3:
9e:32:68:6c:ae:a1:08:1d:b5:6d:6b:52:bb:e0:ea:a2:db:d6:
eb:9f:39:a5:9b:7c:8a:d2:cc:c5:71:71:da:30:e7:b7:d5:28:
60:0d:4b:13:15:a8:30:20:15:7d:58:4c:34:c9:51:0d:f7:2c:
4b:36:f3:a5:c1:fd:1a:91:05:0d:b7:0e:d5:84:7a:eb:8e:68:
ca:e2:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:18:14 2026 by rpki-client