This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: i0TiuZuwRced3cdXiM8pSrEcfBg6fFwlemtvl1AuYMI=
Subject key identifier: 88:6E:D5:50:E0:3D:45:08:86:55:9F:E7:34:BB:CD:4D:62:BA:74:CF
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019BF651056DF16990586672E65EDDE6871F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0915
Signing time: Sun 25 Jan 2026 18:01:03 +0000
Manifest this update: Sun 25 Jan 2026 18:01:03 +0000
Manifest next update: Mon 26 Jan 2026 18:01:03 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: 6233nAClx8U30QGUVQ5OJ3EOvnfnT2HbO75F7Q71zWU=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:05:6d:f1:69:90:58:66:72:e6:5e:dd:e6:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Jan 25 18:01:03 2026 GMT
Not After : Jan 26 18:01:03 2026 GMT
Subject: CN=886ed550e03d450886559fe734bbcd4d62ba74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:f0:ab:28:16:75:7b:7f:e3:c7:38:89:7e:
92:7b:cc:94:ff:f1:fa:8e:50:08:f2:5c:17:f6:a4:
6b:d6:64:56:7f:7c:04:6d:41:51:de:51:16:a7:24:
fd:a9:e7:57:77:40:d9:e5:5f:d7:07:fd:bd:8a:10:
f7:cc:54:a7:30:94:9a:34:75:99:1b:08:9b:0e:63:
53:05:f7:a5:a8:4c:bd:98:4f:3b:6f:14:84:5c:c6:
e5:f6:92:a8:5c:fe:a4:bf:47:4d:88:e7:9c:b0:4d:
6c:61:68:56:7a:e3:f0:98:d5:07:c5:96:85:ef:44:
f5:f0:73:b9:53:db:80:49:74:81:c7:b4:bc:cc:6b:
2f:39:d5:b2:bd:37:54:67:3f:db:8f:e9:01:4b:10:
bf:76:55:dc:a8:62:6d:f4:86:fc:0e:cd:a6:cc:48:
d9:1c:96:d7:e9:2c:07:63:04:e9:e4:cb:63:dc:3b:
12:a0:64:d3:e4:fe:aa:ca:12:61:42:2f:9d:c3:ac:
b1:d9:53:c2:61:1e:df:cb:97:c5:21:ae:5d:e4:2a:
76:3b:ff:f1:3a:d9:51:98:7b:4f:21:e1:e1:16:94:
47:54:76:3f:f9:35:4c:e5:9d:d2:93:d7:91:3c:e0:
54:2d:81:fa:b9:ff:49:2c:b2:41:28:ba:0a:f1:6d:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:D5:50:E0:3D:45:08:86:55:9F:E7:34:BB:CD:4D:62:BA:74:CF
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b0:53:ce:35:83:40:b2:8b:73:b9:12:2a:95:20:86:ab:e6:
1c:e9:db:98:7e:a4:11:d3:d9:b4:83:ac:47:97:50:0c:53:f7:
9c:b9:3f:77:d2:22:10:9d:b6:57:fc:ed:cc:1e:e8:36:ce:61:
5a:fc:15:f3:aa:f8:dc:4d:0d:2a:6f:45:57:f8:6c:6d:01:74:
e3:4f:e3:a6:3e:00:bb:e2:6e:1a:78:c6:39:e4:8c:b4:e0:81:
ab:a5:81:2a:53:75:2a:02:e0:1c:72:ae:4a:cd:a3:06:df:09:
c6:d4:ef:84:6f:e3:04:e1:59:c8:c9:88:3e:71:8c:c6:11:c0:
e0:69:17:39:53:38:9e:9c:e5:58:40:14:14:29:1f:bd:3c:50:
5e:05:b6:ab:e1:67:dc:24:08:db:fa:3c:07:f8:3c:15:9e:ff:
24:a8:86:97:06:c0:45:93:74:7b:61:4e:16:db:f7:58:b2:6d:
24:cf:9e:56:3c:02:35:55:44:f7:e6:a5:14:1f:a6:2a:18:5a:
ac:0d:c5:72:38:9d:8d:a6:e3:53:09:1e:4a:7d:86:27:b5:8e:
bc:b3:ba:0d:af:b4:36:d7:39:b4:b4:6d:43:f2:40:e6:a8:44:
a1:ae:6a:ff:e5:95:68:b5:ea:e9:d9:c8:42:3c:b3:fe:89:c7:
32:71:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:27 2026 by rpki-client