This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier: KcUANyld5FjfVoBtN8sQjsjuHfn8ZEnIOsVPCFrBs4Q=
Subject key identifier: D6:C3:1E:AF:5C:CF:3E:00:F8:39:39:1B:EC:32:51:A8:3A:AC:E2:C0
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 019BF5AC210AFE6312D5D79540F86D1DB606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number: 18E9
Signing time: Sun 25 Jan 2026 15:00:57 +0000
Manifest this update: Sun 25 Jan 2026 15:00:57 +0000
Manifest next update: Mon 26 Jan 2026 15:00:57 +0000
Files and hashes: 1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: hdO7vUb0LFRuODSNzqStnNaiUs06EXlisLKTfJom8ts=)
2: Mr6e66-hduQ_2Plh7o4YAdI0bng.roa (hash: LT3XRkl0zkPeI7NxrAQBrMnnE/3d0HUOmAJz1gmL73c=)
3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
4: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (hash: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:21:0a:fe:63:12:d5:d7:95:40:f8:6d:1d:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Jan 25 15:00:57 2026 GMT
Not After : Jan 26 15:00:57 2026 GMT
Subject: CN=d6c31eaf5ccf3e00f839391bec3251a83aace2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:e5:c5:8f:2a:3a:1b:1a:1a:9f:ac:39:be:
c6:2d:de:d0:aa:4c:ca:2c:2d:ed:b2:2a:fb:67:ac:
5c:de:db:83:dd:35:b7:9c:89:90:6e:a7:b1:0d:b7:
fe:12:b2:f4:85:02:f9:a3:1d:da:60:75:3c:78:a1:
96:7c:c6:ca:74:f3:b6:86:77:19:0e:d7:88:ac:1f:
6d:de:15:6c:52:63:58:b0:f4:ba:e8:2d:30:ff:88:
45:54:4d:6f:58:a6:ab:cf:c5:1d:58:2c:e1:8e:9a:
c6:26:55:98:f6:a5:31:18:6b:3e:37:a1:ea:07:1e:
40:c6:20:a6:71:b0:de:a8:60:03:e8:c8:55:6e:88:
b6:81:27:5d:79:4d:bf:51:14:e0:c1:ca:c1:f6:09:
ad:22:5b:47:16:f2:62:bf:ec:fe:d4:23:46:52:9c:
70:a0:79:da:a2:30:b3:3d:de:f7:e4:5b:12:67:7d:
96:30:be:94:ff:8f:48:5a:b9:e0:9b:ca:87:c1:61:
4a:85:23:ba:d6:4f:b3:e9:03:57:62:a0:a1:a0:66:
dd:1e:fa:d9:08:8c:09:97:0a:65:6d:b9:ba:dc:74:
e1:b9:2b:4d:07:13:60:7f:f0:26:23:d2:e9:83:d9:
58:4e:78:b4:b6:eb:55:ee:ff:c4:2f:51:b6:07:d8:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:1E:AF:5C:CF:3E:00:F8:39:39:1B:EC:32:51:A8:3A:AC:E2:C0
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:a5:ee:0b:68:29:56:61:e2:9a:13:aa:38:3a:0d:11:43:
1f:56:f9:2d:10:85:71:72:65:84:54:8e:74:fb:98:ee:17:a1:
32:90:7b:c7:83:70:75:e4:63:c7:e8:8b:bc:8e:31:90:77:f6:
a4:23:d6:e7:bc:f4:31:11:5e:29:ae:41:d9:49:c6:2f:6a:5d:
30:de:15:9b:66:18:e2:89:e5:f3:10:96:1f:a7:1f:dd:08:a0:
cd:5a:d6:62:2a:0e:c3:a2:f5:3b:14:0d:2a:26:f0:11:a2:ac:
4c:10:f3:cc:ad:65:94:5f:1e:86:c1:08:b1:0f:62:ed:8c:39:
a0:14:e7:32:6f:e2:06:91:88:a0:51:9b:99:d3:b9:51:d4:5b:
bb:8e:13:62:00:23:e8:50:c1:18:7a:f6:da:1b:12:14:8c:11:
09:71:6c:90:b4:30:f0:e4:6a:7b:2b:e4:9c:08:0c:c0:ae:96:
2e:24:9e:90:7d:ad:3c:68:17:e5:32:82:66:0d:87:ad:39:48:
39:e2:aa:ce:58:40:b1:50:80:01:ba:e3:f8:29:7a:fe:10:7c:
79:c6:c8:50:af:3e:23:c5:a4:ea:5a:0d:52:3b:35:33:da:48:
5a:39:f9:60:90:8a:3b:83:67:84:4d:a0:6d:e7:c0:69:6c:14:
c3:ad:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:30 2026 by rpki-client