This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: q2/KTdos5K1MHpDqhNpGPqBBlDkaigEkSw4hHzXafkM=
Subject key identifier: 28:F6:A2:23:CB:0E:87:21:F1:D6:45:EA:C3:F3:67:C6:CF:40:37:F8
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 019BF72DABF843DC99CA9B4265B457E122D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 16C8
Signing time: Sun 25 Jan 2026 22:02:03 +0000
Manifest this update: Sun 25 Jan 2026 22:02:03 +0000
Manifest next update: Mon 26 Jan 2026 22:02:03 +0000
Files and hashes: 1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: TtcbeQ8Ecktr0RUGh+278U9JW4Yr2dgy9niUEcTQEGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:ab:f8:43:dc:99:ca:9b:42:65:b4:57:e1:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jan 25 22:02:03 2026 GMT
Not After : Jan 26 22:02:03 2026 GMT
Subject: CN=28f6a223cb0e8721f1d645eac3f367c6cf4037f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:fb:ec:49:d0:ab:b5:f4:e2:66:2a:4e:a6:
75:86:ab:99:ca:98:75:f1:07:94:bc:48:99:ef:0c:
bd:27:8d:2d:fa:66:cd:50:46:a6:f5:42:ab:7c:37:
22:56:7b:64:87:cc:3c:50:5a:98:3d:60:a5:02:94:
a3:73:a1:63:05:cf:42:c4:99:2c:50:48:01:b5:98:
52:a8:66:75:d4:5d:e3:97:25:bc:1b:24:40:a4:fb:
38:fd:b8:9d:9c:75:bb:11:af:3d:87:d6:5e:a7:7e:
38:a1:7a:e1:00:19:3a:23:35:e6:ca:c3:73:8f:50:
87:37:3e:ba:d7:e5:d9:db:45:64:93:eb:aa:ed:f0:
e6:a1:50:64:e4:d0:b8:d5:62:6a:78:57:a8:55:41:
67:fa:96:4a:6b:9c:0f:90:c7:37:6b:64:58:ea:c9:
49:45:31:bb:da:df:f7:46:71:11:55:36:16:29:e2:
8b:8a:c7:64:2c:a7:27:a1:7c:90:f7:c1:e8:3a:83:
ca:97:5f:ae:f4:d0:45:94:fd:c4:fa:77:0c:7f:32:
d5:e6:94:d5:2d:e0:29:8c:81:c2:85:01:cc:ba:7e:
2c:19:29:fc:a0:75:a1:22:b7:a7:6e:ab:d6:b0:47:
09:86:e5:e2:0f:1b:12:f7:59:ed:3c:0f:33:84:3d:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:A2:23:CB:0E:87:21:F1:D6:45:EA:C3:F3:67:C6:CF:40:37:F8
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2c:f4:bb:99:bc:77:ee:88:7c:df:40:31:60:43:6f:91:12:
e3:39:a9:06:86:b9:d6:c0:c2:ae:82:be:12:6f:27:3d:e2:b1:
9a:3f:d9:64:72:e8:8e:fd:b1:1b:0e:49:b3:b4:47:50:ca:0e:
87:75:01:61:e5:ad:8f:69:f4:db:37:a7:4a:89:21:26:db:81:
99:55:29:3c:19:af:1e:d1:07:c2:8c:cf:f1:c5:df:4c:24:65:
74:ee:71:4d:c7:53:20:fa:05:bf:6b:5f:12:4d:7d:b0:52:77:
87:ea:e7:12:c0:eb:1f:ae:b4:4c:f4:fe:ad:2a:eb:ee:2e:28:
b3:85:9e:c0:97:b8:19:04:38:1e:f4:95:28:d9:80:b8:1b:7b:
2f:13:df:af:a0:77:fe:f9:2d:30:b0:26:e9:9a:3e:e0:04:22:
56:e7:a3:94:f9:c4:65:c1:ed:a3:f4:9c:d7:02:3d:a6:c8:dc:
b0:fb:df:4d:ef:4f:da:28:0a:a9:17:92:fb:8d:ba:d8:7d:31:
2d:73:06:a6:93:a0:44:2d:02:8c:7b:12:c9:c3:3b:45:3f:f2:
c4:33:e8:3d:ae:ab:4e:9f:fa:cb:12:72:41:f9:bb:5c:49:ad:
f8:54:2a:2a:bc:50:65:49:ab:79:ed:e1:72:16:cf:70:b7:2c:
dc:b7:78:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:53:02 2026 by rpki-client