This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier: 4mnGh9d1d5FH8WjswNN7TuRdLfzxv3GF4MsI23SEXxQ=
Subject key identifier: 52:EE:A3:E6:30:ED:D5:70:19:38:D9:98:51:DF:A1:6C:72:72:5D:E0
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial: 019BF72DB03C5A09C13DA9ED8599881F9ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number: 064D
Signing time: Sun 25 Jan 2026 22:02:05 +0000
Manifest this update: Sun 25 Jan 2026 22:02:05 +0000
Manifest next update: Mon 26 Jan 2026 22:02:05 +0000
Files and hashes: 1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: BqyQHbFPAciWsFL1VWXqoXOKPCPW5x/KQrPMQHKxI1o=)
2: widqsiuwPxfEW8bWQB1tkfB48s4.roa (hash: 0gWr/NZK7bJ0qmV7EdmyhABMtqf0GTQXbYmyzeQSrko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:b0:3c:5a:09:c1:3d:a9:ed:85:99:88:1f:9a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
Validity
Not Before: Jan 25 22:02:05 2026 GMT
Not After : Jan 26 22:02:05 2026 GMT
Subject: CN=52eea3e630edd5701938d99851dfa16c72725de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:8f:c8:e8:9a:3d:29:dd:6d:98:66:5a:77:
5e:a9:a9:45:5b:2b:c1:0c:0b:fd:98:96:a8:61:61:
c3:14:88:bf:66:07:5a:4e:00:fb:4b:4d:80:27:ff:
86:c9:54:13:4d:46:a3:e7:3a:3a:7c:67:3d:9b:38:
cc:00:b9:b3:46:3f:79:d8:12:8a:82:d5:56:22:51:
d3:28:cc:26:46:24:be:a1:eb:53:5f:92:1c:ad:ed:
1b:72:4e:90:7b:f6:35:22:02:fb:c5:09:cf:f3:73:
fe:12:ad:37:83:9a:db:c4:47:48:a4:6c:be:be:5f:
7c:a3:30:4f:1a:00:c5:c3:f6:1f:f1:2a:84:75:4a:
1c:8f:f7:f7:5e:51:87:0d:4d:3a:08:f9:b6:83:e6:
0f:87:a5:0f:63:91:dd:50:c4:47:c8:89:09:59:f5:
2f:3a:21:19:34:66:d4:7b:a4:98:ca:7a:23:38:01:
39:42:d8:40:6b:4f:2a:69:38:c1:de:d7:e6:77:57:
65:d5:6c:b1:a9:e8:07:1e:46:cb:97:7f:b9:f1:e4:
86:d4:9f:1e:5d:e9:72:d0:1b:f2:ce:0d:f4:97:59:
27:82:b3:90:57:1a:cc:33:60:62:46:78:66:ca:d8:
a2:8b:3d:26:70:95:ef:b5:f9:e8:76:42:20:7a:09:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:A3:E6:30:ED:D5:70:19:38:D9:98:51:DF:A1:6C:72:72:5D:E0
X509v3 Authority Key Identifier:
keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:d4:c5:a0:e7:3f:ef:6e:ee:9f:ad:52:52:da:d0:ba:bd:
c4:75:d7:0c:5b:85:a7:f6:05:3e:73:7c:49:f1:28:04:a6:c4:
c2:e7:00:25:c8:a2:f1:77:26:b7:9d:9e:41:ac:ab:34:f8:f9:
76:e5:a2:b4:4f:ad:03:17:f2:d5:4b:9a:ce:24:ac:d5:8b:16:
f7:d2:ab:c8:02:0c:93:91:91:c6:91:86:31:63:65:a5:76:07:
27:a8:bc:4d:98:54:09:92:2d:6c:99:26:07:14:fe:ba:f3:4d:
0e:1c:8b:7e:6c:ae:f5:0c:77:3c:73:c5:67:92:92:dd:f4:ac:
2b:5b:31:1f:18:ac:f1:fc:85:23:87:68:cd:9a:c9:7d:2d:38:
b4:d9:ea:06:41:29:b2:3a:36:d7:dd:df:3d:a7:ce:f6:81:a9:
d2:5e:c8:7f:22:e7:1a:3e:e5:b8:22:5b:a0:2c:50:eb:88:80:
a5:26:53:e4:84:ef:b0:ed:49:0b:9e:7b:3e:4e:38:7e:85:f7:
d1:b1:83:a3:0a:ff:27:9d:83:c2:b3:a4:9a:9c:70:54:d6:6e:
b3:45:42:00:78:5d:ad:ef:d0:2f:4b:7a:20:0f:72:c8:bc:7e:
eb:d3:70:9a:20:74:2d:19:9b:aa:57:93:04:70:77:8d:d7:65:
e5:af:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:19 2026 by rpki-client