This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: akTxqVl+sxMhqF3zOGOtbyxlOArqD0qGmiycNmrG7yE=
Subject key identifier: 4B:4D:9C:93:BE:37:6E:84:AE:07:B7:91:67:0A:30:DD:E7:00:CC:E5
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019BAEDD2BD6D5EC6AD3DFE4755F957AC333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1515
Signing time: Sun 11 Jan 2026 21:01:28 +0000
Manifest this update: Sun 11 Jan 2026 21:01:28 +0000
Manifest next update: Mon 12 Jan 2026 21:01:28 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: Q/IlNad36tSBXtABQo46LXXJSmGfHjQu2QRUuNLSzA8=)
2: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (hash: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ae:dd:2b:d6:d5:ec:6a:d3:df:e4:75:5f:95:7a:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jan 11 21:01:28 2026 GMT
Not After : Jan 12 21:01:28 2026 GMT
Subject: CN=4b4d9c93be376e84ae07b791670a30dde700cce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:9e:2a:df:32:1e:62:60:d2:86:bc:99:45:
32:02:6c:c5:9e:2d:19:dc:a0:88:74:95:e4:46:9f:
c6:eb:03:96:c9:92:44:e6:cd:3c:19:12:ca:e7:96:
ff:a4:df:ce:f2:09:0c:c5:a7:16:bf:fb:ae:75:74:
3b:ba:41:55:bf:23:a4:c6:ed:c8:28:18:61:92:9b:
52:50:17:82:d4:7f:fd:2f:38:6e:74:89:89:23:9f:
77:60:54:9e:43:bb:af:c6:b8:00:e5:c4:76:8e:e8:
01:f1:27:ff:22:02:98:49:65:f0:80:d6:47:e2:25:
0f:9f:d4:e1:61:d3:b1:bc:f1:44:27:14:51:c5:7e:
82:2e:64:0b:12:a4:51:15:d9:52:90:e3:71:26:22:
b6:f8:0c:8b:c2:6d:b5:03:ae:13:13:64:80:17:df:
ab:b9:0c:fd:b9:f3:c6:aa:98:11:5b:42:23:9f:b2:
24:74:91:16:cc:f6:54:15:59:28:e8:1e:27:94:df:
b7:a6:52:bf:5f:93:00:6b:e8:12:64:c3:f4:7f:63:
f7:26:18:20:90:fe:3c:48:71:fa:7f:a5:45:8b:44:
19:23:d2:aa:26:01:53:15:8f:59:b2:ba:fd:1a:6c:
01:23:01:4f:6e:84:1d:76:63:1f:c6:c9:f1:0a:d1:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:9C:93:BE:37:6E:84:AE:07:B7:91:67:0A:30:DD:E7:00:CC:E5
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:04:e5:de:7d:ce:2d:ed:44:6f:32:95:a0:62:19:0c:43:0e:
41:c6:50:87:58:4a:9f:80:d7:ad:d8:24:1f:11:55:12:aa:cf:
ea:fa:e5:4f:53:c4:ae:59:1c:58:d5:04:46:43:73:62:8b:fa:
18:81:6e:9f:97:62:e2:88:e2:58:f5:a8:ec:1f:f8:94:f2:97:
6f:c9:53:4c:75:3c:c1:f8:0e:0b:85:31:fb:75:f4:40:71:1c:
2b:fc:d7:ec:5a:31:f3:ff:c2:a0:11:e5:c6:a2:04:b2:1c:d2:
a1:0c:e8:f2:ef:6f:45:6f:e5:cb:50:16:0f:dd:76:16:1b:29:
f3:0f:a7:7b:f4:78:74:a6:bc:46:f5:dc:38:79:3d:df:9f:3d:
74:fc:04:2b:62:c9:2a:8b:47:94:13:a7:34:b3:8e:85:33:ac:
b3:bb:7f:81:9d:a5:f7:60:dc:1d:89:d0:e7:28:d5:32:33:c7:
7a:df:db:24:59:77:29:e8:a7:40:03:2c:6e:f5:70:7c:56:a5:
d4:05:43:df:ba:68:3d:46:cf:b6:c4:ff:98:67:e6:86:10:2d:
90:f7:f5:3b:56:25:44:e1:3a:89:32:03:1e:60:52:c3:5a:b9:
74:81:2f:e3:02:aa:8a:48:b0:d9:91:1c:d4:f9:1c:f5:f9:c6:
06:8c:19:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:56:39 2026 by rpki-client