This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: Xq6l/7zPxv3SRpRz3pYA46XFheVIlgOz5o5d4pycYTE=
Subject key identifier: D7:2D:C5:CC:90:46:61:94:9A:32:51:30:CC:D6:26:55:D6:E4:9D:AE
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019C43C7481CD896EA7B8A09B7450C96DD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0FF0
Signing time: Mon 09 Feb 2026 19:00:59 +0000
Manifest this update: Mon 09 Feb 2026 19:00:59 +0000
Manifest next update: Tue 10 Feb 2026 19:00:59 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: NZh2/o5DN1RmNm9VVP3H4ewhZEibjgV6w/QAjGVwMlQ=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:48:1c:d8:96:ea:7b:8a:09:b7:45:0c:96:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Feb 9 19:00:59 2026 GMT
Not After : Feb 10 19:00:59 2026 GMT
Subject: CN=d72dc5cc904661949a325130ccd62655d6e49dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:cd:32:2a:51:6f:da:2b:5b:3e:ab:ff:0b:
4d:9f:f6:28:46:82:1e:3e:7f:16:5a:0e:dc:ca:ae:
4e:9f:a5:b0:62:a9:c7:d2:f7:b8:86:66:1e:43:16:
17:9d:ba:6e:3b:49:eb:ac:ef:9b:11:74:c9:8b:d8:
74:91:07:8c:07:83:db:5b:43:36:46:d4:d2:57:f2:
90:00:8f:5e:f0:91:c1:d2:3d:de:7b:61:06:31:3f:
fc:41:2b:a4:6f:da:32:db:08:80:3e:52:89:6f:e2:
b0:26:c3:e7:60:0a:6e:77:ed:9d:05:7e:62:5f:a1:
49:f0:cb:a7:63:0f:6e:0d:39:89:3a:4f:b2:f7:7e:
74:0b:25:aa:0c:47:9a:99:24:e8:7d:82:91:a2:a8:
80:f3:38:f3:2e:ed:c4:59:67:5b:0d:52:9a:67:14:
3a:1b:e3:67:1f:53:a7:89:6a:37:15:00:07:a8:0f:
d2:1a:5f:d3:bf:59:7a:d1:a2:7e:6b:10:f4:61:ab:
56:83:68:29:12:1d:de:6a:ab:84:67:bd:80:1f:1c:
d7:72:6a:8e:af:d3:00:02:3b:ba:d7:17:da:d7:3f:
37:d2:fa:88:d7:e2:cd:c9:55:6c:3b:d6:b3:af:c4:
58:d1:fd:e1:ff:2c:ec:1a:07:16:64:d1:fe:f9:a5:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:C5:CC:90:46:61:94:9A:32:51:30:CC:D6:26:55:D6:E4:9D:AE
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4a:3e:ae:57:ac:7d:7e:ac:e0:0f:5f:3d:bb:da:9e:65:8c:
bb:e9:8b:f5:ea:42:82:8c:4c:47:9b:56:46:80:09:e3:83:d7:
ba:5c:95:cb:f0:18:15:a8:30:d3:95:57:09:53:c2:c7:85:12:
1c:e0:f9:67:3a:41:8e:dc:39:dc:31:e8:9b:ba:ce:ca:00:bb:
45:25:9b:8a:ca:f7:83:2f:60:42:4d:3e:ba:6c:c8:f2:36:5a:
36:bc:16:be:3f:f7:7c:2a:a6:0b:23:3e:bb:4b:45:1a:46:fb:
86:1b:c0:a4:e2:eb:90:cd:a8:eb:27:af:65:7f:02:be:24:0a:
89:74:4d:2e:49:e9:54:59:2d:90:22:be:4e:a1:52:98:63:08:
e7:cf:a2:8f:4c:74:7b:c1:d1:7a:e0:87:7a:6a:49:1e:65:53:
5e:0d:1f:8a:be:dd:e1:6f:92:0e:87:15:66:aa:73:6c:b2:06:
09:49:96:da:f9:7b:10:2d:2d:8e:37:9e:76:6f:ba:65:d3:6d:
53:98:23:37:4a:a7:f4:6a:c0:b7:bb:3d:6b:69:a3:d8:79:ee:
1e:28:6f:a6:0b:98:fa:19:1c:f0:a6:bc:21:ce:c6:10:65:b8:
68:48:a5:a8:94:ac:c6:06:90:6f:ee:f5:a2:5f:c1:75:0a:ef:
2c:e8:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:48 2026 by rpki-client