This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
File: aNLCXQU0pAJ8aVViqM5PABzVOW8.mft (raw, json)
Hash identifier: +3iEXchqwLDZCEF8B29DreEyhyydVjzSjK1fJ5tU5H4=
Subject key identifier: B3:24:A5:EC:64:2B:0D:99:1C:57:1A:7F:39:C2:25:19:D0:B4:B8:F7
Authority key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
Certificate issuer: /CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Certificate serial: 019C420FAD6A233D2874A7B3E8A6B0779422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
Manifest number: 1463
Signing time: Mon 09 Feb 2026 11:00:49 +0000
Manifest this update: Mon 09 Feb 2026 11:00:49 +0000
Manifest next update: Tue 10 Feb 2026 11:00:49 +0000
Files and hashes: 1: URwUlX1aGUQjALJuv2b7NQZnlQY.roa (hash: tfOWykptTnti4HmolEIB0RYCOL60/EO4faOftMz4e/U=)
2: aNLCXQU0pAJ8aVViqM5PABzVOW8.crl (hash: TTJG/jXjat06d4cNCcSfR2QUNp0smJIxlC6+LGC57Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:ad:6a:23:3d:28:74:a7:b3:e8:a6:b0:77:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Validity
Not Before: Feb 9 11:00:49 2026 GMT
Not After : Feb 10 11:00:49 2026 GMT
Subject: CN=b324a5ec642b0d991c571a7f39c22519d0b4b8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ab:1a:47:2d:cb:dd:82:b7:38:26:08:23:71:
d7:00:39:df:e2:c1:2b:da:e0:87:b9:d0:51:ff:54:
63:9e:77:fd:dc:05:f8:ce:57:d6:56:03:41:09:9e:
ba:c0:b1:95:3e:10:d8:0a:a7:96:e1:47:0e:4e:e7:
a6:6f:6b:6e:02:4c:fc:bd:da:13:5d:b3:e8:01:7a:
49:31:59:24:a2:d3:a9:12:da:68:bd:71:b9:41:38:
cc:65:36:55:fa:68:ae:1f:d2:4b:17:5a:97:45:2d:
39:3a:08:e5:ad:6c:bb:89:8e:ae:05:52:7a:ff:7a:
35:06:a1:28:b0:c5:03:3a:9c:30:3e:03:7e:96:48:
50:cb:b5:62:d3:e3:48:0c:1f:0d:9a:d1:01:76:f5:
19:57:af:b5:e5:a2:11:a6:93:96:77:3a:54:db:4c:
14:e2:6b:e9:a7:de:89:dd:e6:bb:ca:22:37:9c:12:
0f:0f:dd:f9:27:b8:5b:be:8e:82:a2:44:a6:ff:85:
8d:7d:00:48:65:fc:68:d3:20:99:20:df:66:f6:8a:
4a:ae:bc:78:e0:0c:e4:b9:68:36:46:6d:4b:25:8c:
80:b9:22:84:69:81:2d:1f:5f:62:c6:01:4b:c6:28:
69:42:5a:f8:af:82:56:57:91:b2:83:fb:9c:25:ab:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:A5:EC:64:2B:0D:99:1C:57:1A:7F:39:C2:25:19:D0:B4:B8:F7
X509v3 Authority Key Identifier:
keyid:68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:70:6d:18:d1:18:d0:fe:f6:82:24:95:10:02:b0:e7:95:29:
97:a0:87:92:41:6e:3b:fd:88:d8:76:eb:91:0b:8c:33:1a:51:
fe:70:5a:64:1c:bb:0d:fd:ee:77:18:cb:df:b4:09:02:25:d0:
43:4b:4a:61:1f:60:e1:bf:3f:07:e8:18:26:9d:1f:35:8b:1a:
67:1e:10:d6:06:14:1c:2e:6f:ee:da:21:9d:b3:6f:09:5e:01:
15:79:d7:f2:de:e0:23:07:3c:dc:a2:af:30:f3:66:93:0e:65:
67:f1:5d:68:88:2e:56:c8:cc:69:d2:ee:25:29:53:29:aa:7d:
e8:bc:c8:5f:10:91:15:4a:ce:eb:5c:e1:af:43:67:40:1c:8f:
7d:2a:ad:7a:35:d2:16:d7:04:fe:27:1b:42:af:08:17:24:74:
aa:c1:63:b6:56:f9:97:11:5e:73:3b:74:c4:4a:22:5e:08:60:
93:ae:48:b9:7d:1b:c8:bf:26:c8:fd:70:e8:bd:a2:c0:01:6a:
ff:f6:d9:de:a0:7f:c4:57:7e:a3:16:01:b3:8e:e5:0e:d9:bd:
18:69:ac:8f:0c:dd:9c:32:85:38:25:ed:0f:38:eb:2e:34:6c:
ad:d1:23:30:c0:10:0e:9f:0e:e3:ee:35:de:52:30:4f:6a:81:
7b:ee:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:16 2026 by rpki-client