This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: 4oJDglKj/7Ormqqn6D8e1sOM9d0Gha9Gc6QFcfpMVu0=
Subject key identifier: D5:4D:62:A3:23:87:79:A2:FA:C1:4A:6C:F6:CB:ED:18:31:D7:65:CB
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 019C424685747B9625323E5DC50473B771F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 12:00:43 +0000
Manifest this update: Mon 09 Feb 2026 12:00:43 +0000
Manifest next update: Tue 10 Feb 2026 12:00:43 +0000
Files and hashes: 1: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: YNKIYQhkB881JLqBhe3sMy2UQfZsfK48Ub1GBL385yw=)
2: cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa (hash: tIaWypa+2w3+EhClID+rbKASz6IrpIfwCtlLXu1+XIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:85:74:7b:96:25:32:3e:5d:c5:04:73:b7:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Feb 9 12:00:43 2026 GMT
Not After : Feb 10 12:00:43 2026 GMT
Subject: CN=d54d62a3238779a2fac14a6cf6cbed1831d765cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:7c:d9:4b:03:f6:30:6b:f1:a2:e0:aa:51:
71:9b:3a:41:13:4c:87:52:ca:e3:69:94:26:bd:20:
f6:88:ff:b5:69:75:95:68:ef:de:8a:dc:3c:aa:49:
7e:7d:f3:1a:61:c8:f7:88:da:d1:37:c2:56:b0:e0:
f6:1c:dd:7f:b5:da:00:25:bf:ae:0f:73:07:6c:15:
81:6d:98:89:57:80:25:e9:b4:06:e2:8d:42:b6:9d:
5a:63:93:cb:e3:f1:fa:4e:f0:83:05:e9:50:a5:9b:
27:1b:7c:11:75:77:cc:e5:8c:a5:d4:89:8c:75:98:
67:f3:82:58:96:49:ac:51:df:cb:69:26:25:09:d3:
57:20:05:a2:02:70:43:58:4f:90:86:3d:99:a1:c5:
0c:60:ab:52:87:f9:1d:c0:20:ec:43:43:ec:a8:0a:
91:86:96:e4:e0:0f:a9:1a:00:bc:1d:c6:ae:ed:e2:
60:eb:22:d0:85:1c:3b:cc:eb:9d:5d:80:10:60:65:
0d:47:8f:f1:8e:a1:6f:ad:d8:cb:38:4a:01:46:cf:
76:50:c0:47:84:70:6b:23:c4:56:c5:db:69:be:e0:
00:49:b3:7b:39:c9:fc:8b:fb:b0:df:4f:8c:01:f3:
ef:da:12:f4:63:7d:13:bc:e5:4f:9d:43:0f:f9:b9:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:62:A3:23:87:79:A2:FA:C1:4A:6C:F6:CB:ED:18:31:D7:65:CB
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:23:4b:06:0c:b0:df:ba:66:25:6c:75:ef:b3:f9:42:c9:45:
45:31:8a:b8:1d:91:70:0e:d4:39:00:d2:cb:73:78:d5:cf:a9:
66:dc:56:ea:12:10:c2:5b:5d:a4:01:88:25:c1:0c:6e:b3:8f:
1a:6e:04:31:53:e8:e5:a7:30:3d:07:d4:a4:f8:a5:f1:21:cf:
68:c4:05:b5:fb:10:0f:7f:21:6d:12:af:d4:ac:1d:cf:09:bf:
ef:8b:97:d5:16:37:8f:60:53:f2:f9:3e:3a:7a:e5:1f:22:75:
36:07:27:63:18:e3:cb:5a:99:1f:c4:e0:60:97:1b:a0:c9:9d:
37:4e:5f:20:4c:6d:80:de:14:95:fe:ff:63:0a:b2:18:ab:bc:
2e:d5:91:01:0f:3a:5f:d7:23:a4:4e:42:53:04:86:00:0f:ed:
e9:92:91:cc:1c:e8:c8:a4:3d:65:9a:94:7e:33:0a:21:91:e4:
fd:7b:e9:fe:13:7b:04:19:5d:8a:5c:2b:50:b4:9f:20:70:32:
50:ce:d7:ec:3f:98:df:d8:a0:10:8c:f7:e5:de:37:dd:0f:65:
f5:2a:56:56:15:14:6c:7f:46:75:ad:84:79:5e:46:50:a8:bb:
e4:9a:4e:69:83:df:d0:e2:4b:2d:fd:1d:20:94:df:73:b3:61:
7e:1b:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:45 2026 by rpki-client