This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: xo1JPwvxZjjwN/OzORK6XBZikNyz5f2ZjvXr/TtGrRE=
Subject key identifier: 43:E1:4E:A3:4B:41:A3:51:C7:0B:C3:C1:30:E0:82:03:CE:19:24:52
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019C41336A9950D93EC5CF75C81948BEEA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 183D
Signing time: Mon 09 Feb 2026 07:00:14 +0000
Manifest this update: Mon 09 Feb 2026 07:00:14 +0000
Manifest next update: Tue 10 Feb 2026 07:00:14 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: qrq69RShI/bg2aVt9e/0MCkEr8R96IqbF33/dgIjncU=)
2: ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa (hash: 87TB6uHBD00xhJxzxPfF6P3fX0oGRc/an9mxW40Dcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:6a:99:50:d9:3e:c5:cf:75:c8:19:48:be:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Feb 9 07:00:14 2026 GMT
Not After : Feb 10 07:00:14 2026 GMT
Subject: CN=43e14ea34b41a351c70bc3c130e08203ce192452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:46:ff:8d:23:03:d9:1e:11:57:45:ad:2e:
76:07:e6:b5:d1:4a:7c:e3:0b:59:25:57:a9:6c:77:
f3:75:64:3f:ad:fa:03:5f:eb:ac:cb:07:7c:ca:88:
65:a8:c2:eb:5b:e5:0a:fa:42:16:f6:95:00:5f:3a:
5b:01:e3:15:e6:49:38:8e:23:e1:4e:0f:53:69:3a:
1b:13:85:19:5d:04:de:1a:97:81:fb:73:09:fe:27:
48:cf:fc:c8:36:73:40:78:f5:3d:cc:56:9b:7c:70:
aa:84:9c:a7:ae:23:d4:c1:69:76:1d:19:07:9f:33:
6b:47:d3:08:d3:95:15:2e:dd:4f:5b:09:7f:e3:26:
00:26:24:32:4f:ce:72:da:aa:58:ec:d6:4e:73:cc:
0d:20:02:5f:43:89:29:1e:5f:0e:7b:d9:03:2b:c3:
a0:42:30:72:82:fc:54:a0:bc:a2:9e:b4:fd:09:5d:
66:5a:52:67:22:84:15:79:14:9d:9b:12:cf:a3:df:
7e:91:f2:d7:b9:8b:60:4e:59:a9:63:01:c2:b1:37:
43:95:1b:ff:a8:99:6a:c9:ba:7e:79:46:d0:dd:63:
19:d9:e2:c3:f2:79:0c:83:32:5d:c3:fa:ca:1e:02:
42:6f:26:d1:0b:dd:8c:0b:09:65:31:64:ba:2c:d4:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E1:4E:A3:4B:41:A3:51:C7:0B:C3:C1:30:E0:82:03:CE:19:24:52
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:33:35:ea:f8:bd:90:a9:84:c3:54:fe:66:91:0e:f1:32:
d9:4d:d9:89:c4:e3:09:77:d6:1a:72:c2:11:e9:2d:d0:46:da:
37:1f:a7:c6:cb:6c:1c:67:c3:2b:bf:6d:1b:61:5a:a6:39:a6:
22:72:20:53:da:a0:a8:a3:99:36:ea:88:2c:94:d2:94:5f:4a:
69:cc:fb:b2:6a:84:4d:0a:06:07:f1:4d:73:9e:49:c0:28:b2:
e5:b7:69:03:ec:8d:45:d8:c2:4f:3c:ba:12:92:3d:de:c4:02:
59:c1:de:88:63:d2:8b:88:47:7f:56:25:40:e3:23:c7:ef:84:
a0:91:fc:2d:23:67:ec:b8:50:e8:e7:8a:f1:b0:fd:03:b9:ae:
4e:36:91:67:8b:00:15:68:8f:1e:30:35:dd:ef:3a:81:a0:32:
bc:b7:55:6e:eb:1d:74:42:42:6f:ed:49:21:50:dd:4a:a0:32:
2a:8e:8e:11:bc:4d:a3:57:27:93:f0:1f:55:0d:6f:fc:81:7d:
73:74:a2:16:7c:34:e9:28:22:3c:cc:5f:b0:b3:db:dc:26:dc:
2f:3c:bc:91:5d:c7:2a:5f:79:f2:0f:1b:8c:47:63:4f:54:b0:
d4:92:9f:89:4e:a6:c4:e6:c9:11:5d:8a:5e:39:20:08:26:c1:
9a:83:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:33 2026 by rpki-client