This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json)
Hash identifier: ZF+1YkOnSVYwCbrMdiKOzqmGR4rcJ9/gNFEjVkr3LRg=
Subject key identifier: AB:94:C9:C9:3A:3F:0B:B9:07:2A:C8:F2:B5:AD:93:FE:EE:A8:95:B0
Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Certificate issuer: /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Certificate serial: 019C4322903B5E45EBB87490D049A1741716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
Manifest number: 13CF
Signing time: Mon 09 Feb 2026 16:01:04 +0000
Manifest this update: Mon 09 Feb 2026 16:01:04 +0000
Manifest next update: Tue 10 Feb 2026 16:01:04 +0000
Files and hashes: 1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: 0PHt+IYrQ/CqOz4WBxONLGgLuvoR+1KxPWFvuXDPDPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:90:3b:5e:45:eb:b8:74:90:d0:49:a1:74:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Validity
Not Before: Feb 9 16:01:04 2026 GMT
Not After : Feb 10 16:01:04 2026 GMT
Subject: CN=ab94c9c93a3f0bb9072ac8f2b5ad93feeea895b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:75:40:fb:db:42:fc:ae:d0:27:79:44:31:
43:b5:16:fc:b3:9e:14:65:ff:5b:32:c4:0f:93:e9:
27:d7:fd:f3:70:7a:c2:e2:6e:16:5e:25:ed:ce:e7:
98:7d:c6:7b:77:1d:6f:c3:5e:19:ed:51:91:de:94:
f5:71:ef:2c:d0:77:46:8b:ea:3b:fd:14:7b:60:e0:
32:fa:50:1d:3a:b0:5c:b7:3a:05:21:d9:b0:18:bc:
e2:fa:ca:20:31:d7:95:29:0d:de:d1:6e:66:78:8c:
6c:70:fb:e0:88:dd:8d:43:10:3e:d8:25:34:5f:fc:
8b:47:2b:32:60:0e:51:ea:05:09:cb:46:8b:52:46:
ed:04:eb:bd:ec:6a:aa:b6:fb:13:4b:b3:e8:89:88:
ca:2f:c1:aa:cc:59:dd:ae:3f:d5:20:bf:b6:e3:fb:
ad:40:e5:1b:eb:cc:c7:4e:25:b6:b0:c9:84:a4:62:
cb:07:9b:c5:58:a8:b2:f0:88:b2:a9:b2:b8:1d:15:
30:ef:bd:1c:1c:9e:d6:d7:48:ac:63:f3:ff:ec:77:
ba:30:4c:81:53:eb:3e:f2:7a:9f:69:9e:6a:20:03:
aa:03:5d:84:95:bc:00:a4:7d:00:84:14:a0:41:c8:
55:29:f3:a6:b5:57:8c:d5:1d:53:26:5b:e9:16:48:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:94:C9:C9:3A:3F:0B:B9:07:2A:C8:F2:B5:AD:93:FE:EE:A8:95:B0
X509v3 Authority Key Identifier:
keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:77:ea:fd:6a:25:ae:82:d0:64:73:bb:4b:02:6e:3d:50:20:
dc:90:6a:c3:99:f8:60:22:a0:46:89:6f:76:eb:46:9e:9f:8a:
b4:a6:0b:8f:e3:aa:91:ca:22:df:a7:0a:9e:33:f1:1d:5a:21:
f9:be:d5:8b:ae:f0:2a:60:15:14:e4:df:1d:80:b2:72:95:d1:
9e:ec:b0:61:11:68:d1:e3:96:93:e2:a8:7e:f8:62:bc:a2:da:
ab:10:bd:7c:1c:31:2c:74:9a:c4:b0:89:35:e8:be:b2:c9:21:
38:2d:24:ce:1f:64:93:67:03:27:83:37:c1:6e:00:77:ed:71:
68:87:e9:19:3f:d2:c8:8d:73:8a:5e:7b:f4:2d:2a:3b:e4:fc:
15:a2:dc:d3:aa:46:1c:06:98:c2:5c:05:b5:0a:2c:d4:24:42:
b2:f7:35:c5:70:95:dd:ab:29:15:8d:e7:33:a4:2b:7a:49:d0:
df:89:45:52:eb:74:00:f5:cb:6c:26:23:d7:dc:d7:37:97:26:
e5:86:37:e4:fd:25:6e:4f:83:7a:60:6b:c9:aa:4f:9d:9a:78:
b3:d9:ca:cf:8c:56:7d:ed:b9:5f:b7:18:68:c6:55:52:e7:17:
7a:cb:e4:04:9e:83:cd:1d:8f:4e:74:33:e8:c8:35:a5:ac:80:
2a:d1:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:48 2026 by rpki-client