This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: K7Cvuu8sQpB0v7/0arOm4KUbkra44IAs9fmh9Pm14sg=
Subject key identifier: 71:E5:9E:7B:EF:C4:06:96:32:31:5A:BD:0F:87:56:63:88:03:F5:90
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019C4359034AEAD65C79086F18929D347E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0A31
Signing time: Mon 09 Feb 2026 17:00:32 +0000
Manifest this update: Mon 09 Feb 2026 17:00:32 +0000
Manifest next update: Tue 10 Feb 2026 17:00:32 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: LZqhopQVHE2zKMa2UaAI/ObwYB87emsr8/NLDSr5tX4=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:03:4a:ea:d6:5c:79:08:6f:18:92:9d:34:7e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Feb 9 17:00:32 2026 GMT
Not After : Feb 10 17:00:32 2026 GMT
Subject: CN=71e59e7befc4069632315abd0f8756638803f590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:69:a0:87:01:b4:86:95:01:26:e3:17:52:
e8:a7:e5:2d:db:4c:4d:e5:c7:2d:04:be:0b:47:27:
16:b2:11:30:d4:83:e2:a0:26:8f:16:df:b2:64:c2:
f3:c9:5d:a3:f2:47:8d:76:ce:43:38:a5:ea:65:72:
f8:c8:ba:f5:8a:83:30:5a:95:20:00:ce:55:0c:de:
b7:29:c6:d1:b2:3a:90:eb:24:f1:5e:6b:b1:c0:26:
64:33:e0:a4:83:4a:64:b1:62:5d:85:24:3e:06:6a:
37:dc:3c:83:0c:84:56:eb:e0:ad:2d:ad:ec:2e:f2:
15:b6:fe:7c:38:64:d4:91:6d:10:94:1f:60:54:27:
8f:55:7a:a2:fd:b2:20:7c:df:e8:7a:fa:20:40:30:
4c:38:ff:10:37:7c:1d:50:ee:c7:e2:65:3f:77:03:
bc:10:ba:85:f1:70:05:76:da:6c:02:90:3d:a5:ad:
48:7b:15:cd:43:6e:5a:61:48:c6:28:ba:d4:82:cc:
f2:2e:03:de:19:16:ec:a7:d6:c4:a2:a6:07:c7:14:
e6:e7:3c:12:8b:92:1f:1f:cc:64:e2:9a:54:b3:65:
95:a5:f5:8f:f0:f1:ce:18:15:c3:d3:08:ec:02:56:
dc:e6:e0:67:17:d1:30:53:0c:be:fd:72:d6:ae:b8:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:9E:7B:EF:C4:06:96:32:31:5A:BD:0F:87:56:63:88:03:F5:90
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0f:0d:90:07:75:fa:7d:d2:59:97:d9:f5:0f:90:0c:c8:62:
04:ce:c3:87:d7:29:41:11:68:07:f8:23:1a:b7:a0:65:09:59:
82:7f:5f:11:b8:b3:66:39:44:79:a9:74:56:09:0a:b0:ea:c6:
95:2b:71:ff:f7:68:12:7d:f5:33:e6:69:9a:1d:2e:7f:aa:7e:
ef:38:83:1d:fa:cf:b8:e2:f9:d4:69:d5:2e:11:40:31:63:06:
81:18:73:94:b3:47:10:44:69:cf:c2:67:92:e0:8a:d6:39:2d:
b7:1e:8a:68:7d:36:12:71:79:42:3c:95:ec:21:09:b8:93:2c:
71:af:65:39:3a:d3:35:30:40:a2:2e:77:d9:71:ee:ff:68:f4:
3c:c2:42:4a:95:55:1f:04:9a:ed:5f:23:98:5e:24:65:e7:65:
24:46:a8:90:a1:4e:3a:4d:4f:eb:91:80:03:16:9c:93:a4:37:
f2:82:9f:93:74:60:92:5b:f1:53:b5:e6:92:21:b5:75:68:76:
a8:62:d3:f9:e8:73:35:e3:75:83:9a:df:55:1e:1a:83:5d:e1:
30:22:5f:67:45:1b:49:9b:d0:5d:5f:cf:fe:25:a2:57:7c:34:
36:f3:5e:61:34:43:80:3f:bc:8f:a1:16:e8:a0:c9:ae:57:fc:
ec:a5:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:26 2026 by rpki-client