This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: H2lPabF+MaQ8zZWjKLWyitz1kmU8qz8O1Bwtu5f6fwY=
Subject key identifier: BE:37:88:66:14:19:2E:12:9B:24:D4:26:85:77:5F:B1:8D:65:96:26
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 019C40FD1ACC315B1DD73716E566DCA122B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0D84
Signing time: Mon 09 Feb 2026 06:00:55 +0000
Manifest this update: Mon 09 Feb 2026 06:00:55 +0000
Manifest next update: Tue 10 Feb 2026 06:00:55 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: F8mk+n5GBOkkCq8le0Rhq3cpyEvhLWDC8XGCyvfhC88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:1a:cc:31:5b:1d:d7:37:16:e5:66:dc:a1:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Feb 9 06:00:55 2026 GMT
Not After : Feb 10 06:00:55 2026 GMT
Subject: CN=be37886614192e129b24d42685775fb18d659626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:b1:a4:46:a4:7d:a5:6f:56:34:17:22:44:
37:ec:00:ab:46:e9:89:83:38:28:53:1d:21:50:ca:
30:b2:43:24:7b:99:74:ed:f2:66:26:c2:28:68:9b:
8b:58:af:ed:cf:17:21:40:3b:38:16:7e:ff:0c:b5:
f5:74:6e:d5:e7:f7:a9:a0:9a:6e:b7:ca:f3:aa:f1:
57:c1:bf:7b:f9:a5:01:9f:fc:3c:4c:c2:1d:34:28:
da:16:99:11:a0:f1:d8:d5:94:32:d3:14:a9:b4:72:
cb:c4:e6:55:9e:2e:f2:a0:f3:c1:6d:4d:16:43:27:
9f:11:3f:04:70:0e:b3:d0:f1:de:13:7b:19:b1:d0:
0f:ed:2b:d2:4b:cd:fc:48:92:c4:c6:d1:df:d5:d1:
77:5d:ae:2d:40:39:ee:a0:5c:66:14:8f:34:a3:33:
23:4d:71:0c:0a:b2:1d:f6:02:db:43:cc:a7:e5:64:
6d:4d:0d:21:56:38:0e:f5:4c:5c:36:d2:46:cf:82:
d5:bb:24:46:35:06:1a:ed:a4:f1:c9:a7:72:92:ec:
cf:e7:6c:09:23:45:f1:23:a1:6f:d8:1e:8a:39:af:
f4:31:37:33:b4:8f:81:a7:97:ba:0f:e0:c1:ba:4b:
da:d3:a0:8e:68:6b:53:23:d7:11:ce:c5:27:d1:73:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:88:66:14:19:2E:12:9B:24:D4:26:85:77:5F:B1:8D:65:96:26
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:90:73:ea:c6:34:3f:39:21:92:39:39:40:f2:b4:69:e1:33:
87:f3:bb:9c:94:64:55:ad:00:6e:47:ac:e4:e0:43:d8:e7:9b:
3f:27:03:2b:3e:13:cc:c8:2e:92:39:18:54:0a:d1:e0:5d:db:
03:12:af:8d:17:c9:f2:5c:f2:0e:d6:fc:06:4a:24:0e:cd:78:
6f:16:05:fe:eb:1a:2c:6e:2f:57:b8:dd:4e:bc:5d:d8:d8:64:
a2:3c:9a:12:8c:fb:cf:91:9c:3e:64:df:af:42:a9:3d:fa:91:
c8:88:40:30:4b:ca:45:61:32:fa:80:36:e1:bc:4f:29:9d:b8:
a5:9d:6c:0a:c8:2f:92:d4:f7:ad:60:c8:41:61:44:48:3a:97:
39:22:97:ed:5b:de:a5:19:68:6e:a9:c5:3c:53:e7:61:8f:72:
fd:0f:3e:dc:15:f7:76:67:fe:53:6e:c1:98:e0:09:35:1b:35:
5c:20:02:a3:58:1b:63:94:b2:bb:3f:1a:d3:3b:d5:cb:10:16:
8f:3c:03:fe:90:2b:3e:e4:b6:b9:56:44:b8:34:d6:fb:83:6e:
d9:b4:13:7e:ee:d5:b5:28:a8:9c:87:fa:9f:b0:14:a3:2e:52:
31:b1:17:47:b9:13:62:ef:2d:ab:bb:00:24:10:c2:23:11:06:
c8:d9:c8:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/RrMMVsd1zcW5WbcoSKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2
NzVjMzIwHhcNMjYwMjA5MDYwMDU1WhcNMjYwMjEwMDYwMDU1WjAzMTEwLwYDVQQD
EyhiZTM3ODg2NjE0MTkyZTEyOWIyNGQ0MjY4NTc3NWZiMThkNjU5NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KxpEakfaVvVjQXIkQ37ACrRumJ
gzgoUx0hUMowskMke5l07fJmJsIoaJuLWK/tzxchQDs4Fn7/DLX1dG7V5/epoJpu
t8rzqvFXwb97+aUBn/w8TMIdNCjaFpkRoPHY1ZQy0xSptHLLxOZVni7yoPPBbU0W
QyefET8EcA6z0PHeE3sZsdAP7SvSS838SJLExtHf1dF3Xa4tQDnuoFxmFI80ozMj
TXEMCrId9gLbQ8yn5WRtTQ0hVjgO9UxcNtJGz4LVuyRGNQYa7aTxyadykuzP52wJ
I0XxI6Fv2B6KOa/0MTcztI+Bp5e6D+DBukva06COaGtTI9cRzsUn0XM8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL43iGYUGS4SmyTUJoV3X7GNZZYmMB8GA1UdIwQY
MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt
ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5
LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5Bz6sY0
Pzkhkjk5QPK0aeEzh/O7nJRkVa0Abkes5OBD2OebPycDKz4TzMgukjkYVArR4F3b
AxKvjRfJ8lzyDtb8BkokDs14bxYF/usaLG4vV7jdTrxd2NhkojyaEoz7z5GcPmTf
r0KpPfqRyIhAMEvKRWEy+oA24bxPKZ24pZ1sCsgvktT3rWDIQWFESDqXOSKX7Vve
pRlobqnFPFPnYY9y/Q8+3BX3dmf+U27BmOAJNRs1XCACo1gbY5Syuz8a0zvVyxAW
jzwD/pArPuS2uVZEuDTW+4Nu2bQTfu7VtSionIf6n7AUoy5SMbEXR7kTYu8tq7sA
JBDCIxEGyNnI0A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:25 2026 by rpki-client