This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: SC+tMVaJNHGEdCFQOuapGSSj+Va6eFpLI65+33VcIrQ=
Subject key identifier: BD:99:A0:E7:BB:89:BF:05:CD:9B:DE:8C:0B:8B:19:48:20:97:AC:DA
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019BFB409706F55106695B4617187EFAC3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 180C
Signing time: Mon 26 Jan 2026 17:01:12 +0000
Manifest this update: Mon 26 Jan 2026 17:01:12 +0000
Manifest next update: Tue 27 Jan 2026 17:01:12 +0000
Files and hashes: 1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: xBMbuXv74jHUy3So636geR++g36EjRKRwQOg8xWlWB0=)
5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:40:97:06:f5:51:06:69:5b:46:17:18:7e:fa:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 26 17:01:12 2026 GMT
Not After : Jan 27 17:01:12 2026 GMT
Subject: CN=bd99a0e7bb89bf05cd9bde8c0b8b19482097acda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:b5:df:a7:c8:b5:73:cd:61:c7:d8:66:45:
c5:e0:d4:91:b5:4c:66:14:9c:4e:a0:3b:b2:74:f1:
b1:3d:65:d4:16:b0:09:86:76:34:ce:bb:a2:fe:87:
61:fc:28:3b:c2:be:67:5a:97:8e:04:72:e9:74:58:
28:83:af:9b:e8:59:ef:b3:41:3f:c8:1e:be:db:f5:
5e:7e:69:2f:bf:72:27:93:cf:ca:fe:78:5f:2c:9f:
34:ba:7a:3d:99:ce:fa:6c:62:e7:a2:8f:16:98:c1:
e4:2d:a1:54:a7:06:43:09:f9:c4:9f:d3:23:7d:f9:
80:88:02:f9:4e:c2:7b:dc:66:41:c3:3a:c2:6a:82:
45:6a:e0:b7:d6:82:92:f0:96:fc:f8:56:2b:68:a3:
64:75:08:70:6e:0a:19:43:43:58:51:cc:74:3c:40:
d2:ef:b6:55:1f:76:b4:65:58:68:f4:a6:0c:2a:0b:
36:5f:cf:c2:e7:28:d9:56:9b:10:5f:74:4c:58:1d:
e5:a5:64:f9:c2:cd:5a:80:dc:eb:b0:d5:c8:22:40:
5f:19:aa:a0:29:55:ac:11:f3:5f:d9:71:d4:1d:d6:
ac:87:d1:33:15:f3:a5:43:1d:19:96:76:9a:36:27:
f6:b2:ee:67:69:79:42:e5:72:b4:11:c9:99:32:1f:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:A0:E7:BB:89:BF:05:CD:9B:DE:8C:0B:8B:19:48:20:97:AC:DA
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b9:ed:11:61:f5:b0:19:0e:b6:54:c4:ed:0d:39:20:9a:86:
03:05:13:5e:51:74:f4:55:10:7f:34:70:9d:cb:6e:40:89:1b:
cf:9e:2b:b0:b4:dd:b1:cc:1a:a4:a1:2d:9c:2a:16:9c:a2:a7:
fb:f1:96:dd:a4:0a:f6:ed:a9:0a:48:16:dd:53:b8:3b:18:82:
e5:09:12:60:21:47:35:0c:85:c9:1e:8c:b6:d5:dd:d1:47:6f:
5f:94:b8:0f:19:0d:b4:50:1c:10:24:c0:87:0e:d9:e0:34:cf:
f2:0d:42:db:00:d3:4b:3f:b4:37:d8:b1:9b:81:69:91:c7:bf:
95:54:85:7b:6c:ae:77:21:ff:07:ea:a8:f1:1e:3d:91:9b:9f:
59:ef:05:84:86:37:ac:c4:5a:06:24:3a:46:6d:68:24:f2:88:
10:04:ab:b1:d1:ae:eb:52:ed:09:7d:98:4e:1a:e1:68:50:73:
ee:42:49:09:3f:34:e5:8c:43:88:f5:83:b5:7b:20:39:ce:e2:
23:5b:59:79:14:a2:60:fc:d7:8a:d3:f8:3d:11:68:c0:6d:ab:
19:57:9d:8c:d7:c4:3c:ff:e8:00:96:4c:51:03:3e:8e:d5:d8:
db:e7:c3:67:de:89:ec:74:32:f2:49:bc:1d:e8:57:cf:76:35:
0c:ba:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:43:23 2026 by rpki-client