This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: ZKrOqak8R5ETR2EFvFXUYEEwzFriCVPnk+lrQ3QRSS4=
Subject key identifier: C5:B5:A7:BB:7B:21:80:42:34:0C:DE:F2:E0:95:EC:17:8D:5D:A6:E9
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019C41D8604E2574A6E4911BD44DF0264F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0AC3
Signing time: Mon 09 Feb 2026 10:00:25 +0000
Manifest this update: Mon 09 Feb 2026 10:00:25 +0000
Manifest next update: Tue 10 Feb 2026 10:00:25 +0000
Files and hashes: 1: 0Uw7FccfKNxCjGPf2hVBJgYjK_8.roa (hash: QBA3BhIvae4UDpBmnAlSgFNKaZRBT/P3+nkHLfuA2WE=)
2: 5PKpxbjzQTcMRVXd3V65NrZpjbU.roa (hash: G2QqltWnjrOjGGa9OTf7TSLmfjW8TR4ivagT+kd4cyI=)
3: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
4: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: f1fhGDnSh2MJVMYAS6pbjidcec5pUwEcdju6lVmOMZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:60:4e:25:74:a6:e4:91:1b:d4:4d:f0:26:4f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Feb 9 10:00:25 2026 GMT
Not After : Feb 10 10:00:25 2026 GMT
Subject: CN=c5b5a7bb7b218042340cdef2e095ec178d5da6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:af:2b:29:89:5c:5b:58:73:90:1e:f4:89:
72:9a:20:a8:20:8f:85:b6:8a:bb:eb:fa:92:a5:1c:
75:d3:41:23:20:8d:d5:0f:e5:30:c0:10:b0:23:3b:
ee:98:4f:9d:27:16:fd:47:76:b1:28:1d:71:16:06:
98:26:d1:e7:fb:8a:ca:ab:f7:b7:75:63:3a:da:0f:
a6:ce:32:80:af:ca:f0:93:db:f8:45:68:1b:dc:07:
36:68:b9:a1:41:66:61:d4:bc:f7:a3:f9:85:16:08:
f6:96:4b:47:6c:f4:b3:67:ce:5a:b0:e7:95:8b:4b:
1c:53:b9:14:6d:6e:ba:f5:64:86:25:a6:96:96:15:
02:8b:57:fe:3a:fd:0e:55:d6:f1:0f:bb:72:ac:1d:
a3:6c:10:9f:72:26:ef:99:0c:02:e5:f8:6a:99:e9:
78:e4:c2:ea:87:23:49:4f:db:99:bf:f0:85:9a:a4:
bb:d4:8f:ff:40:4d:65:d1:5f:37:79:54:ba:c4:00:
a5:4d:7f:a7:b9:e5:85:4b:09:be:03:7c:af:13:10:
40:f2:d6:00:c9:64:f8:ec:29:bf:aa:88:23:cb:f8:
54:08:66:06:84:96:72:02:94:86:3a:d5:e1:4a:e8:
76:2b:6a:6c:b5:f5:98:f2:ba:d9:1c:1f:b0:e8:b7:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:A7:BB:7B:21:80:42:34:0C:DE:F2:E0:95:EC:17:8D:5D:A6:E9
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:47:57:4f:8d:b0:6e:ef:cf:a1:e9:0f:d1:a2:8d:7c:63:4e:
72:d8:8d:e4:eb:9d:fc:32:b7:ee:10:d4:b8:34:a7:62:a0:ae:
93:22:89:9e:42:4b:30:c2:68:06:0c:0a:b7:87:3b:a0:71:3a:
42:a2:50:95:b1:db:f0:08:73:cf:66:58:81:5f:b8:0a:20:e3:
9a:42:07:b9:bb:36:cc:46:66:60:56:4c:2c:61:bb:57:73:40:
19:6f:9f:cc:e0:2c:86:dd:b0:41:d5:eb:ba:27:c6:75:34:be:
06:fe:bc:f7:81:e5:65:ef:7b:5b:84:b6:87:10:8f:36:a6:94:
61:8a:d4:b2:8e:51:5a:8a:ef:2b:af:38:d2:82:e9:c8:dc:8f:
59:f1:82:b3:f0:a1:f4:34:f8:d2:80:86:dd:4d:57:cb:fe:5e:
d6:d8:8c:d2:90:18:22:2c:ef:a3:fd:fd:4b:83:2f:7b:9f:c8:
12:8a:87:10:0f:0a:be:1c:84:ba:d2:5e:cb:de:37:75:81:c8:
4e:b1:84:c2:99:96:e3:72:94:4e:71:61:fb:6c:28:e6:d8:3b:
2f:88:16:a7:4d:9c:eb:d6:b2:ed:7a:8c:b6:f1:8d:14:d9:6c:
75:64:bc:1c:34:c0:06:03:ef:8b:8a:4e:cc:37:2c:38:17:92:
98:70:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 13:45:18 2026 by rpki-client