This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier: vwq1JC9mkLefU+aKRQq/nEKP1RN5osdGG6pCphj/scs=
Subject key identifier: 8D:C9:9F:C0:63:9A:16:75:41:4E:97:05:30:CA:08:2B:F9:85:D1:36
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer: /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial: 019C43909FC19326E42B34460EBA1F511144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number: 28
Signing time: Mon 09 Feb 2026 18:01:17 +0000
Manifest this update: Mon 09 Feb 2026 18:01:17 +0000
Manifest next update: Tue 10 Feb 2026 18:01:17 +0000
Files and hashes: 1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: vrnqMbzMAG1/RUItgx+2/s2MyjqwaEt7xB93fcmy40Q=)
2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:9f:c1:93:26:e4:2b:34:46:0e:ba:1f:51:11:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Validity
Not Before: Feb 9 18:01:17 2026 GMT
Not After : Feb 10 18:01:17 2026 GMT
Subject: CN=8dc99fc0639a1675414e970530ca082bf985d136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:1d:cd:3a:dd:e7:7a:32:fb:51:cb:be:26:
d8:d3:7a:f9:f9:b6:ce:f0:e6:94:18:65:bc:57:9b:
da:fd:4e:dd:df:50:6d:16:a8:7c:bf:54:c2:69:b5:
ce:05:5f:c7:a6:9e:4e:ee:5b:80:c0:04:2c:ba:eb:
77:83:d6:f3:ba:4e:9c:d6:da:0c:71:22:69:fb:0d:
94:3f:e8:7d:d3:a1:52:65:59:be:06:b5:45:d8:5a:
f2:07:50:77:6a:52:c7:83:71:3e:43:66:e5:05:38:
6d:44:23:c6:2a:e8:99:c5:41:99:09:55:5e:0f:11:
89:e8:64:4c:5f:e4:27:f4:b4:a9:c9:e2:2e:70:59:
9e:db:34:76:14:ba:00:f3:49:ed:e2:a0:fa:07:bb:
ba:d7:e0:1d:8f:65:e3:c4:e3:c6:98:4f:b7:35:8e:
ce:3d:51:8d:4e:a9:aa:92:3b:6a:95:c5:89:e5:99:
48:38:78:0d:74:ba:eb:cb:51:2a:7f:7c:11:0d:12:
b2:79:6c:e3:3b:fe:65:31:43:f2:c4:89:df:c7:cd:
fd:78:d3:78:0d:e4:31:e1:79:37:da:47:6a:02:47:
c6:4b:35:43:85:51:31:49:1f:d4:68:01:f8:11:ae:
bd:08:02:5f:5a:35:c1:c3:06:1c:37:c9:ef:c9:41:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:9F:C0:63:9A:16:75:41:4E:97:05:30:CA:08:2B:F9:85:D1:36
X509v3 Authority Key Identifier:
keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:da:6f:6c:c5:7b:3c:4d:07:b0:39:99:11:d2:c7:e3:cb:93:
f6:cd:bd:13:c7:b5:24:ec:14:df:f2:5d:af:9d:b9:e2:62:e9:
0c:d1:32:9e:73:f4:7e:e7:82:6e:0a:2b:30:99:bf:2b:23:c1:
ca:aa:cc:86:2e:59:8c:69:9e:0c:02:a2:ed:d9:f6:97:d3:9f:
1e:1a:af:5d:8b:76:a1:eb:48:6e:a8:7c:44:2b:0a:1c:35:8f:
38:8c:f7:ec:ec:2c:65:62:4b:ce:29:fa:21:56:31:95:8c:67:
d8:53:66:69:3e:b0:54:55:47:19:ab:c0:8b:e2:d1:4b:a7:99:
7d:bb:16:7e:8a:73:32:74:13:31:9e:04:f0:b7:c8:e7:76:45:
0f:cc:10:1b:45:5f:c3:cf:84:11:ac:b2:01:4c:ee:df:6c:89:
e3:f2:ca:5c:ce:c1:a3:0e:cd:a9:62:6d:39:e6:a4:4c:7e:fa:
b4:2c:99:7b:c9:2e:94:68:ab:88:ea:d0:85:90:b8:d9:d0:ba:
17:88:05:dc:5f:9a:40:47:d5:57:07:de:2c:0c:82:70:d5:21:
b9:de:48:b2:43:f7:86:d7:9d:9c:3f:32:9a:6c:f0:a5:a6:5d:
49:f5:d4:86:55:dd:ae:fc:85:f9:c2:af:8e:12:19:14:80:f5:
6e:39:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:44 2026 by rpki-client