This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: zS8c87r4ZnYdIXIT57EVNBT8FzwORRdSOOBSFh72nEM=
Subject key identifier: 9E:73:2D:78:31:5F:E6:C5:73:13:6C:8F:DB:C5:F9:2C:0C:1A:DE:50
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019C41D8B3D9522C86F8E2DDB73FF16D301F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0A6F
Signing time: Mon 09 Feb 2026 10:00:46 +0000
Manifest this update: Mon 09 Feb 2026 10:00:46 +0000
Manifest next update: Tue 10 Feb 2026 10:00:46 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: dzQNX1FpLCyhDlKQTwB711bkzh+HP/1z+a7tzpskb78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:b3:d9:52:2c:86:f8:e2:dd:b7:3f:f1:6d:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Feb 9 10:00:46 2026 GMT
Not After : Feb 10 10:00:46 2026 GMT
Subject: CN=9e732d78315fe6c573136c8fdbc5f92c0c1ade50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:db:bc:48:d8:25:65:0a:e3:8c:e6:e5:23:
1b:bd:f9:bf:3f:e9:74:7a:6c:b2:2e:b5:30:af:68:
d8:84:bd:f3:f5:7b:8b:ac:d5:b1:81:9d:8d:84:8b:
52:36:da:f2:d8:b9:74:b0:57:8f:42:b0:d0:00:51:
15:a5:82:4a:e2:f7:8f:7d:29:ba:15:ad:06:c0:06:
45:1e:a4:ec:54:e7:c6:16:7d:83:23:a4:c1:74:38:
f8:d3:4d:39:cb:7b:91:3b:9d:b1:89:fa:0b:4c:b0:
b3:aa:15:ac:4d:47:98:36:2f:b2:2d:7c:81:3a:84:
87:6d:de:0d:c7:11:7e:c3:a7:44:15:b4:a5:ac:6d:
47:70:dd:5c:9d:51:12:2b:f2:9d:35:17:b4:c8:bc:
e7:b5:2d:7a:75:a2:f0:24:50:74:fd:8a:62:3d:d0:
9a:7c:8e:44:a3:98:6d:72:bf:f3:84:fc:06:a5:85:
8a:1e:68:8b:cb:28:fc:44:f2:e5:5c:3f:79:0c:d4:
0b:99:73:42:9b:8e:3d:b3:62:e5:94:6e:1e:12:31:
06:71:0b:c0:d6:38:ee:6a:16:77:fc:bc:c7:4b:5c:
42:48:44:6b:a2:9f:1b:97:3f:4f:b0:76:ef:59:ac:
db:69:d3:49:8a:6f:87:6e:fe:22:c0:11:43:90:d5:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:2D:78:31:5F:E6:C5:73:13:6C:8F:DB:C5:F9:2C:0C:1A:DE:50
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:26:72:74:e1:f2:fd:5e:c6:95:c1:dc:88:14:93:54:d0:dc:
83:22:46:ab:c3:7f:ee:97:e0:d0:fa:c0:df:26:7a:37:6a:57:
ae:bb:c4:d4:bc:e7:22:d6:3b:5e:50:20:fe:f3:60:2d:67:48:
39:17:5f:b8:e1:3b:a8:b2:c1:4a:be:53:55:1c:e2:6c:bc:d1:
38:73:0e:a9:c2:16:e8:79:c6:22:e0:48:b4:8c:66:9b:4c:98:
ba:ae:ca:b9:18:36:5f:f9:91:82:ae:74:9a:8b:a8:26:2d:8f:
ea:74:31:07:a7:41:d8:3a:4b:0d:ec:ab:77:be:37:58:fd:ea:
bc:dc:4d:54:f7:c3:e2:45:51:fb:65:72:5b:6d:4b:c1:f3:68:
32:f9:80:9d:56:02:31:d6:55:90:3a:76:e6:f6:6e:b3:3e:15:
f7:f0:4d:9f:21:ff:4f:47:7e:90:d3:8e:3a:2f:1c:d7:8b:ea:
67:20:b1:41:dd:ea:ca:71:67:3f:ee:97:44:f7:08:ca:15:1a:
a8:d6:77:e8:8d:7d:51:a3:0a:6f:d2:9f:50:92:d8:2c:68:16:
61:f7:d8:0e:e7:89:5a:06:09:89:eb:ae:da:e3:10:69:8f:35:
bc:57:4c:cd:50:53:9c:0c:1c:84:7c:d6:2a:ac:d2:22:a5:72:
61:19:b3:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2LPZUiyG+OLdtz/xbTAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGEyNjMyNDk4NDdjZjk3MzQ0NzQyMjEzNjQ0ZjkyOWJl
YWE5OTcwHhcNMjYwMjA5MTAwMDQ2WhcNMjYwMjEwMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZTczMmQ3ODMxNWZlNmM1NzMxMzZjOGZkYmM1ZjkyYzBjMWFkZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaHbvEjYJWUK44zm5SMbvfm/P+l0
emyyLrUwr2jYhL3z9XuLrNWxgZ2NhItSNtry2Ll0sFePQrDQAFEVpYJK4vePfSm6
Fa0GwAZFHqTsVOfGFn2DI6TBdDj40005y3uRO52xifoLTLCzqhWsTUeYNi+yLXyB
OoSHbd4NxxF+w6dEFbSlrG1HcN1cnVESK/KdNRe0yLzntS16daLwJFB0/YpiPdCa
fI5Eo5htcr/zhPwGpYWKHmiLyyj8RPLlXD95DNQLmXNCm449s2LllG4eEjEGcQvA
1jjuahZ3/LzHS1xCSERrop8blz9PsHbvWazbadNJim+Hbv4iwBFDkNXyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5zLXgxX+bFcxNsj9vF+SwMGt5QMB8GA1UdIwQY
MBaAFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAt
MzFiMmE2MDdiYTk3LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAtMzFiMmE2MDdiYTk3
LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiZydOHy
/V7GlcHciBSTVNDcgyJGq8N/7pfg0PrA3yZ6N2pXrrvE1LznItY7XlAg/vNgLWdI
ORdfuOE7qLLBSr5TVRzibLzROHMOqcIW6HnGIuBItIxmm0yYuq7KuRg2X/mRgq50
mouoJi2P6nQxB6dB2DpLDeyrd743WP3qvNxNVPfD4kVR+2VyW21LwfNoMvmAnVYC
MdZVkDp25vZusz4V9/BNnyH/T0d+kNOOOi8c14vqZyCxQd3qynFnP+6XRPcIyhUa
qNZ36I19UaMKb9KfUJLYLGgWYffYDueJWgYJieuu2uMQaY81vFdMzVBTnAwchHzW
KqzSIqVyYRmz8A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:23 2026 by rpki-client