This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: HZF99dWkI/Qu39WpJ1ybWAcFeyyGFK9kGUBDjjspCMc=
Subject key identifier: FC:91:BD:29:D4:0F:C5:42:7E:62:37:8A:70:5D:66:A0:C3:74:44:06
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 019C446B8210976C29EE4141AF7263A8CF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0563
Signing time: Mon 09 Feb 2026 22:00:22 +0000
Manifest this update: Mon 09 Feb 2026 22:00:22 +0000
Manifest next update: Tue 10 Feb 2026 22:00:22 +0000
Files and hashes: 1: BKpTCMfaKLw7yMMu4I6xltN6R7Y.roa (hash: GRV0cRwAqNgjNvn/FF2Y105789sE37bG6GFfvU+/74s=)
2: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: SW7Tj3BRVUmyC6fkTLPVGpy9rYzMloZMi2DELuMtrMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:82:10:97:6c:29:ee:41:41:af:72:63:a8:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Feb 9 22:00:22 2026 GMT
Not After : Feb 10 22:00:22 2026 GMT
Subject: CN=fc91bd29d40fc5427e62378a705d66a0c3744406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:fe:1c:81:0c:8d:d8:c9:99:ee:05:c9:a0:
0d:b5:f7:cd:ca:90:c2:92:a1:59:bd:0e:cf:d2:30:
d8:4d:dc:ad:50:38:0a:46:15:e1:cd:9a:51:0a:b2:
6f:58:7a:c3:86:83:3c:4d:55:05:73:46:ad:7a:be:
68:0b:ab:74:7a:40:25:98:24:30:9e:fd:88:4b:c9:
7b:af:6c:13:cf:4f:3e:06:59:1c:61:6a:36:2f:72:
7f:61:92:e9:8d:7a:ff:c5:94:ee:cd:13:b3:71:db:
19:80:86:10:51:77:79:ab:39:6f:f9:ef:6a:0f:63:
49:f0:f7:8f:07:70:86:f8:e0:46:b2:76:7b:98:0d:
03:18:58:e1:25:b5:23:79:25:db:bf:74:3f:f3:71:
53:90:5e:dd:ad:d5:9b:0d:56:f6:36:76:ef:37:d5:
22:29:17:2d:1c:93:10:59:5e:f3:35:c8:7b:db:20:
05:e0:d0:a1:3a:9b:61:4e:df:4e:f9:74:14:c1:5c:
e9:c3:de:39:80:92:61:89:7f:d0:2f:d1:35:9e:f5:
2d:65:dc:b7:29:fe:7e:20:40:0e:74:29:c7:21:cf:
2f:68:d1:94:86:25:2e:22:e0:fd:87:e7:bf:3f:f8:
c9:2a:c6:b9:c3:ee:ab:22:7c:9e:28:48:42:4f:24:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:BD:29:D4:0F:C5:42:7E:62:37:8A:70:5D:66:A0:C3:74:44:06
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4f:5f:3f:60:a2:cf:da:b7:dc:ef:63:30:e0:f4:84:0e:e6:
80:e2:26:96:0b:55:cd:eb:ae:29:62:7f:d1:7a:01:ee:41:80:
bd:7f:2a:23:c2:77:8d:43:70:5e:e1:10:17:fb:a7:2f:c8:9a:
df:73:4a:62:ac:1e:f6:bf:5f:c0:65:fa:86:a1:3f:1c:ac:0f:
bc:b5:10:a2:17:0a:5b:81:19:e7:7e:06:fd:1e:e2:06:aa:64:
c2:46:91:44:2c:4e:13:d3:15:65:d7:fd:fe:e4:cb:ab:f8:89:
ee:44:7f:6f:52:f5:e5:2b:20:06:b5:f8:dd:0d:67:72:36:12:
96:6c:3d:60:41:2e:4d:8a:a5:f3:36:80:e3:f1:8d:82:e8:3c:
58:6c:72:3b:89:0a:8f:c9:2b:2e:bc:05:f8:86:8d:8f:16:4d:
00:cb:6b:28:42:36:14:29:36:e6:aa:6d:00:20:18:e1:f3:ab:
ae:68:d4:c6:a3:b6:d1:22:72:6e:ef:bd:57:ad:0f:57:6d:cd:
34:85:33:50:be:74:ac:28:29:a3:b5:21:22:be:32:49:c5:a0:
4f:e0:b2:e9:a1:9c:81:47:c9:a7:09:7e:2d:d8:30:3a:db:cc:
6f:d8:b1:b4:dc:e8:47:b6:07:09:88:3e:82:2b:76:71:94:21:
00:ed:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:03 2026 by rpki-client