This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft (raw, json)
Hash identifier: efQLm1AfyE7/2RSos7MydETun1TuBYPLQxcLQsKCqac=
Subject key identifier: C4:4A:4E:CD:06:A3:D1:04:FA:CA:B7:D7:E8:08:84:D8:48:43:6B:DC
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 019C42B40F0213D9D64DD4018EC94C071B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
Manifest number: 4F
Signing time: Mon 09 Feb 2026 14:00:22 +0000
Manifest this update: Mon 09 Feb 2026 14:00:22 +0000
Manifest next update: Tue 10 Feb 2026 14:00:22 +0000
Files and hashes: 1: AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl (hash: eTtOfD4jDdw0Yxtadi5s6sRbgIrxoka/dVxPf2R2o7o=)
2: mwJT56lh20lnnPNb2evS5T-qWow.roa (hash: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:0f:02:13:d9:d6:4d:d4:01:8e:c9:4c:07:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: Feb 9 14:00:22 2026 GMT
Not After : Feb 10 14:00:22 2026 GMT
Subject: CN=c44a4ecd06a3d104facab7d7e80884d848436bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:3c:fe:d6:89:20:1a:dd:25:23:79:1f:ff:
1e:42:58:ee:5c:0a:92:c2:a3:18:d0:f7:dd:a3:d5:
5d:9b:db:42:37:dc:57:92:4b:6c:2a:d9:3d:92:62:
10:f1:a1:3c:54:a4:fe:9c:c4:63:69:bb:cb:a1:45:
41:fa:02:d4:93:71:74:4b:ea:56:42:36:91:72:61:
8c:57:19:94:1e:e5:b9:5e:a9:1b:be:ee:61:43:7b:
e3:a2:3b:55:69:ef:59:ab:f1:ef:fe:fb:32:25:75:
29:93:9b:98:d7:7d:0b:08:6f:59:26:c4:0b:b8:2f:
85:da:5c:56:ac:19:b4:1e:df:2f:65:31:de:d4:0a:
19:0f:97:32:5f:9c:5b:a6:f3:1b:24:0a:4f:fe:8e:
24:cd:08:18:a8:66:70:51:cc:b3:85:66:91:23:71:
e1:6a:ae:d2:05:a9:71:f1:cd:88:3d:fd:49:10:d3:
5c:66:9e:57:db:83:5b:79:b8:8a:61:32:d7:ff:e4:
ae:87:ee:38:18:5f:c8:b7:87:87:2c:2c:4a:7f:e2:
32:12:1b:10:dc:65:18:b9:73:82:77:e6:d5:88:33:
c2:2d:04:e6:6e:4a:1c:8e:81:71:6f:c2:df:96:d4:
bb:af:8f:f2:37:88:c5:4b:9c:c3:35:06:00:43:f7:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:4E:CD:06:A3:D1:04:FA:CA:B7:D7:E8:08:84:D8:48:43:6B:DC
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0c:90:02:43:ab:37:8b:f3:cb:1a:aa:f8:31:11:90:7a:b1:
31:3a:a1:91:35:cd:99:32:9d:72:9e:c8:98:1c:e7:b7:41:a1:
be:71:43:99:42:7c:de:14:14:4e:55:3d:ee:18:54:4f:1e:20:
45:9d:c3:4f:58:71:3b:7e:47:04:3d:24:4b:5d:1a:7d:fa:ca:
6f:39:bc:a0:db:bd:34:63:48:4d:6c:29:8f:7e:92:d7:dd:8a:
40:45:d4:7d:dd:64:7d:7c:fd:ca:bc:6b:29:32:fc:68:c8:01:
e5:a7:45:1b:43:69:b9:12:32:2f:6c:33:eb:c7:cf:98:c2:d7:
db:cd:f4:a8:61:1a:ba:b1:dc:04:d1:f0:00:ef:f6:b2:d8:61:
21:a8:e4:84:60:5d:79:81:e8:78:c8:50:f8:1a:38:44:c0:bb:
0e:93:25:01:bb:38:2e:39:73:61:5e:f8:b3:7e:7e:28:3b:e7:
77:af:4c:e1:1e:79:a3:09:69:78:6d:08:ac:fa:11:4c:ad:f1:
eb:01:76:c7:25:74:33:37:19:5d:3d:ab:63:fd:9f:ec:1c:38:
4b:40:a5:01:8d:52:af:b7:4a:ac:9a:cd:ff:1c:08:b7:99:09:
ee:79:cc:6a:84:d3:3d:12:a3:44:2d:f8:b1:a4:5c:1e:de:69:
4c:64:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:31 2026 by rpki-client