This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json)
Hash identifier: 3NcRKFKW4/fkBmh8DPcqvZemLmVvxbccvXeEJ0Q0i3A=
Subject key identifier: CF:32:46:A6:83:EF:68:58:64:BF:40:35:ED:6B:DC:C6:B2:02:41:B2
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 019C2DE47BEA23F5396C8B3F520BF981B3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
Manifest number: 1813
Signing time: Thu 05 Feb 2026 13:01:14 +0000
Manifest this update: Thu 05 Feb 2026 13:01:14 +0000
Manifest next update: Fri 06 Feb 2026 13:01:14 +0000
Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: ynVCkTLEYkirvoQVgXbCLvrQs01z/3Zh4J+JxpArhWo=)
2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=)
3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=)
4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=)
5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=)
6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=)
7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=)
8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=)
9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=)
10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:e4:7b:ea:23:f5:39:6c:8b:3f:52:0b:f9:81:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Feb 5 13:01:14 2026 GMT
Not After : Feb 6 13:01:14 2026 GMT
Subject: CN=cf3246a683ef685864bf4035ed6bdcc6b20241b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:cf:d0:4e:86:af:9b:a0:20:0d:cd:cc:7a:
2b:19:50:54:f2:b7:a0:ee:58:bd:b5:93:5f:ab:4f:
09:49:20:25:92:6c:2b:53:96:b2:6b:6f:30:6e:70:
9f:e3:35:20:c2:3b:17:07:e0:7b:d3:4e:81:c3:ab:
5f:99:28:3b:e9:31:0d:20:fe:11:ea:a4:6e:20:38:
87:ea:2d:10:5e:83:91:f0:64:75:53:38:96:ce:f6:
3b:a2:b5:ce:b9:2e:30:1a:ff:c1:3f:c9:b7:88:b2:
ff:71:9a:ad:86:83:60:22:e9:1c:a8:fd:23:b6:56:
11:10:02:0c:17:f3:89:fe:7c:95:d6:ff:c0:34:0b:
24:08:b2:b4:f6:cd:db:1f:05:4f:17:30:e1:a3:2a:
95:be:2f:79:ab:93:ef:60:1c:94:21:b3:04:9b:cc:
6e:51:b6:62:5c:2d:3f:8c:00:73:f8:44:98:c0:bc:
b1:27:24:f2:88:88:27:93:47:54:9b:2f:a5:64:7e:
5b:e0:62:c1:87:84:c4:de:82:fb:1f:6b:b6:70:1d:
a1:2d:ad:39:7a:b5:b5:da:37:75:63:7b:4d:9f:c6:
6e:89:b4:dc:1f:c9:2a:c6:56:4e:d4:53:ae:62:ca:
66:3c:21:c4:ea:55:b6:a1:af:51:6b:49:9e:a9:6a:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:46:A6:83:EF:68:58:64:BF:40:35:ED:6B:DC:C6:B2:02:41:B2
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:c9:b9:b7:52:f5:51:d9:5e:88:5f:b9:74:09:1e:ea:60:
de:75:fc:20:ef:32:aa:73:b3:6f:bd:cc:ad:ce:c8:83:2b:b7:
eb:27:6b:16:59:5b:9f:c6:38:41:c2:f5:2e:4f:d5:91:62:1e:
d0:df:46:4e:57:69:3d:0d:76:66:6a:32:8a:a0:ee:cb:01:0a:
11:e8:d1:5c:58:9d:24:be:ff:35:74:ad:18:49:f8:64:b3:b9:
d5:0c:f9:af:29:2e:a9:88:47:11:2c:cc:87:6a:a5:80:d7:92:
da:9d:23:83:62:c7:13:9f:a5:67:7c:58:72:86:df:49:80:e1:
06:bb:a7:1d:0e:94:90:ca:5c:02:7a:40:4f:1f:0d:b2:64:2c:
dd:aa:50:4c:54:1d:f2:0e:68:5d:24:6b:a9:a4:1a:f0:d4:4f:
f4:a5:51:aa:4d:10:45:e6:75:33:75:0c:12:4e:37:99:02:bf:
0e:92:70:64:94:c5:93:59:ea:99:ee:95:e1:ce:37:ac:66:94:
3b:5a:36:00:4d:08:d9:05:2c:f4:dd:d1:03:18:57:07:7d:15:
3f:d7:df:6d:42:69:55:28:4b:b1:aa:61:ab:f9:34:6d:60:ef:
e7:fe:a0:6f:d1:52:39:db:8b:05:1d:9a:b5:14:3b:21:06:3e:
61:25:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 21:12:19 2026 by rpki-client