This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: fE3lspEtuwWFmmuOuALXo68MeXgnFI3s+C2NIVikt4s=
Subject key identifier: 3C:84:49:0E:9D:D9:E6:72:DB:CA:AA:B1:8B:7F:0A:52:64:63:E1:A0
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 019C43C71EEB36D36246EA00F0FFBF07AF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 19:00:48 +0000
Manifest this update: Mon 09 Feb 2026 19:00:48 +0000
Manifest next update: Tue 10 Feb 2026 19:00:48 +0000
Files and hashes: 1: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: WObz2fbAoQFBIn5FqHP70sdP1Q/0eM3XvBt1kH6A89I=)
2: FXyAhkD-8Q5q4GQ3avZeolFCnH8.roa (hash: ZUZeRBd+6uQSjPBdIWYrxSWAHVlOiQl5Z7Q0BZoi1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:1e:eb:36:d3:62:46:ea:00:f0:ff:bf:07:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Feb 9 19:00:48 2026 GMT
Not After : Feb 10 19:00:48 2026 GMT
Subject: CN=3c84490e9dd9e672dbcaaab18b7f0a526463e1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:c3:58:68:b2:a7:9e:24:8c:06:5a:93:05:
bc:87:02:9f:2b:6b:52:c7:b5:da:c9:4c:fc:5e:6b:
8d:96:64:d7:fb:0f:51:f7:47:d6:28:03:7c:c3:cd:
4e:6d:f1:96:ca:1c:aa:79:59:a6:fd:f8:a0:11:c7:
82:2a:cc:e1:93:d4:14:6d:34:12:43:65:fa:37:c3:
e6:88:79:4b:a9:57:6b:bf:03:26:63:3b:b8:cd:80:
76:70:dc:40:ed:b5:a3:21:32:91:b6:c1:0f:87:99:
9e:dd:54:0d:21:3a:19:19:35:f0:e3:8b:3a:81:5a:
2e:ad:6e:9e:09:77:da:cd:e1:a7:e9:e9:d4:d5:d2:
28:95:9f:fc:c1:2c:ed:76:bf:d0:59:66:e8:6f:96:
c7:26:12:7d:e3:e5:9d:45:60:81:6e:ae:a2:c4:d9:
10:71:20:d1:33:1d:f0:e0:a9:8e:e1:be:cf:d6:56:
74:d3:eb:57:59:4f:f6:c1:16:7e:e0:29:6d:59:9a:
89:4b:8e:0e:be:07:98:49:07:73:63:23:fb:5f:e7:
89:c8:59:d3:71:42:28:37:31:21:82:47:d4:da:b4:
26:14:96:db:1a:f2:f6:f2:fd:55:db:4f:3c:68:36:
69:d3:5d:ef:0e:c9:d7:13:0a:97:0a:f5:f3:73:5a:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:49:0E:9D:D9:E6:72:DB:CA:AA:B1:8B:7F:0A:52:64:63:E1:A0
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bd:1e:12:e6:b8:f6:7b:46:91:25:a6:59:5f:e8:75:c5:58:
7e:8d:0e:f7:39:23:d7:93:7d:4b:7d:ab:a9:44:7b:c5:be:8f:
1c:4e:b9:6c:33:0b:77:d3:0a:6f:72:66:36:d5:75:38:5a:87:
57:e2:3a:3e:c9:56:2b:a6:bb:71:b7:5e:78:f9:e7:4f:ba:87:
42:34:a1:4a:32:cd:bc:2a:16:e8:e9:3c:2c:85:22:ea:37:e0:
66:6c:98:ec:95:3e:69:0b:5e:a3:2b:9a:af:b0:51:5e:5c:0f:
04:4f:be:19:88:d4:13:58:98:2b:58:f3:39:21:42:9f:ee:28:
f4:c9:b7:77:07:19:f6:91:64:22:f1:ab:3b:43:9b:30:e1:01:
71:af:14:b0:2b:77:d8:a8:04:71:24:84:ec:34:9f:65:12:f9:
fc:fa:09:c0:50:b3:51:8e:02:60:38:d3:f3:aa:35:df:b3:f4:
68:9a:24:f3:fc:2a:ee:71:8a:66:4d:7c:cb:46:19:6a:d2:15:
a0:47:f2:67:c8:8d:4c:1d:41:43:5f:a0:d2:b7:a2:98:56:50:
f9:dd:57:4d:c6:20:26:57:43:71:db:22:c2:59:3a:a2:5f:f6:
8b:80:37:b3:5d:10:b9:9b:55:32:ab:ce:ab:2e:c8:04:ef:d3:
dd:72:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:17 2026 by rpki-client