This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: SO9MZagHYhBiEndGYYb8XENPS+3CJu3QapZbVSLgDoQ=
Subject key identifier: AC:6C:6C:5D:4A:5D:73:0F:A4:66:D0:5F:05:8E:E6:0B:43:A8:79:F1
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 019C42B42E58F994709B2EAF0FE0C0E2F332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 04F6
Signing time: Mon 09 Feb 2026 14:00:30 +0000
Manifest this update: Mon 09 Feb 2026 14:00:30 +0000
Manifest next update: Tue 10 Feb 2026 14:00:30 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: gdgA5JEfHMdZO92nGUZdDwSdubOzH36dlToXF+RjSCM=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2e:58:f9:94:70:9b:2e:af:0f:e0:c0:e2:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Feb 9 14:00:30 2026 GMT
Not After : Feb 10 14:00:30 2026 GMT
Subject: CN=ac6c6c5d4a5d730fa466d05f058ee60b43a879f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:f3:ab:bf:64:51:26:eb:71:0a:ed:a4:e1:
90:c0:49:7a:82:f4:23:89:99:84:81:c7:ee:af:09:
1f:be:10:97:1a:52:71:bd:86:57:96:d8:9e:53:22:
91:b7:f6:91:ea:73:2b:63:1c:85:ac:aa:c7:e7:76:
f2:c2:e6:82:ea:c0:06:b3:a3:98:88:0e:a2:b4:e0:
ff:63:fc:9b:e2:43:26:ca:98:0f:e3:0c:0e:3c:cb:
60:36:d2:0e:a6:aa:54:52:b2:45:5e:1a:07:45:2d:
61:c1:d8:c1:dd:db:51:e1:88:56:1a:16:18:93:23:
bb:e4:86:d2:4b:a2:93:72:37:86:20:cd:f3:83:98:
f5:06:1d:9a:c4:ff:06:bd:33:e3:cf:b5:06:2a:8e:
0d:f7:84:23:4b:ee:19:48:b3:88:f3:4a:e8:93:e8:
3a:18:25:03:4d:b2:57:a8:08:c8:ab:9e:7c:e3:ac:
69:d7:f5:ff:91:2c:3a:27:86:f7:da:06:ea:d5:41:
62:3a:80:8e:8a:b6:b6:fd:90:83:e1:8d:86:bb:9b:
75:4d:df:f8:e1:b9:b9:89:fa:4c:48:ac:38:19:69:
f7:1e:1b:6c:cf:c1:90:74:3d:37:67:22:3a:f5:44:
67:18:21:45:b2:3e:ab:9f:36:b5:db:82:0c:c4:0d:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6C:6C:5D:4A:5D:73:0F:A4:66:D0:5F:05:8E:E6:0B:43:A8:79:F1
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:b7:62:df:6f:17:2b:da:ed:38:c5:6a:3d:65:59:8b:66:
2d:e9:40:75:e0:5f:d1:c5:fb:bc:65:c8:f9:54:a4:22:6e:42:
13:78:3b:20:f7:b6:f9:e7:e9:97:3d:74:99:97:e3:d5:1f:c7:
35:41:bc:d1:db:e9:51:28:f1:9c:f4:d4:e0:62:21:0f:f1:ac:
2b:2f:28:a7:86:03:9f:d6:3a:01:6c:5c:31:f1:1d:d9:07:1f:
db:98:6e:4d:b1:76:69:3a:b1:6c:70:8e:ef:a3:67:c5:51:f5:
7e:90:87:15:25:dd:ca:96:2a:de:b1:b6:d8:51:c0:83:3d:66:
1d:93:88:ab:f8:b9:04:dc:ff:92:77:cc:df:5e:28:26:8c:8f:
c3:9f:48:32:26:3a:f2:b3:8b:be:d7:31:7e:e4:8c:73:ee:75:
39:ca:9d:38:40:62:15:aa:fd:f9:52:c3:3f:a3:75:b7:f7:84:
a1:c7:01:a5:1d:9a:54:1e:1a:09:cb:70:42:0e:a4:ec:3e:20:
ee:12:ed:8d:b7:61:3d:a9:61:ab:cd:9a:da:fb:60:d7:31:09:
dd:a8:dc:55:ac:7a:27:42:e7:dd:9b:1e:80:e3:84:ec:12:04:
54:dd:2d:6e:5c:51:04:5d:70:80:9e:bf:82:c5:e1:a6:c4:21:
93:a8:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:35 2026 by rpki-client