This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
File: aZp2B5KFHh535Yh8bQPnwBGg4UI.mft (raw, json)
Hash identifier: uo9sXXYD+TsxzA9+Z+s6FggQEmCJUdyN3CZ1FW1eumQ=
Subject key identifier: 4B:E1:83:A2:F1:5B:53:83:09:F5:FD:2D:BB:19:F6:62:F5:FE:D4:2A
Authority key identifier: 69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42
Certificate issuer: /CN=699a760792851e1e77e5887c6d03e7c011a0e142
Certificate serial: 019C42B44B2D84B4A3B00ACACDFFDEBE8061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
Manifest number: 57
Signing time: Mon 09 Feb 2026 14:00:37 +0000
Manifest this update: Mon 09 Feb 2026 14:00:37 +0000
Manifest next update: Tue 10 Feb 2026 14:00:37 +0000
Files and hashes: 1: aZp2B5KFHh535Yh8bQPnwBGg4UI.crl (hash: Fm7dCFu+QPyd8iSi4jVxaNiZKurpunmlb+YtCBPqJp0=)
2: v6oU70HSaZm7ChbHXC90OpUzQj0.roa (hash: HL9qGgjJL2Z4Y+PfPmBcCOMraQco69+rsL+jpgTAVns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:4b:2d:84:b4:a3:b0:0a:ca:cd:ff:de:be:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699a760792851e1e77e5887c6d03e7c011a0e142
Validity
Not Before: Feb 9 14:00:37 2026 GMT
Not After : Feb 10 14:00:37 2026 GMT
Subject: CN=4be183a2f15b538309f5fd2dbb19f662f5fed42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:fb:40:38:19:28:45:0b:54:46:06:bf:0e:
1a:99:fb:3b:1d:ef:d7:b7:81:43:a4:44:8b:90:b8:
80:a8:ea:39:20:5c:86:8c:69:5d:08:ce:68:27:1e:
f7:2e:4e:8e:f2:53:b5:5e:56:9f:f1:71:23:bf:f4:
10:d8:ff:19:11:62:61:2e:a2:79:a2:75:f8:49:42:
ad:d4:c1:30:59:c8:31:3d:90:53:8d:d6:be:ca:a9:
12:db:7a:b6:74:8b:ee:98:3d:2a:e6:db:64:31:f2:
dd:b7:e2:4c:0b:41:95:82:30:03:8b:97:c4:f5:e3:
8a:f4:d4:7e:26:f6:c8:09:d1:28:da:c6:ac:50:3f:
e6:30:32:64:67:f4:a8:fd:37:59:d9:83:76:d5:27:
83:22:29:49:f9:99:f2:60:a5:c7:67:68:27:eb:90:
fa:97:eb:ca:16:db:67:fe:9d:a5:bc:4c:b6:c7:94:
94:c2:30:23:ee:cf:9d:42:61:6b:93:4f:ed:d6:e1:
30:25:a5:a4:c8:6b:7f:c4:64:87:2f:06:3b:77:27:
40:e6:f7:74:25:03:64:fb:e0:76:a8:cd:5d:9a:a8:
b7:ec:db:16:0d:83:7f:cb:fd:74:ea:b1:f0:a4:be:
c0:3b:5d:ce:e6:6e:c5:74:80:25:fe:64:5d:22:22:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:83:A2:F1:5B:53:83:09:F5:FD:2D:BB:19:F6:62:F5:FE:D4:2A
X509v3 Authority Key Identifier:
keyid:69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f6:cc:07:30:32:16:1a:a4:6b:f5:5f:23:ba:6d:13:c1:e6:
b1:92:c6:db:18:43:18:9d:a1:c8:b7:b6:86:46:1f:ee:c6:6c:
d1:ea:69:ba:53:45:f8:5f:86:24:31:72:22:17:a8:2b:f2:d3:
dc:ed:b9:9a:be:bb:d5:ab:b7:a2:c8:95:23:8a:32:1c:d3:bc:
69:b2:c1:20:9f:23:5b:72:71:e9:6f:67:7a:05:3c:59:53:7c:
e8:a4:15:7f:bf:f8:fc:e8:ea:a1:6c:b4:25:dc:9a:0f:06:07:
d9:78:00:3a:0c:d0:e2:b0:cb:ff:af:56:b8:60:b7:05:72:8f:
be:ee:18:04:81:7e:09:8d:1a:14:e0:e8:d3:5e:d4:47:e3:97:
8f:6b:db:77:ef:e8:f0:01:dc:4c:fd:53:6c:36:4d:72:8d:11:
0a:1b:28:19:1e:b8:af:89:f7:c7:b7:e1:c8:39:61:21:20:01:
0d:6b:64:02:c8:ac:62:e9:0b:b0:f4:d8:89:c4:cd:d3:c0:a5:
8f:f4:8e:17:05:c0:0b:59:bc:4b:70:a1:2a:65:d2:ab:9a:b3:
56:33:32:04:c6:a4:db:60:16:a5:a8:41:85:e8:64:5c:6c:47:
0e:a1:2b:03:e6:12:ca:20:94:ed:56:5c:0d:e1:15:79:e1:20:
05:0e:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:33 2026 by rpki-client