This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: CX1/MMrjrqX3RoL7NvvrhFi1fTVfMJ1SGX9kei4CHVQ=
Subject key identifier: 1F:4D:61:ED:DB:22:2A:31:79:72:5F:AB:B0:28:4D:EC:06:96:3E:33
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019BE3DD147E58A32A91F701C19D945AA975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1801
Signing time: Thu 22 Jan 2026 04:01:15 +0000
Manifest this update: Thu 22 Jan 2026 04:01:15 +0000
Manifest next update: Fri 23 Jan 2026 04:01:15 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: JajlwbChQfx062zm99IHkmSBQFD07J/scJ3oaJ9FXvo=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e3:dd:14:7e:58:a3:2a:91:f7:01:c1:9d:94:5a:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jan 22 04:01:15 2026 GMT
Not After : Jan 23 04:01:15 2026 GMT
Subject: CN=1f4d61eddb222a3179725fabb0284dec06963e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:5a:e7:0d:bb:6c:94:ff:a2:cd:d1:2d:9f:
fa:53:42:da:d0:63:bb:25:a2:20:43:96:41:e2:67:
7b:15:bf:0f:56:f4:f6:e3:18:bb:eb:5c:8b:74:82:
22:6b:b0:15:7b:8f:3f:53:ac:ad:8b:f5:38:25:b9:
11:19:26:7d:b4:07:76:f6:be:58:ec:3d:b1:56:f0:
95:66:ab:b6:18:81:40:8e:37:95:fd:e2:ae:7b:57:
ec:81:2a:22:41:b5:e6:d2:93:30:b9:18:d9:68:06:
6b:95:27:95:48:85:89:68:51:34:82:04:c7:5f:13:
47:df:61:30:66:b8:2d:97:3e:92:3f:2a:1d:b7:bd:
04:45:1a:4a:1d:69:11:75:ca:98:5e:33:87:bb:a5:
8d:f0:5a:7b:06:10:c1:73:c1:a4:83:15:c8:28:e9:
3c:86:25:d4:7a:94:88:89:74:26:5d:9a:4b:75:b3:
a9:1d:c6:91:cf:1d:7b:9d:61:6a:83:5c:5f:41:bd:
34:bd:78:23:a8:f1:3a:04:6c:41:58:15:74:af:4b:
19:db:2f:b8:f6:3e:7c:0b:2d:0d:dc:44:73:5d:f1:
10:f6:c7:23:bf:e0:04:4e:73:3a:77:16:15:40:e0:
59:a5:73:c0:5c:6e:86:f5:18:df:08:ca:9f:4c:00:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:61:ED:DB:22:2A:31:79:72:5F:AB:B0:28:4D:EC:06:96:3E:33
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:26:4e:d1:ac:51:a1:31:66:e3:a1:02:80:af:47:e8:89:3d:
da:f4:40:7c:b6:cd:70:a7:fc:cc:c5:cb:6f:dd:33:fc:07:b8:
5a:37:65:dd:91:05:14:01:d1:fd:df:d9:fd:d5:04:91:dc:b0:
14:38:01:ff:b5:6d:3f:d3:18:15:b0:1c:b4:97:aa:fd:76:ad:
4b:4f:cf:a6:7c:fc:83:80:0a:15:d8:ee:2b:71:e7:e7:12:81:
6c:d5:6d:63:e4:e4:39:7f:ef:50:95:62:fb:5e:63:42:5e:b5:
ad:fd:37:ed:0c:8b:cc:c7:ce:b1:92:12:06:e8:79:3e:fc:2a:
01:3e:ef:89:71:85:99:7d:59:72:0d:73:24:04:2b:7c:46:19:
31:b0:fe:68:9d:6f:14:94:3e:e2:2f:d9:e4:73:68:cc:03:c8:
19:1d:6d:e9:ed:7c:d6:0f:7c:df:66:74:72:10:fc:aa:14:b7:
39:03:97:14:5a:f0:27:58:ec:e5:0a:15:4b:07:d9:b2:d8:be:
13:fb:d1:d2:c9:d5:57:76:59:95:ee:d2:f2:75:a5:da:98:f6:
aa:59:30:11:65:82:2d:1f:e3:f1:d7:02:01:85:4c:cc:e9:f3:
a8:37:b4:b5:62:08:81:dc:23:e9:67:74:e3:fa:e7:e7:19:48:
9e:91:b6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 06:20:29 2026 by rpki-client