This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: vdU+WHtXocBs1PFtUzjnDeUVkorAwZJF7otYovXq8yA=
Subject key identifier: F8:AD:80:79:30:ED:AF:E4:5C:9E:4E:28:CB:33:E9:DE:B1:2F:15:0F
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019BCAC184DB80B80045D3B02DA7B842CABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 17F4
Signing time: Sat 17 Jan 2026 07:00:38 +0000
Manifest this update: Sat 17 Jan 2026 07:00:38 +0000
Manifest next update: Sun 18 Jan 2026 07:00:38 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: dL+KkAor7qGmHiX0ARFDEbPx+Jl5LClbEOLGYH2Bhzo=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ca:c1:84:db:80:b8:00:45:d3:b0:2d:a7:b8:42:ca:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jan 17 07:00:38 2026 GMT
Not After : Jan 18 07:00:38 2026 GMT
Subject: CN=f8ad807930edafe45c9e4e28cb33e9deb12f150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:4b:0e:e5:bb:06:79:3b:21:21:03:66:47:
8e:92:5f:ea:66:6d:10:95:e1:10:48:b6:3a:55:63:
5a:dd:2e:af:00:29:42:9c:6e:e4:a6:a4:82:c7:da:
27:a5:7e:48:be:ca:f5:36:95:76:67:28:26:e2:9c:
15:81:da:f3:fd:90:74:99:ff:5c:58:4f:10:17:b9:
03:c3:3b:c1:0c:8d:b6:c0:f7:25:26:71:6f:0b:ab:
39:36:1f:3c:00:f0:b4:26:4f:63:e2:fb:e7:09:53:
7d:57:e5:d9:f2:87:5e:76:59:0a:20:2b:a2:76:66:
65:63:9f:01:7f:6c:09:17:6a:df:c1:9b:39:16:ef:
dc:57:b2:6d:03:9e:7a:eb:71:c3:ff:81:8b:bc:5e:
be:a9:d7:18:7a:96:8e:3f:99:b3:f8:61:d9:1d:5a:
33:6a:e9:70:20:69:de:29:86:b2:c4:a9:c6:f1:23:
8e:41:35:4e:16:f2:ad:75:6f:71:da:c4:9e:ff:87:
86:24:2e:0b:87:b8:50:a5:65:ae:3b:ad:aa:ad:7b:
09:4c:87:cc:77:d4:5b:b4:ae:44:a9:6f:8c:be:40:
b9:fa:e3:2d:a1:94:86:31:bd:70:1d:ef:ae:23:f4:
f8:33:24:3b:42:4b:1b:96:ba:84:db:0d:72:d7:0a:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:80:79:30:ED:AF:E4:5C:9E:4E:28:CB:33:E9:DE:B1:2F:15:0F
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:59:b2:93:51:de:19:54:b3:83:83:46:e9:bf:7a:90:3f:
04:99:52:77:ad:03:c3:7c:8e:b9:23:7e:d7:50:5c:bf:4d:c5:
af:02:34:e3:e9:91:36:a1:53:8d:ae:93:20:43:1f:5e:ed:e2:
e4:25:7a:7e:a4:43:b0:38:fb:fd:ff:aa:33:6c:22:16:f8:17:
42:60:f0:8f:d9:f8:db:31:1e:73:7b:21:71:13:0d:38:60:79:
40:c9:4e:46:ad:33:dd:5c:f4:90:da:ea:ae:7a:e8:2f:2f:f4:
87:5d:70:53:b7:4b:1c:32:51:44:64:e0:7f:05:e2:79:c2:00:
3c:6b:a9:b3:91:8d:78:18:25:98:51:1c:40:04:59:56:ee:80:
9f:73:dc:ab:f0:d4:2a:71:2d:8e:45:58:84:42:3d:08:00:90:
c5:0a:61:39:0e:84:04:2d:af:03:70:28:b2:64:ed:4e:84:5d:
2a:5c:a2:7d:63:d5:24:27:3e:82:e0:ee:59:bb:99:a0:6d:d7:
05:35:9a:db:c8:db:20:f8:04:c5:89:c4:d2:5b:e0:7f:5c:db:
74:08:55:9f:6e:4f:ea:af:eb:5d:be:40:87:02:28:1d:d2:7b:
83:45:72:bd:1d:44:cf:87:58:6e:01:fe:33:87:13:18:6d:1a:
f1:48:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 13:00:29 2026 by rpki-client