This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: q9j+oRH47YIB64QiRl2RbodUvvT0WnbGzrshkuqIaus=
Subject key identifier: 1E:D4:76:B6:F8:FF:A5:04:0A:FB:14:B6:64:34:74:05:2A:E8:05:5F
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 019C1B021D97FE0092809E4D53E0A5C325C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 92
Signing time: Sun 01 Feb 2026 21:00:49 +0000
Manifest this update: Sun 01 Feb 2026 21:00:49 +0000
Manifest next update: Mon 02 Feb 2026 21:00:49 +0000
Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=)
2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: DaoGh/L8GZt+TLbuCf9wDgVhSGoWVjzvxTfLoheGAXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:02:1d:97:fe:00:92:80:9e:4d:53:e0:a5:c3:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Feb 1 21:00:49 2026 GMT
Not After : Feb 2 21:00:49 2026 GMT
Subject: CN=1ed476b6f8ffa5040afb14b6643474052ae8055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:c1:9e:a6:14:0d:fd:9b:d6:af:ac:72:1b:
7b:95:b7:4b:a7:08:dd:4b:20:20:23:a0:1e:ae:ab:
56:58:6b:92:2b:51:73:79:8a:e3:4c:d1:b0:90:bb:
56:12:34:a4:27:63:93:d0:73:f1:9e:ac:67:03:50:
c3:5d:53:0c:ba:4e:d4:fb:5c:f7:15:2e:bd:5b:cb:
ba:dc:b9:43:98:f5:d0:e4:6e:0b:98:ba:bb:b4:e1:
e2:ea:41:de:f3:15:c8:07:0d:10:b7:62:88:98:ff:
32:f3:6d:b0:cd:80:46:19:62:37:65:57:4c:e8:58:
00:c2:c0:8e:e0:32:bc:38:15:be:fc:d1:a6:e8:b2:
c6:cf:ac:9c:aa:7c:a4:45:43:f1:93:60:97:8c:c2:
d0:6b:e9:1c:37:2d:23:6c:32:54:17:12:7b:c4:9d:
a4:d8:cd:99:80:15:a8:1a:fc:45:ff:f2:0b:95:04:
b5:83:da:08:e5:48:58:44:86:16:f9:6d:df:da:5b:
b2:28:f9:3f:8d:7e:e3:fd:ca:94:c9:b2:60:b5:41:
a6:f2:3c:7c:78:f0:da:91:a4:37:e1:cf:1c:5d:1c:
9d:46:de:06:e0:12:ea:04:d5:4d:ea:d6:e2:3b:af:
7f:c9:ef:e1:aa:37:59:2c:d7:fa:b4:6b:43:08:3e:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:76:B6:F8:FF:A5:04:0A:FB:14:B6:64:34:74:05:2A:E8:05:5F
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ab:ec:c0:80:3a:cb:8d:63:ac:57:87:4f:ae:7c:c7:63:49:
89:15:a6:c7:a7:06:f4:7e:34:79:3c:92:40:b0:84:a5:f5:24:
0d:3e:81:8d:06:dd:31:6b:89:22:67:13:43:87:50:be:08:3e:
27:37:25:a7:9e:57:39:75:89:c1:d8:6b:ff:ef:9f:fc:b2:0c:
cf:c1:c1:c5:be:58:a8:15:b7:47:50:72:b6:71:b4:ba:46:03:
dd:e4:58:a1:76:76:ef:55:03:2b:d8:be:8a:e0:4a:58:5d:65:
91:2f:9c:c9:01:f9:92:f2:50:9a:e4:cd:eb:7a:05:9b:12:c1:
8a:6a:8a:23:31:c2:43:92:fc:ca:30:47:23:57:d8:95:55:c7:
44:c5:80:57:9b:7d:02:56:f6:77:c7:e7:3c:ed:a9:f9:3e:e0:
a1:23:7a:2e:71:bb:38:da:eb:33:b2:3e:19:a6:45:15:a8:f9:
db:c9:ef:92:54:87:50:f3:63:ef:da:52:a7:0c:63:8a:91:cd:
6a:ed:a1:41:ea:2c:00:c4:70:20:24:65:65:3b:22:db:5f:2e:
c9:ab:1b:50:3d:be:7d:6c:e2:e2:a8:b3:83:50:76:e9:7a:9d:
a7:b4:a6:5d:4b:2f:5d:d6:97:9f:69:e6:85:ad:4f:c2:ba:52:
38:36:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:44 2026 by rpki-client