This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: BnwKPWXxtb1jEfmr2t0EAfG35rLqo5k13l5vGFl1jV0=
Subject key identifier: A8:71:47:65:60:E1:44:64:4A:9B:EA:B9:1F:62:F5:A9:88:B4:50:59
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019C42B4642580862C1CE2BF66902B38875E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 161C
Signing time: Mon 09 Feb 2026 14:00:44 +0000
Manifest this update: Mon 09 Feb 2026 14:00:44 +0000
Manifest next update: Tue 10 Feb 2026 14:00:44 +0000
Files and hashes: 1: JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa (hash: qjvEQEZ4+gLBmbSLvlf95+OWTtrvJCq+Fdjb+HE/rTA=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: FJUKhBVp5UJ32C3m+kmYeGVmpG19IMY9njsDj/MqwZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:64:25:80:86:2c:1c:e2:bf:66:90:2b:38:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Feb 9 14:00:44 2026 GMT
Not After : Feb 10 14:00:44 2026 GMT
Subject: CN=a871476560e144644a9beab91f62f5a988b45059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:1c:ca:67:8c:53:52:04:e6:7b:28:3b:ce:
e3:84:54:7c:70:24:6d:34:39:1b:94:85:01:f4:22:
be:77:82:98:31:b4:86:c3:a3:ab:b0:c2:aa:e8:f8:
01:e9:29:70:c9:60:77:9d:dc:6d:32:57:db:29:80:
5f:80:cc:ec:62:0a:c8:26:ac:d1:76:a0:11:f4:35:
6d:8b:e0:b0:6f:c2:d1:f4:f8:e7:70:c8:90:75:2b:
43:8f:2a:38:2e:ab:21:fc:ad:ee:cd:f7:3c:80:d3:
bc:eb:36:3a:76:08:f2:2c:61:07:cc:7b:a6:ba:cc:
bc:52:e5:aa:d7:bc:38:29:96:75:bf:d7:42:bf:04:
2f:40:e2:ce:22:08:08:bc:71:c2:34:3f:98:f0:14:
b0:63:d1:b2:f2:a5:0d:8f:9c:0c:6b:47:c0:2d:d4:
29:97:e7:f2:17:02:94:85:42:0b:92:31:a3:2c:d2:
3a:22:a1:5e:29:b8:87:43:ac:b9:4e:c7:0d:ba:14:
88:2c:47:b3:9a:3b:a2:de:d0:f2:9e:f6:88:c0:0b:
e3:5f:98:01:e0:92:e9:23:86:bd:d7:f9:7a:0f:06:
2b:b3:22:04:b6:49:8d:94:70:00:ba:a9:1b:eb:3a:
24:ab:91:f0:c9:27:f8:aa:44:4d:fa:c4:4e:1b:95:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:47:65:60:E1:44:64:4A:9B:EA:B9:1F:62:F5:A9:88:B4:50:59
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c7:dd:ab:d2:a9:ad:b5:b0:cd:b8:59:60:44:74:24:eb:ab:
5e:e4:76:0d:3a:1d:3b:fb:36:01:98:54:be:bc:70:6b:bb:d7:
52:79:00:dc:15:ad:ea:04:55:6a:37:a8:9e:d9:3b:82:ef:b7:
fa:5f:e2:1d:e8:d5:ee:88:35:51:b0:19:11:70:63:00:80:02:
4e:cf:f2:e3:11:1d:fd:51:06:ee:c6:39:a9:cc:57:a2:b7:e8:
3f:73:eb:de:51:60:f9:1a:c2:99:ee:2a:9b:85:5f:64:c7:35:
67:0d:88:73:4a:27:7e:2f:da:95:05:b1:6f:8d:fa:0b:42:93:
08:af:16:43:65:51:c1:7d:6f:13:9e:71:ec:ea:cd:b6:c0:28:
f0:dd:de:ff:2e:56:a9:57:91:ff:e0:9d:70:9c:ec:b3:6a:5b:
ab:0d:be:98:41:b9:f7:cc:3c:a2:00:6a:1d:e9:86:46:c7:56:
09:13:3d:f5:be:c8:f8:dd:a6:46:0c:c5:8b:a0:41:6f:fe:26:
e3:e9:07:cf:79:84:7b:b2:32:e4:b2:79:55:15:d7:68:80:99:
48:f5:cc:16:00:4e:b6:ed:0d:ca:dd:b0:99:62:5e:7c:f7:cf:
5a:40:c7:79:07:36:a2:03:18:b0:15:a0:6e:6b:f8:83:7f:70:
10:93:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:54 2026 by rpki-client