This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: raAtgpA0gNmtLO9+RlMTumB1HpWVIUvC/HSxgkeW0J4=
Subject key identifier: 80:23:82:93:0A:54:FA:3F:27:DC:DD:F5:E6:FC:D8:64:B6:45:1B:F4
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019C42B486390297F6C6D89BE978B10995C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 103F
Signing time: Mon 09 Feb 2026 14:00:52 +0000
Manifest this update: Mon 09 Feb 2026 14:00:52 +0000
Manifest next update: Tue 10 Feb 2026 14:00:52 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: XY59EYNTm4eDbCC1ZC/lKUmTF4G3SOfha5cEbFdaXAM=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:86:39:02:97:f6:c6:d8:9b:e9:78:b1:09:95:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Feb 9 14:00:52 2026 GMT
Not After : Feb 10 14:00:52 2026 GMT
Subject: CN=802382930a54fa3f27dcddf5e6fcd864b6451bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:cb:55:94:f6:e8:b6:92:04:9c:63:74:13:
32:e2:a4:b8:e9:e6:b0:9c:75:0c:64:27:0b:a5:5f:
0a:a8:c2:6c:51:a5:e9:f1:33:f9:b2:86:b9:7a:4b:
ca:e0:c8:d3:cf:13:ae:d0:70:5d:8b:c0:87:f2:0e:
8a:5e:5a:e5:31:fa:43:8c:25:5e:12:00:36:c4:1a:
15:7d:80:90:27:df:43:fc:7a:75:7a:07:ed:ca:dd:
d7:8d:47:35:18:1c:a2:5d:59:3d:67:93:cc:c8:58:
4a:93:83:0e:64:1c:e7:de:75:c9:f3:58:b5:30:c1:
9b:af:eb:40:63:59:3c:ce:b8:a4:55:1f:bd:4a:c7:
c0:05:43:63:f9:95:c3:64:28:b5:8f:65:0d:81:ca:
5f:66:17:2c:e1:5b:88:e6:80:6f:c3:00:63:a7:47:
43:bd:65:6d:9e:70:b4:39:86:ad:88:61:67:a8:4a:
80:14:b0:91:dd:13:ce:a7:94:cc:5c:2b:a6:9d:3c:
d4:8b:3b:f1:bd:eb:bd:f9:6b:43:98:64:be:b4:bc:
dc:89:2e:6d:7b:f3:34:a5:a8:e5:bd:ad:34:44:41:
cb:f6:e5:91:d3:10:52:59:e7:ce:a9:c7:e4:25:83:
6f:09:e5:cf:3c:9b:28:e5:74:d6:01:3a:d7:c8:57:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:23:82:93:0A:54:FA:3F:27:DC:DD:F5:E6:FC:D8:64:B6:45:1B:F4
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:5d:55:3c:0e:0a:00:49:62:fb:5f:6d:c1:4f:96:92:4b:
16:97:52:b1:12:8c:33:da:56:0c:b2:63:36:bd:d8:a4:77:5e:
af:b6:d0:a3:eb:15:ec:6e:65:f3:0d:91:58:7a:7b:38:4a:c2:
b5:c7:68:37:d4:01:78:fe:19:4d:74:e0:1b:72:40:20:c6:68:
b8:40:a2:32:0b:1d:4f:7b:2c:b7:a1:86:04:66:02:83:37:90:
8b:4f:f2:ab:ce:18:83:4a:69:6d:f6:e7:01:23:52:49:49:a1:
da:32:07:a6:d5:c5:2d:00:3f:75:22:6d:57:2d:41:8d:c8:c4:
c1:6a:00:23:e3:18:fa:20:05:a2:d5:82:79:08:0c:ef:de:93:
4f:41:19:cf:0a:eb:94:84:cb:95:7e:6f:58:a2:64:c9:a1:13:
7c:b1:29:52:26:46:b2:d0:0c:2c:85:db:48:e4:32:c0:f8:1f:
19:6c:37:01:55:23:aa:2d:7d:39:00:66:ed:9c:65:16:d7:ff:
7d:fd:b6:35:6b:d8:99:07:65:fb:7e:06:53:d0:2f:a8:ce:b4:
0b:7e:41:61:9d:8d:de:1d:6c:00:56:52:f8:2a:1b:c8:52:5c:
83:67:ac:af:53:e3:28:f2:a9:8d:bb:1b:3d:5c:bd:11:92:52:
fe:4d:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:00 2026 by rpki-client