This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: mN9ZJqqj4ssxOD/eggjeysf40OFqJnnvlDpQCbcMAT8=
Subject key identifier: 26:95:D5:E2:BD:74:8B:89:CB:EA:88:65:5E:B1:5D:4A:D2:6E:04:C5
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 019C4246947C406402EDB3968621A9C77384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 1201
Signing time: Mon 09 Feb 2026 12:00:47 +0000
Manifest this update: Mon 09 Feb 2026 12:00:47 +0000
Manifest next update: Tue 10 Feb 2026 12:00:47 +0000
Files and hashes: 1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=)
2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: IftcHIfyRFkJoTx33T1BrzwuzWJEBVIPVoQv3AWOfqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:94:7c:40:64:02:ed:b3:96:86:21:a9:c7:73:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Feb 9 12:00:47 2026 GMT
Not After : Feb 10 12:00:47 2026 GMT
Subject: CN=2695d5e2bd748b89cbea88655eb15d4ad26e04c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:bd:1c:ba:ab:34:06:b4:dc:85:73:2f:c4:
6f:82:a5:92:f2:19:70:99:34:74:a9:f0:92:be:62:
02:aa:01:98:bc:36:a0:0d:9c:49:e9:fd:e1:17:16:
71:d7:06:47:e7:11:d6:b1:d4:e8:f2:40:04:e9:a0:
97:92:56:a3:a6:19:6a:b1:b5:2c:6d:db:17:9f:73:
ea:80:e9:5f:5a:ad:f5:3b:a6:16:1b:da:69:b1:b6:
8e:e0:ee:0f:98:73:05:b0:e7:f1:40:46:51:9e:bc:
97:9a:37:28:0f:35:c0:f1:1a:8c:b4:36:12:46:31:
d1:35:59:56:58:46:65:e0:3c:61:4a:e1:5c:63:0d:
aa:ad:90:bf:38:30:e5:69:37:7b:75:13:e0:e5:f3:
a8:66:98:67:ae:c5:65:fc:b7:b2:c9:c1:b4:44:cf:
25:5c:98:25:70:02:eb:31:88:a2:ee:af:23:98:85:
ef:46:d1:4f:74:45:74:b7:f3:a4:ce:6d:78:9e:76:
b9:ca:b0:47:b0:df:c0:65:63:b4:49:35:63:4d:88:
7f:be:29:70:8e:eb:20:96:20:9d:1d:e7:b1:d2:13:
19:4e:bb:b1:89:86:d7:07:5e:7d:d0:28:20:2b:6c:
17:c5:f0:57:d3:e7:16:11:3f:a0:de:9c:fa:bb:1e:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:D5:E2:BD:74:8B:89:CB:EA:88:65:5E:B1:5D:4A:D2:6E:04:C5
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:a7:81:c1:ca:d5:bc:03:7b:47:64:f6:74:47:9f:5e:2d:
06:56:84:11:ec:a4:eb:fb:9a:34:56:75:6d:56:eb:39:20:41:
d9:d1:15:ac:c8:d1:29:73:0d:d6:07:0c:bc:4e:82:ef:7f:c1:
69:70:81:b9:6e:cd:f2:d0:d3:ea:32:fc:f2:40:69:e2:a0:6f:
8b:05:5f:f3:86:c8:e2:d7:a2:9e:1c:3d:3b:70:47:01:84:d0:
36:2e:34:6f:42:d0:52:9a:84:9f:ff:4e:98:b6:25:d5:f3:b8:
45:13:70:86:a8:93:e6:11:45:22:95:3d:2a:9d:2f:df:14:9c:
8f:0f:cf:d3:81:61:ac:3f:19:8e:1c:ea:cd:be:c7:5a:ac:8d:
e1:96:26:e1:5b:d9:87:ea:c5:56:20:d2:79:88:3e:cf:33:c2:
27:36:ba:1e:3e:b0:8d:58:51:4a:7b:a6:ab:64:f5:f7:c1:e4:
9a:41:0e:4c:2c:f7:76:81:a2:76:b0:9e:f1:ff:3e:9d:c5:fc:
3a:e9:36:1c:a3:2b:ed:22:1c:07:17:92:3b:3e:7e:62:2b:3c:
08:0d:39:53:6b:21:5b:cf:12:eb:55:0a:9c:c7:39:47:de:4c:
86:0b:30:c9:ac:16:50:22:b5:85:c6:81:a7:72:b5:21:95:c1:
5e:b3:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:18 2026 by rpki-client