This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: ouollKv9a5QGM2lLQHqNbT91ltgkIQXYJvL4RIthgIQ=
Subject key identifier: 96:25:3A:46:51:5C:B9:69:DD:7C:2D:9E:7E:AE:65:8B:E4:F3:5E:B7
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019BFA9B5F1774CD24D9B68816C188D2BC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 14F1
Signing time: Mon 26 Jan 2026 14:00:44 +0000
Manifest this update: Mon 26 Jan 2026 14:00:44 +0000
Manifest next update: Tue 27 Jan 2026 14:00:44 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: fGJuMKeSK4ryrQikGt9o7EBKw8zwIpDLQofVcCVDZ24=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9b:5f:17:74:cd:24:d9:b6:88:16:c1:88:d2:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jan 26 14:00:44 2026 GMT
Not After : Jan 27 14:00:44 2026 GMT
Subject: CN=96253a46515cb969dd7c2d9e7eae658be4f35eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:db:e4:4d:fc:46:13:c0:5c:fa:f2:ad:24:
b1:a6:39:7e:c7:81:e5:fd:cc:fd:7e:70:14:ba:80:
1f:41:46:95:41:43:40:3f:85:a2:ef:ca:58:13:86:
de:15:23:4a:2f:75:14:d5:3d:9e:ac:d2:d7:a4:d0:
d6:23:94:36:56:82:e0:87:62:fb:cb:e4:a5:5f:68:
e2:68:b6:a8:c1:82:8a:81:3c:17:88:3b:53:79:4c:
a9:1a:65:de:3a:1d:98:a4:c4:4a:89:39:4e:21:58:
b7:a7:cd:bd:e2:82:92:4c:d6:d8:95:66:ec:1b:0f:
65:8c:55:12:f9:6b:fc:4d:7f:07:b4:5e:3b:96:cc:
ee:93:44:9c:9f:b3:a3:8e:ea:d2:a8:06:e8:6a:a6:
9a:cd:ac:ea:6a:c9:3a:71:7d:9c:a0:27:f0:f6:78:
c3:e1:4c:9e:f2:4f:b4:80:d6:8b:87:e2:20:59:43:
a2:d3:20:88:96:b2:1a:b8:02:3e:4b:36:72:f4:20:
2a:6d:0e:3e:31:8d:fb:3d:db:97:fa:0b:30:3a:ab:
e2:6f:d1:de:02:9e:c4:17:00:6f:9f:fa:10:2e:e9:
57:7e:35:ef:c6:55:bd:33:49:32:37:9e:6f:32:bb:
72:c4:98:f4:ef:99:6a:c6:ee:9a:a8:48:93:e2:ac:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:3A:46:51:5C:B9:69:DD:7C:2D:9E:7E:AE:65:8B:E4:F3:5E:B7
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b2:27:34:6f:4b:f6:d5:51:cd:62:f5:b0:47:ed:ea:b6:14:
07:28:fd:44:fe:dc:46:34:96:85:d4:57:7a:8d:3b:54:ce:90:
62:a2:47:c3:b7:7a:b6:cd:6c:45:66:cb:27:83:e2:60:16:57:
96:84:7e:f4:3e:90:42:67:fc:12:1e:81:84:e7:08:2a:bf:47:
6f:48:bf:5c:6b:b1:01:b4:89:73:49:2e:4f:df:04:e3:e8:f1:
a5:ab:fb:32:1e:6f:a6:68:51:b7:35:06:d4:30:4c:89:3f:a8:
d1:0d:15:30:af:8a:5c:90:ea:ce:c8:53:3c:6e:0b:c4:4d:76:
1c:32:b0:72:1c:fb:a1:d8:89:7f:bb:56:02:bc:f5:cc:8d:61:
a2:bf:f5:08:84:7d:15:f2:b4:56:4c:87:c3:ee:28:2d:eb:fb:
c4:55:56:8a:7c:20:6b:e8:31:c8:cc:c2:61:79:78:ac:2d:66:
87:ed:c3:c3:29:bd:30:21:05:49:4a:f0:49:38:0a:e9:24:12:
f8:d9:9b:b3:7c:60:03:f2:25:d7:12:ed:7f:1f:da:03:e7:d7:
10:22:1b:3b:b5:61:00:7c:53:2f:31:bc:05:8b:30:62:ff:63:
8c:cb:d1:3d:5f:ec:cd:d7:61:c9:9e:6d:5c:fc:fb:40:1d:dd:
e5:6b:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:10:58 2026 by rpki-client