This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File: ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier: C2PqPdcp0V2V3oldJhBmtMDajMulKfLnU875WEYHFB8=
Subject key identifier: 2F:05:D1:44:F8:89:99:58:91:F2:94:6C:77:F0:65:5B:26:C2:53:00
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer: /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial: 019C41A2075FE17EEF4160327426BBB55AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number: 0780
Signing time: Mon 09 Feb 2026 09:01:03 +0000
Manifest this update: Mon 09 Feb 2026 09:01:03 +0000
Manifest next update: Tue 10 Feb 2026 09:01:03 +0000
Files and hashes: 1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: 0y0qE6Bzg0hEX+0frze0UByJAo4rdt4WLznU9iuqsS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:07:5f:e1:7e:ef:41:60:32:74:26:bb:b5:5a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Validity
Not Before: Feb 9 09:01:03 2026 GMT
Not After : Feb 10 09:01:03 2026 GMT
Subject: CN=2f05d144f889995891f2946c77f0655b26c25300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:c8:15:37:66:cd:fe:79:1d:db:21:5e:f0:
19:5a:69:57:e4:14:bc:57:db:b9:31:67:9b:32:50:
78:09:cd:f2:00:fb:d5:47:f8:c3:14:2e:cd:5d:7f:
2e:b7:3f:ea:95:de:a2:76:82:db:f1:a3:6b:71:0f:
a5:97:95:f1:d8:f4:ea:0f:0a:7a:de:11:62:21:81:
2e:65:c3:c3:89:f2:9a:76:ed:11:42:10:07:fd:1c:
9c:4b:ec:a7:83:b4:22:31:61:fc:df:b9:e3:d1:30:
d4:6c:9f:c4:e8:61:f0:f1:20:39:7a:89:76:56:82:
88:0f:8c:87:a1:6f:23:ce:af:22:a2:76:ab:86:a3:
30:12:06:f3:8b:6f:5b:4e:d8:0d:bf:22:43:c5:ba:
d3:e5:33:d9:98:cc:13:61:3c:b5:c6:74:37:30:f4:
fa:1a:a9:75:2a:e0:8a:eb:ff:93:bd:f3:f9:33:48:
f6:2e:d5:e5:8d:50:3d:ec:7a:7d:ca:05:9a:11:f7:
a6:07:6c:44:b4:cc:f4:0b:36:03:fd:69:b0:6e:49:
46:dc:58:b2:3c:86:69:62:b2:d7:89:0d:3e:52:04:
8b:c0:f4:32:39:73:58:6c:bf:00:cb:58:e0:92:d1:
3e:b1:47:fb:1a:4e:95:17:a2:4b:96:51:03:92:77:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:D1:44:F8:89:99:58:91:F2:94:6C:77:F0:65:5B:26:C2:53:00
X509v3 Authority Key Identifier:
keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:7d:45:cf:c7:4a:9d:cf:3a:13:86:57:01:e2:60:42:36:
7f:65:5a:fd:47:29:4d:22:a9:e3:92:6c:e4:c6:e4:3c:c5:c9:
78:80:33:a6:c5:3d:2f:32:b7:49:5e:86:fc:6a:8e:3a:ea:2e:
84:63:b8:13:fc:e2:28:c1:32:d3:54:52:db:bd:72:5c:7b:61:
f1:f7:ea:ea:86:0d:0e:0e:6f:59:56:79:bc:10:b7:67:0b:17:
71:67:25:e8:f6:60:02:1b:20:be:f4:36:bc:97:57:40:a1:26:
31:6e:5c:38:e8:50:ad:6d:e5:20:53:11:9b:c8:50:14:9b:fb:
0d:ed:d4:39:41:2f:c8:62:c7:25:9a:34:c5:dd:51:12:94:f8:
37:16:14:12:80:51:08:ba:ad:89:cf:14:fb:41:4e:9d:46:98:
74:6a:5b:cd:fd:6f:63:03:00:db:f6:35:91:f1:76:a7:49:e1:
28:1a:9e:3e:51:2f:96:89:97:fb:68:9a:a7:a5:30:c5:32:38:
57:d4:61:71:c9:1f:1d:e2:13:c1:46:05:0c:c8:f7:9b:66:3e:
5a:e0:fb:f6:a3:60:92:07:56:5c:50:ee:de:66:2f:fd:90:ae:
68:61:b2:7d:0f:8c:a2:8c:7b:2d:69:3f:e6:9c:6d:85:d7:8b:
b7:59:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:38 2026 by rpki-client