This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: yqowzeUN5Y7QwHMRhiYZtyeJayuSQlC0PQZXRCpJMQ4=
Subject key identifier: ED:49:58:C2:3A:58:37:46:71:18:E0:CC:E2:FC:6E:28:0F:1F:7F:11
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 019C41A23C06BBA9FFFCAC0ACC998453834D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1559
Signing time: Mon 09 Feb 2026 09:01:17 +0000
Manifest this update: Mon 09 Feb 2026 09:01:17 +0000
Manifest next update: Tue 10 Feb 2026 09:01:17 +0000
Files and hashes: 1: Q3icqhJs5qAyA3hER2hkXKmmVkg.roa (hash: Vd3hohE6ub6CWkSKlO/X8MF+gU7dSgWfrpJ+oaxmW9o=)
2: RpKFlDqbj29Bav_Lkhu3kyJzzKU.roa (hash: 9GM2BLzn5MHA7HpZGUV7uK2cEDGeWuWkdj2aeKwl3TA=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: LGZs2taWO6fyCZMG0rJrJQ590kTbYvLSBCv7g9OY8kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:3c:06:bb:a9:ff:fc:ac:0a:cc:99:84:53:83:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Feb 9 09:01:17 2026 GMT
Not After : Feb 10 09:01:17 2026 GMT
Subject: CN=ed4958c23a5837467118e0cce2fc6e280f1f7f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:47:1c:f5:f1:e1:17:b6:e4:7f:45:76:64:
35:6b:69:12:57:24:6b:00:39:55:c3:63:9a:19:62:
10:46:dc:4f:df:43:f2:2c:ae:8c:ab:a8:d5:4b:cc:
fc:6f:64:21:b8:00:20:f0:8c:81:cd:7e:65:db:bc:
cb:f1:2a:79:c6:38:53:fe:5b:76:af:50:2c:e9:a7:
63:89:23:5d:9b:96:1f:f6:36:67:aa:f0:98:7d:5d:
fa:0a:c8:04:69:e5:bd:11:20:50:f6:ef:d0:b7:3a:
c6:5d:07:df:b7:ec:a9:2d:e5:01:8a:80:5f:ae:ad:
34:6d:0b:7f:59:5b:2b:9f:a9:ab:67:d9:9a:49:d0:
3c:10:70:59:2c:27:ba:d1:eb:bc:be:a6:8c:b8:c6:
39:f8:8b:d9:91:27:4d:6f:a9:37:24:3d:17:eb:0c:
9b:26:55:55:23:e8:24:6a:0f:a5:55:96:66:fd:c5:
2a:d9:2b:5a:d0:5c:d2:a7:51:28:7a:b2:dd:b8:7f:
54:c8:6a:ee:5f:e6:f9:55:e4:11:68:95:d2:43:c8:
a2:ff:15:b9:4e:21:de:12:0a:cd:94:2d:a3:71:27:
85:23:e6:13:9b:b1:0b:bf:2a:a1:bf:d6:07:43:ff:
2f:31:54:df:c2:45:f7:d3:45:51:c8:54:a0:0b:fc:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:58:C2:3A:58:37:46:71:18:E0:CC:E2:FC:6E:28:0F:1F:7F:11
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2c:e0:14:34:8f:2b:1c:76:93:1f:f7:01:6b:16:d9:92:ca:
af:24:d3:16:47:16:10:ca:88:4c:6e:c9:e8:e8:a8:15:de:69:
29:d8:03:e2:6b:ab:3f:5a:2e:c7:a1:3d:ba:05:44:64:8c:9c:
6e:cb:37:6c:09:49:2c:a0:07:59:55:b5:1f:88:f0:2c:b6:50:
05:19:0e:76:3d:28:27:27:73:fe:1d:79:61:02:20:94:94:7c:
a6:22:5e:98:c3:69:15:d7:f7:f4:ac:97:43:ec:fc:38:89:73:
aa:88:77:d8:8e:15:01:a2:41:5a:ad:ef:37:df:c3:9c:83:11:
5f:54:67:b4:22:82:1f:6c:09:9e:e0:0e:0c:b9:7e:81:ce:ae:
b4:f0:0b:8d:6c:01:b1:6b:ec:64:05:0f:00:d5:20:7d:25:7f:
5b:b0:b5:96:f0:9f:7a:ba:d2:bb:02:62:c3:1d:49:e9:2f:54:
10:fe:37:f4:dc:a9:5d:1f:63:79:ea:a1:0b:8d:c6:59:e4:e9:
fe:c3:b8:7f:43:12:fd:fb:f6:a2:58:cd:dc:70:12:f0:ae:30:
53:57:88:f2:79:d9:fc:19:0f:f4:8f:b0:8f:be:1e:26:f7:93:
e9:b4:01:aa:3c:5f:46:1d:e1:e6:0b:c2:13:de:73:9f:a1:aa:
ca:0b:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:32 2026 by rpki-client