This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: /uBJK0ouEmuiL4JWWOVDbwTLbLcykOJeBEAXeiPa+f0=
Subject key identifier: E8:9E:2E:21:77:6E:4B:0B:F7:73:76:57:FF:8F:8A:2A:B1:34:54:EB
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 019C427DC2B430DC0AAFE59AE96F9918E6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 05D0
Signing time: Mon 09 Feb 2026 13:01:03 +0000
Manifest this update: Mon 09 Feb 2026 13:01:03 +0000
Manifest next update: Tue 10 Feb 2026 13:01:03 +0000
Files and hashes: 1: 0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa (hash: qG/3sEaE6hIKkBZX7yiUf0VUZdejvNknPMp0eVon50w=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: RK0YXwAy02gD09gBECb/6UeJa7XuqlsM0DKeyZCv0ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:c2:b4:30:dc:0a:af:e5:9a:e9:6f:99:18:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Feb 9 13:01:03 2026 GMT
Not After : Feb 10 13:01:03 2026 GMT
Subject: CN=e89e2e21776e4b0bf7737657ff8f8a2ab13454eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:b7:93:85:61:ee:3b:f6:df:15:8e:95:e5:
e2:14:dd:56:b0:b8:1b:5e:a9:39:5a:ce:6c:cd:87:
ca:53:26:4e:26:0f:1f:f5:0d:d4:10:ab:c4:9a:f5:
b4:c4:cc:6f:f8:ab:8e:ce:a1:b5:12:7b:ce:90:13:
f1:46:dd:32:76:82:64:c7:35:68:26:aa:d3:05:de:
8b:ab:16:77:57:f3:b5:28:41:87:0d:85:1e:40:34:
b2:5b:cb:b1:3d:e9:a6:39:57:4f:60:82:8c:ba:fa:
c7:b1:9c:ba:15:eb:8f:bf:92:0d:ff:c6:c5:79:1f:
59:20:ec:47:2e:14:26:d3:57:f3:69:ca:ba:e5:7f:
b6:3c:23:16:dd:91:4a:ab:c8:6c:9f:82:0d:0e:3f:
26:c6:51:0b:4e:89:9f:4b:57:91:2f:d3:72:f9:87:
4f:70:4b:ab:2d:04:53:87:62:8b:90:33:1d:b5:f0:
f0:98:8d:85:b3:1f:b2:72:8e:88:97:cd:1e:a8:29:
c1:f0:08:19:84:a4:c8:39:ca:20:1c:fc:93:b0:cd:
2e:19:8e:c3:21:f0:27:1b:ee:8d:ac:e1:22:5b:44:
95:63:aa:78:13:e3:2b:ea:db:e5:5c:fc:03:0d:8d:
8c:b8:d7:26:9c:77:55:03:9f:fa:30:56:8c:02:b7:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:2E:21:77:6E:4B:0B:F7:73:76:57:FF:8F:8A:2A:B1:34:54:EB
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:02:63:2c:16:74:2b:f4:68:6c:ee:55:79:4b:41:06:cd:cc:
f4:76:16:fd:53:ff:81:eb:1e:b7:58:23:01:a2:69:a0:25:be:
22:47:ad:79:85:fb:b6:64:d6:40:bc:22:fb:8d:0e:04:3d:da:
4f:08:a2:71:c7:9d:57:d5:39:2b:d1:b2:5f:ab:50:fc:91:32:
5f:8f:e8:fe:78:ad:f6:8c:0b:84:9b:61:7b:05:5d:9a:86:08:
5a:2b:68:35:39:10:a4:7d:d3:84:f1:19:cf:83:71:e9:f7:72:
09:15:e2:55:4a:bf:0a:cc:ae:14:46:c3:8d:31:c2:13:c1:96:
9e:a5:81:82:1c:d7:d1:e4:89:b0:74:55:b8:81:71:5e:31:a3:
df:66:cb:9c:f1:2c:6e:c3:8f:74:63:44:ca:0b:26:2d:9a:d1:
97:5c:ea:1a:68:ce:88:f8:58:a7:33:55:63:28:12:89:f7:4b:
98:c1:2f:d9:2a:b4:b3:05:c3:ad:55:ed:52:24:ba:3c:43:54:
5b:69:75:f7:18:24:9d:39:ba:3f:9d:39:23:b1:4d:e6:38:22:
57:46:4f:9b:51:76:02:1c:25:68:1d:4d:0f:b9:29:20:ce:18:
6e:90:8e:21:8f:84:99:05:33:ad:ba:0d:54:65:b7:ad:9f:73:
c7:1f:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:57 2026 by rpki-client