This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier: gYhcGEAAXgUdu6a1AeiQWcaWa6S3JDxaNVyAuqoWjqU=
Subject key identifier: C0:55:9D:9D:6A:34:63:1A:62:7A:28:7E:92:DE:0E:50:FF:3C:2F:66
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial: 019C41D8802A797C40B4EC4773D04C6B81C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number: B5
Signing time: Mon 09 Feb 2026 10:00:33 +0000
Manifest this update: Mon 09 Feb 2026 10:00:33 +0000
Manifest next update: Tue 10 Feb 2026 10:00:33 +0000
Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: 3nm1NIHyrGFpB2lxxqNz+S15Pcie8qSFYenMrnhe5Bw=)
2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:80:2a:79:7c:40:b4:ec:47:73:d0:4c:6b:81:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Validity
Not Before: Feb 9 10:00:33 2026 GMT
Not After : Feb 10 10:00:33 2026 GMT
Subject: CN=c0559d9d6a34631a627a287e92de0e50ff3c2f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:66:57:e1:bf:16:f7:58:d9:43:1e:df:ba:
a6:6f:ae:3d:f5:a1:a8:3d:0e:2b:2c:ac:10:e0:d6:
5c:f7:08:96:49:c4:3f:ab:dc:7c:c3:f8:a6:3f:48:
ab:24:77:e5:56:30:8b:71:a4:b4:d1:27:14:d6:40:
f6:cc:a6:75:8e:76:35:07:a6:18:eb:62:91:ad:90:
7d:14:6e:8d:a2:31:4e:e0:aa:34:6f:c6:36:91:10:
e0:84:b6:5c:13:66:9e:f5:f9:ff:ac:7f:3b:2d:1f:
b7:db:50:15:9a:49:be:b7:06:cc:76:93:9f:cc:4e:
1e:c2:a9:33:f3:2e:7e:3a:c4:26:d8:8c:35:d1:56:
ea:45:f3:06:fc:7d:2a:f4:45:9e:34:c2:11:74:f4:
d3:5e:f1:de:db:a5:b7:78:06:db:c5:04:e8:8a:56:
67:b0:6c:b0:c6:51:07:d3:cc:9c:73:d1:61:6f:91:
d5:dc:c5:3a:6d:af:33:bf:03:e8:68:d4:f7:4d:86:
b6:f3:dd:99:79:6f:f1:e0:18:fc:fd:77:73:1f:98:
c6:1e:c5:b5:46:da:2b:6f:fc:bd:86:f9:b1:9a:0c:
71:0c:69:63:0c:4c:62:c9:64:76:05:3a:bb:10:dc:
b0:21:44:68:fe:ed:2a:61:a4:53:8c:a9:f1:56:ad:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:9D:9D:6A:34:63:1A:62:7A:28:7E:92:DE:0E:50:FF:3C:2F:66
X509v3 Authority Key Identifier:
keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:46:d0:94:08:71:c4:d6:f6:c0:95:93:de:02:11:6e:4d:
11:3f:39:98:78:41:46:81:f9:ef:5a:74:35:71:15:81:4c:e1:
1a:95:a0:9f:e3:fa:6f:f7:3b:b9:6d:e8:96:b1:8c:83:01:aa:
55:f2:a0:a9:cd:10:39:00:67:1a:aa:64:64:71:31:28:6b:cb:
3c:16:af:44:73:39:0f:ec:01:ce:df:5f:75:2a:64:bc:87:27:
d0:aa:e1:60:f9:49:09:8d:56:d1:c2:54:7e:eb:41:cb:89:90:
2b:a9:7e:a4:79:2b:fb:e3:05:1c:23:23:31:41:d8:bc:af:43:
8f:36:8b:8d:3e:c1:10:8e:02:1f:43:f0:6e:d7:a0:4b:b0:e3:
dc:33:47:77:9c:62:2b:5d:e7:6a:8a:25:5f:22:98:3d:63:3a:
98:92:d4:2c:64:2b:a8:c0:61:fc:a1:a5:b6:59:ce:9a:33:51:
53:06:29:28:e3:d1:bd:71:4c:7e:83:75:69:bb:d1:6b:01:90:
e2:6e:bd:66:27:1f:6e:b0:7d:c1:10:d8:44:94:fb:ec:0c:6e:
ea:7a:7a:69:34:6d:46:a5:1f:63:7e:8e:66:82:e1:91:69:74:
d7:34:bc:b9:be:d4:19:13:ba:f2:10:fe:2f:71:92:b3:b5:6f:
19:4a:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:52 2026 by rpki-client