This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: IXWm2WfDrYnNo0uhN+PuFdNoTmncg5P2scBPCqhEVJg=
Subject key identifier: 8D:9E:DA:94:5E:BD:48:9F:FC:66:F8:4D:D2:A6:30:48:32:75:FA:62
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019BF6BF2178A941FCCA8304BCE6CEE8DBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0B4D
Signing time: Sun 25 Jan 2026 20:01:19 +0000
Manifest this update: Sun 25 Jan 2026 20:01:19 +0000
Manifest next update: Mon 26 Jan 2026 20:01:19 +0000
Files and hashes: 1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: 5cPAjQNcQ0CSsr1a1qEExgPKQ5UtVb4AFUAI/Ii4EDs=)
4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:21:78:a9:41:fc:ca:83:04:bc:e6:ce:e8:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 25 20:01:19 2026 GMT
Not After : Jan 26 20:01:19 2026 GMT
Subject: CN=8d9eda945ebd489ffc66f84dd2a630483275fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:ee:23:59:cc:dc:d7:9e:83:ef:a4:e7:a5:
bb:44:99:dc:5c:35:69:00:bd:1c:c5:0e:e4:bc:c9:
e3:86:4d:44:eb:44:35:69:40:d7:6d:b8:f5:0e:84:
df:7a:02:bc:a5:7a:ed:e2:8d:ff:b8:6a:4d:2f:0e:
5b:8e:e9:8f:24:46:53:a9:50:57:83:0f:d5:8c:61:
46:cd:ab:10:4a:df:24:e9:89:0b:4d:b0:68:5d:2e:
e2:3b:d4:0a:75:6c:74:5c:72:f5:c7:66:46:2e:5b:
79:a3:af:c6:14:9a:c4:c8:86:27:10:59:f8:61:bd:
6f:e1:26:fc:c0:e7:b8:7d:65:b2:0c:c2:9b:7b:79:
cf:35:3d:28:59:78:2e:78:96:48:5e:44:c5:25:60:
7e:79:f1:4c:4e:f8:c3:91:df:8d:01:ed:3c:f5:75:
2c:29:0b:c5:25:49:e9:d1:9a:c7:66:de:c9:12:e1:
f8:78:b1:a1:31:8d:3b:23:8f:0e:47:17:55:80:b7:
02:42:bd:7a:66:1c:19:2b:6c:55:90:f3:47:a1:5c:
b3:92:8f:f5:51:96:28:2f:e9:42:89:90:a4:50:1d:
15:94:87:31:3c:cc:7a:25:00:f7:d3:54:83:92:b9:
4f:9b:96:83:52:55:c5:11:21:26:3c:a5:6e:06:de:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:DA:94:5E:BD:48:9F:FC:66:F8:4D:D2:A6:30:48:32:75:FA:62
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3d:95:c4:5c:6f:ad:15:01:9f:21:86:2f:b0:cb:fa:c2:10:
af:56:ef:45:8a:1e:e8:0b:99:d4:6b:84:6a:f6:d8:bc:25:74:
d3:c0:df:fd:4d:c5:06:0a:e8:73:62:9d:b5:58:23:ae:13:e4:
e9:c5:34:35:05:d1:d7:6c:ac:95:49:e7:1a:76:ac:2b:7b:ee:
d4:75:38:4a:29:14:01:c8:46:50:71:cf:08:6a:27:3c:51:a4:
4f:27:9d:5f:ef:e8:19:a1:a0:1a:5b:61:6f:21:47:a3:ec:6d:
b5:10:55:51:d9:13:55:76:aa:8c:e1:2c:8b:f8:a5:f7:a0:1f:
89:e7:cd:3c:df:bd:52:f3:af:70:e2:31:87:00:8d:59:d1:68:
6e:44:7c:e5:07:50:af:4d:a0:2d:88:6f:10:07:8c:1d:73:2e:
c5:d1:f5:e9:11:33:a9:b3:9c:2a:2a:7c:0a:21:cf:d9:32:0a:
1f:2d:1d:13:d2:37:b9:98:52:91:e8:1d:52:c6:7d:60:4d:f1:
2e:97:c4:27:7f:42:f9:98:f5:2e:e4:6b:43:c2:f9:56:d6:30:
3b:d3:c2:b0:61:20:7a:8a:84:6d:cf:96:7f:25:25:cf:22:de:
0c:52:34:ad:12:31:35:73:2f:46:76:b1:b7:a6:04:d1:6e:d1:
a5:6c:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:15 2026 by rpki-client