This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: 3pqDkHF3TL0cztv+yhvhN1PcsrQ2uaV10rZ41+7Hu6Q=
Subject key identifier: FD:64:49:A5:FB:03:66:34:B1:C4:8A:46:2D:C4:E4:2E:4D:B9:60:77
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019BF8E3F2E6954FCA9C9A419905064E1CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0CD7
Signing time: Mon 26 Jan 2026 06:00:46 +0000
Manifest this update: Mon 26 Jan 2026 06:00:46 +0000
Manifest next update: Tue 27 Jan 2026 06:00:46 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: /PwHjhIysg/h7cLcK+GSzVB/XwdRMBv2wAWVpJN1tzs=)
2: MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa (hash: Qd2SVc4TBTw+56gUg4ZW2uBmux+ll/A2gumdDvDs79g=)
3: NJRcO67OlUn-IGiJT8guZ_TuAV8.roa (hash: seZ+L6NijADUgFTgnLwHb3u5+uU9gSkf5FEv7ta5fbk=)
4: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
5: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e3:f2:e6:95:4f:ca:9c:9a:41:99:05:06:4e:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jan 26 06:00:46 2026 GMT
Not After : Jan 27 06:00:46 2026 GMT
Subject: CN=fd6449a5fb036634b1c48a462dc4e42e4db96077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:cc:b1:cd:06:4d:4b:20:06:b1:a2:2c:86:
e5:4e:68:a1:53:af:b0:82:1d:05:ac:d1:e1:29:70:
26:e7:f0:0b:b0:1e:56:6e:b4:a3:6a:16:96:c5:d1:
19:ca:11:18:f9:86:76:b7:dc:e1:8b:af:93:ac:91:
cf:e7:f5:f6:5c:9f:6a:4a:4a:3c:73:13:ae:9b:d9:
fc:de:92:5f:2b:f3:29:2a:2a:ee:66:9d:e9:45:60:
8e:d0:e6:b2:d9:98:ed:74:02:66:9b:eb:37:c1:80:
3f:79:cf:cc:96:a4:9f:4a:94:47:4c:5c:99:9f:c9:
e3:cf:2c:8b:00:86:18:36:34:c5:c7:e8:03:00:05:
75:97:24:1e:53:05:8b:5e:cf:bb:83:0d:7a:a9:e2:
4e:65:ba:2d:db:a5:aa:93:17:46:25:32:5d:cd:0c:
41:97:9f:8d:72:e0:a5:30:c3:75:84:10:23:9c:bd:
59:62:a9:b3:55:89:46:71:3f:27:88:4f:99:d9:79:
06:f3:80:4b:66:49:73:2e:74:da:ce:c2:3c:bd:02:
57:7a:32:1d:2a:07:a1:2f:84:5b:c8:a1:87:44:54:
e2:2d:da:06:fd:9a:c4:51:56:62:30:4c:f8:10:88:
ab:14:f2:97:77:c1:d8:ef:fa:e7:98:a1:61:ef:fd:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:49:A5:FB:03:66:34:B1:C4:8A:46:2D:C4:E4:2E:4D:B9:60:77
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f3:03:74:9c:c5:63:b5:80:71:c1:ba:19:56:6f:d6:a3:8d:
70:d3:2a:a6:37:ae:a0:da:db:d4:3d:a9:a5:51:09:27:df:84:
f3:19:58:1e:b4:6d:a5:75:a7:ac:10:c3:92:71:36:ec:99:6d:
c2:b3:36:1f:f0:1a:37:d1:d8:c5:d5:2c:22:f1:bd:81:cc:fd:
fc:39:5c:78:a3:1f:07:e5:4f:b2:43:76:23:60:88:99:2c:b0:
ea:fc:23:e0:88:17:0c:74:f5:de:de:a3:42:88:cc:3c:3c:ee:
7b:71:f7:7e:1b:76:4c:ad:90:87:f4:a8:8e:f4:a1:05:49:e5:
9a:95:d3:82:33:f1:8a:72:bf:b3:ac:80:b7:d2:8b:70:e7:48:
13:86:8e:d4:c0:f3:22:c8:0b:13:a8:6b:ed:8d:30:29:f1:7e:
d7:27:30:1a:6a:62:a1:ae:f0:f5:a3:34:1a:8a:f7:a7:3f:8a:
17:31:df:07:6a:a7:fc:19:e9:89:df:d0:3d:7f:be:2e:3c:2d:
b2:d6:dd:8e:0c:a8:c6:db:49:86:f1:42:09:f2:57:1c:6c:0a:
8f:db:87:43:ff:0b:f5:c4:e3:b7:52:9a:05:4f:40:f4:7a:d0:
94:b0:48:8d:c9:48:d9:32:b8:6c:b5:75:93:dc:3e:44:a8:a8:
9c:99:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:32 2026 by rpki-client