This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: hKQIfiax8ruOeoQ7ptFR4iCX/Bs0UiyUk0BxPbRfXCs=
Subject key identifier: C7:E2:53:7C:F9:D2:62:83:94:0E:4C:3B:9B:B0:47:74:0D:24:7F:F1
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019BF7639A653A80FEF15BA366B4287BA924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 180A
Signing time: Sun 25 Jan 2026 23:00:58 +0000
Manifest this update: Sun 25 Jan 2026 23:00:58 +0000
Manifest next update: Mon 26 Jan 2026 23:00:58 +0000
Files and hashes: 1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: CO/x+mNe9ovQaSN/zNj14HV46kaiA+auiGPx7zcdlvw=)
5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:9a:65:3a:80:fe:f1:5b:a3:66:b4:28:7b:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 25 23:00:58 2026 GMT
Not After : Jan 26 23:00:58 2026 GMT
Subject: CN=c7e2537cf9d26283940e4c3b9bb047740d247ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:45:df:95:51:a7:47:54:f6:7f:16:89:34:
a6:92:a2:b8:57:3a:37:49:47:42:58:44:1b:e9:cb:
4d:4c:c2:7d:1a:bc:fe:62:99:75:bc:ae:a4:3f:31:
6a:be:0a:93:fe:24:7b:2f:af:df:85:d2:ce:8f:8f:
48:3a:91:d4:1b:75:67:6b:6b:ce:3f:86:c8:49:40:
cb:63:25:56:15:8e:f0:bc:a2:2f:d4:b3:f0:c8:42:
5e:b6:34:cd:61:b5:0b:51:63:4e:c4:60:6a:9c:a9:
2a:a5:36:55:90:ca:23:e3:ea:37:be:3b:5c:24:70:
24:42:14:fc:7b:41:e3:d2:88:23:dd:87:f8:21:cf:
41:ac:68:73:a9:c2:c3:c3:53:ef:9c:c2:55:ca:cd:
47:10:2d:6b:27:90:2c:97:a1:36:44:4d:82:9d:ab:
f9:54:62:6f:4e:01:74:26:c6:15:9a:5a:55:fa:8b:
24:45:d8:36:0c:66:88:a3:ab:bf:63:56:c9:13:73:
1a:7a:e1:42:0d:ef:05:3c:ee:10:be:b2:2b:30:51:
4e:92:6a:18:6f:7c:58:d9:16:2b:8e:8d:b2:f3:ed:
c1:ae:72:60:56:32:2d:63:cc:f5:c4:2a:cf:54:2e:
24:a4:26:c9:65:4c:23:f6:62:c8:ff:89:21:2c:04:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E2:53:7C:F9:D2:62:83:94:0E:4C:3B:9B:B0:47:74:0D:24:7F:F1
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0c:3a:f9:f3:24:6f:06:d8:e8:08:7f:60:92:4a:e6:b7:e7:
09:81:a1:3f:0f:9f:63:87:98:0d:da:d0:10:54:9b:a0:97:69:
22:0f:42:7d:61:d8:9a:09:07:e0:15:b8:3f:49:2e:79:df:04:
94:6b:bd:87:35:2f:a0:77:3e:43:26:72:10:03:f0:4a:d8:5c:
76:59:a2:08:0e:ac:a8:2b:92:54:ed:3b:46:a3:59:09:98:6f:
05:2f:76:bd:f8:9e:d0:ab:d7:66:97:05:b7:52:fa:ec:bf:43:
40:f0:e6:08:fd:27:d3:e2:75:59:9d:d1:46:d1:5d:3f:8e:f7:
22:47:00:14:2c:c6:35:13:ae:a6:67:47:a9:85:1f:40:39:44:
cd:55:65:f3:b2:56:6a:bb:76:b0:33:82:52:82:a0:09:9f:f0:
22:86:04:b8:4b:9d:be:93:b2:17:7b:0e:09:23:f5:08:5e:50:
5e:d1:79:4a:68:30:27:e1:45:39:77:a0:e1:43:1f:5b:6c:72:
5f:49:a0:a4:3c:b1:6a:89:df:d3:ce:26:f1:9c:a5:fc:33:c9:
5c:45:73:69:9b:01:7b:39:34:c2:30:a3:2f:49:15:ad:04:4f:
16:7b:79:c8:ef:37:ad:b2:06:ac:65:40:70:4e:ad:b0:41:20:
a7:97:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:38 2026 by rpki-client