This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: ZGCxwl1842g7UtB1vkHkNRiaoUMaF9IjknzfjrMbVbE=
Subject key identifier: 40:12:71:67:4D:2D:AD:59:66:16:7B:3B:6D:E4:10:2C:8B:D1:92:B1
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 019BF2E1EF80A33CCB961AA7852170B83AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0B19
Signing time: Sun 25 Jan 2026 02:00:51 +0000
Manifest this update: Sun 25 Jan 2026 02:00:51 +0000
Manifest next update: Mon 26 Jan 2026 02:00:51 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: FWRMjYtIq9Dw2mIHriuXZWEkJaXCJiPvrA1RTGClQJM=)
2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e1:ef:80:a3:3c:cb:96:1a:a7:85:21:70:b8:3a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Jan 25 02:00:51 2026 GMT
Not After : Jan 26 02:00:51 2026 GMT
Subject: CN=401271674d2dad5966167b3b6de4102c8bd192b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:82:51:9b:a9:e2:c0:17:1c:34:e4:7a:63:
74:28:6a:4c:b0:4d:e0:9d:90:b8:83:e5:d7:95:b8:
ec:98:9a:c5:a6:ec:21:db:a8:58:de:7f:17:f8:63:
5a:8c:14:46:09:cc:c1:ee:ca:08:6b:21:39:08:f4:
08:49:c6:8b:8a:bf:ae:e6:02:71:67:85:12:e3:b4:
39:0e:18:83:67:ea:61:47:a2:74:0c:b1:86:ab:8e:
e1:cd:49:d1:12:b6:32:ab:10:4a:bb:35:8d:e4:82:
b2:98:2c:92:da:ae:9e:37:a0:1a:95:94:07:c1:63:
e8:e1:04:96:15:9a:03:80:71:f8:46:1c:02:a1:4a:
10:c0:73:39:9a:a8:90:6a:2c:f3:b3:82:0b:97:12:
76:f8:b6:d7:69:9c:24:ea:ce:03:c5:bd:63:86:9c:
0c:23:06:2d:c3:06:48:e2:dd:75:46:91:02:d8:3d:
ba:73:27:c2:5f:c9:8e:9e:f4:93:6c:89:e8:a4:ae:
47:74:09:05:d5:54:d8:83:e2:96:0b:c0:01:97:3d:
a2:43:3b:49:b3:8d:1a:e2:27:3c:ee:52:40:36:08:
ea:df:ed:0f:87:37:31:08:24:67:a5:e0:e2:13:38:
0a:b0:25:eb:87:26:be:58:17:83:08:ec:12:6e:f1:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:71:67:4D:2D:AD:59:66:16:7B:3B:6D:E4:10:2C:8B:D1:92:B1
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:00:4d:83:6c:13:d0:1f:0a:68:56:bc:e9:47:4f:63:99:ed:
b6:06:a9:b9:1c:60:2e:b8:9a:77:e9:0b:55:51:7b:cb:f5:43:
89:59:30:b0:77:89:41:41:b4:ed:ba:59:f3:12:a9:47:33:dd:
57:08:18:cd:42:b3:c5:03:02:89:bf:c3:e3:c8:5e:7b:cb:cc:
33:b7:cc:fe:5a:66:5c:81:c0:62:94:7c:a5:19:46:d4:6b:3f:
8b:5a:54:87:cf:77:2b:7a:75:83:66:9e:30:c0:73:24:1c:40:
08:1f:ff:06:0f:a8:4c:d7:7e:73:48:8c:d0:2c:e5:5b:d3:00:
ef:a7:d7:12:2c:60:e9:e4:08:0a:c0:1b:64:61:85:ab:86:80:
a8:4d:36:1e:25:3a:10:88:2d:04:2c:8d:28:4d:ad:e1:61:47:
cf:59:e3:3d:11:7e:ed:31:a2:22:55:56:51:97:87:61:b4:7d:
ca:28:45:0c:53:5d:b2:e8:27:2a:0c:69:af:d0:22:40:1a:d1:
2c:f5:72:eb:b0:ed:26:99:72:46:77:5d:26:f0:7d:bb:9c:87:
4c:5c:59:65:7a:0f:db:dd:75:c5:06:92:d9:c9:df:95:22:2e:
d7:3d:a3:cf:6d:03:02:3b:c0:63:1c:22:9a:28:11:bd:1e:54:
59:18:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:44 2026 by rpki-client