This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: 8qSQRo4HjjDkg9fMS4tyPezvUnS/Y3VrTm5SFarg4oM=
Subject key identifier: 4A:F9:FA:21:AD:69:34:2A:6B:6C:6A:00:4B:2D:B3:82:22:97:16:85
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 019BFA9C2E0DB9BE3434C16E72227CF4E567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 177F
Signing time: Mon 26 Jan 2026 14:01:37 +0000
Manifest this update: Mon 26 Jan 2026 14:01:37 +0000
Manifest next update: Tue 27 Jan 2026 14:01:37 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: qBWtsTgwQbowyX/WlKKZ4yml6YMx5lKIWQWh0KOa6EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:2e:0d:b9:be:34:34:c1:6e:72:22:7c:f4:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Jan 26 14:01:37 2026 GMT
Not After : Jan 27 14:01:37 2026 GMT
Subject: CN=4af9fa21ad69342a6b6c6a004b2db38222971685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:38:b3:6d:5a:20:6d:39:eb:fa:8c:b7:6c:
dd:1f:ac:10:78:85:07:fe:75:76:00:3f:aa:f6:13:
1c:4e:98:8e:17:89:fe:a3:d1:0a:b0:d2:47:9b:3f:
e0:4f:2a:ed:d0:44:bf:8b:0a:fb:76:5f:76:42:77:
4d:4a:06:f7:ee:29:32:03:41:55:e3:f8:f7:7d:f6:
dd:a7:5b:c0:8d:5a:75:64:39:bf:b3:7a:c6:0a:b5:
8f:72:47:e1:52:99:7e:21:93:b5:86:5d:2b:61:41:
c3:e7:4c:d6:12:ae:e0:65:86:e7:7c:da:1c:5b:31:
5e:b8:54:ca:83:6f:26:d9:a4:ba:ea:5a:3d:2d:9a:
15:b8:bf:11:e5:6f:bd:0b:76:c9:4d:9a:22:19:05:
d9:28:4d:01:7a:53:00:34:75:b3:37:74:b2:e7:32:
12:ec:c7:b6:db:9e:11:77:09:2c:eb:61:d5:53:3c:
18:11:9f:53:fd:e1:35:56:22:68:ec:70:ed:dd:71:
99:78:05:8d:ca:7b:f7:0e:03:05:07:3e:5d:a8:07:
aa:f7:e9:40:1c:a1:d9:25:f4:9f:8d:2b:3d:f6:ed:
4d:a8:5d:6c:5c:b6:19:1a:72:af:cb:94:33:74:f1:
79:96:9f:19:ae:c9:e5:d1:1a:98:c0:0d:36:d1:01:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:FA:21:AD:69:34:2A:6B:6C:6A:00:4B:2D:B3:82:22:97:16:85
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:ca:f0:48:fe:10:cf:e5:32:f3:49:9c:1d:f1:7c:74:4a:
ab:58:ef:0d:68:a1:1c:8d:c3:c2:0f:72:ed:bb:6b:74:dc:b3:
66:ba:57:b6:ea:0a:9a:67:d4:7d:a8:37:ec:b6:aa:a2:47:9c:
16:43:36:61:ad:96:88:bf:cf:9c:09:5e:48:d8:57:c3:3e:00:
72:d2:97:18:4f:9a:4a:37:bd:ab:3a:91:3f:7d:ed:77:bb:da:
d7:ea:1e:de:f1:f2:6b:e7:bb:57:b9:a6:90:b5:60:92:c0:c1:
80:da:5c:3f:59:69:01:7b:b4:4d:f9:d2:42:13:d3:ca:87:23:
b5:51:88:b6:73:00:7e:b5:66:db:ff:ae:fd:b8:4a:b7:cc:a5:
76:8c:ce:37:ca:94:1d:38:00:15:5a:e1:93:72:0a:61:3e:32:
f2:28:81:d0:08:31:ff:aa:36:47:2c:16:86:ad:7d:54:21:d8:
eb:57:f2:63:36:f8:51:00:fd:cc:d8:47:0b:dc:c6:c4:be:6c:
55:01:08:e1:8f:ce:9a:eb:5d:0c:f9:dd:8c:49:98:9a:31:ad:
98:d5:bb:a8:9c:a6:86:e9:35:d8:fe:ec:56:ab:51:81:28:20:
08:5b:c4:62:fb:69:30:a1:2f:ad:a6:63:2c:5e:d3:da:d9:3e:
12:e9:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:18:06 2026 by rpki-client