This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File: ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier: Vh6HRrWU6aJTll4VgPIQ9w151+E867GLWLa4O8cmfDo=
Subject key identifier: 72:B1:6B:B1:59:26:BD:B6:FC:32:82:A9:ED:79:35:F8:A4:B8:BB:81
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 019BF50716B7B7E6CA0AFEC742AD5C8345C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 12:00:40 +0000
Manifest this update: Sun 25 Jan 2026 12:00:40 +0000
Manifest next update: Mon 26 Jan 2026 12:00:40 +0000
Files and hashes: 1: 14ynEoJXV6cGESEueCUwh87gUXg.roa (hash: JZTxhgcbHYTEiHxAG17P9Cv6dpEw0XIS5Wi97I1GPsQ=)
2: 4KH5oPqlph7SdgPsUcEksiUn8vI.roa (hash: lkUeA2Dm3n5cyMOdG1B7Cdcwz6ExvSxL9MH87e90v8c=)
3: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: HMb6/RFRct1B20Op5G1xy05pwQMSX182vDuOvwyYVok=)
4: MuW1vBLnQsOOOxKeFnBgdQx4Agc.roa (hash: 9v3FzvgOk0G6DAUkUFkW2Culw+ELff9ofWV2w3FNrHo=)
5: ZRIHFb09Mm1K55dH2vncQglBaXI.roa (hash: WFUjrCrkcCkKZQJsNV3ho4q8qDbHnlkrC4J5Z75DuBs=)
6: aeINCm8UEmjt6W6_5LOCbiM43pQ.roa (hash: FiSOUOoA6+XFwnTZVcoBNqJEsC2qiF3Rs0rciACSzBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:16:b7:b7:e6:ca:0a:fe:c7:42:ad:5c:83:45:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 25 12:00:40 2026 GMT
Not After : Jan 26 12:00:40 2026 GMT
Subject: CN=72b16bb15926bdb6fc3282a9ed7935f8a4b8bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:e8:98:60:67:df:30:39:3b:a2:c0:13:b4:
d4:8f:aa:64:fb:84:b8:d9:92:b7:1f:ba:07:75:e8:
f9:01:79:9c:ba:05:5c:ba:3d:23:2a:85:27:d6:4f:
46:a1:76:b5:6f:bc:ac:4f:cd:da:d8:b4:8d:74:f7:
f5:17:4e:66:23:66:82:20:66:d7:92:ce:d3:7a:4d:
97:1c:76:68:1e:0e:6b:2f:d8:d1:21:d7:e0:c1:cc:
8a:0c:37:ec:15:da:07:69:7a:35:a2:17:22:5e:c8:
52:26:53:5c:1c:fc:48:76:8a:6c:d2:67:e8:fd:cf:
93:bb:db:d5:ea:a9:21:fd:8a:f0:3b:4a:76:32:c3:
2c:7b:8e:a9:cc:0d:22:d6:c4:da:57:90:c3:25:34:
a7:e6:a8:0f:3e:8b:fb:77:52:b0:7f:05:25:9d:aa:
75:60:1b:59:98:ab:77:70:2e:91:69:d2:22:de:c5:
58:21:9e:1d:11:d4:55:57:81:8b:a6:64:78:d6:ed:
0c:58:36:23:7f:5d:c9:0a:e0:a5:29:1c:6d:f2:5e:
5e:06:e3:3f:70:de:c7:c7:cc:52:23:29:5d:d4:b0:
da:88:36:d5:c1:16:dd:5f:2b:b4:f0:c0:85:96:39:
37:d8:a7:53:45:b4:29:d0:88:52:ba:7f:b4:6f:dd:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:6B:B1:59:26:BD:B6:FC:32:82:A9:ED:79:35:F8:A4:B8:BB:81
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:d4:d3:1b:24:d5:9e:0a:40:51:1b:00:7c:6d:60:95:15:
79:32:d1:90:b7:54:83:f1:29:f4:3d:d1:a4:0d:f4:96:88:0d:
68:82:df:f4:02:b9:45:82:2f:b9:eb:5b:af:f4:b3:a7:b6:dc:
78:ea:ac:37:bd:38:49:a4:7f:95:84:42:dc:b7:97:85:da:9c:
e4:af:b7:ed:39:44:99:eb:4b:2e:c0:75:dc:ba:b2:73:61:bf:
1e:92:13:be:73:1c:06:e8:22:fe:08:93:6e:1c:73:6a:fd:a0:
22:c4:bf:ce:1a:2f:c6:c4:35:85:9d:88:53:0f:29:d9:fd:76:
23:5d:54:73:80:43:97:43:d1:24:bd:8e:cb:40:1d:7a:43:f9:
ed:68:c6:fa:cc:79:8f:f7:68:1a:d0:4a:8d:bf:9e:35:bc:cc:
5d:fd:23:a5:a2:6e:9f:03:2b:49:b7:98:68:ee:06:44:a8:d3:
b1:19:37:2d:8d:cf:66:db:31:a3:d2:b9:78:11:9a:89:ce:c3:
02:01:5f:31:c9:e9:5d:58:c2:ab:e2:95:a2:08:b5:37:7b:97:
08:2b:03:53:6f:ca:68:10:38:c3:ce:d0:59:c8:0a:1d:1f:fa:
a9:2b:80:4f:e5:a4:d1:40:5a:35:73:47:6f:b8:6a:77:a0:38:
59:29:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:23 2026 by rpki-client