This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: VjDSG1ewB16fBZ67KyP+fwVa+hKb4Y070hIxKdx/4hk=
Subject key identifier: 1A:BE:B5:E3:60:65:05:65:E4:57:AF:DF:C4:43:49:9F:40:1A:C4:04
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019BFB096146C6FCCC7B1BAEFF7F77E7326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 15A9
Signing time: Mon 26 Jan 2026 16:00:54 +0000
Manifest this update: Mon 26 Jan 2026 16:00:54 +0000
Manifest next update: Tue 27 Jan 2026 16:00:54 +0000
Files and hashes: 1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: 752oObxMrwtesQ1HdHM8MzjnQp7EqdCUZYpw+sFrAo0=)
2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:09:61:46:c6:fc:cc:7b:1b:ae:ff:7f:77:e7:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 26 16:00:54 2026 GMT
Not After : Jan 27 16:00:54 2026 GMT
Subject: CN=1abeb5e360650565e457afdfc443499f401ac404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:44:b6:22:3c:bf:a6:f9:f2:0c:76:4f:78:
1b:b9:92:35:d3:77:74:39:46:8b:f6:f2:96:f5:ab:
91:ad:94:75:92:8b:5e:29:30:9e:12:91:c4:d4:ff:
31:21:e6:9e:ca:b0:f4:88:8f:47:1c:5f:82:d1:29:
47:bc:fd:78:4a:5b:1f:29:cf:91:1b:9a:cf:25:b6:
c6:92:e6:69:9e:e0:c3:24:3a:fd:e4:2c:15:b5:53:
38:e8:ff:f3:cb:2e:76:0c:64:33:30:7b:13:f3:c1:
95:fa:f6:4d:46:09:82:9a:ec:32:da:38:af:aa:6d:
38:32:d5:c6:6e:86:b7:2c:84:2f:00:01:59:0c:27:
ec:80:19:d1:38:0d:62:16:88:45:7f:6a:5e:b4:e2:
a9:b6:54:f3:88:39:57:8c:3e:71:e1:a4:38:f7:8a:
21:3a:82:5b:dd:0f:cc:68:d3:18:03:19:af:15:a7:
be:e6:ec:d6:32:c3:f3:35:42:04:8c:08:a7:47:aa:
83:3a:c9:64:e4:77:b3:e6:74:4a:6d:0a:46:05:2e:
8b:e1:8c:c1:6f:4d:9c:34:6a:76:ab:6d:43:21:f9:
68:b7:a6:9e:8a:cf:76:ef:8c:ef:7c:a2:33:a5:88:
d5:a5:ef:06:9f:6a:a1:aa:0a:66:20:dc:1f:c2:be:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:B5:E3:60:65:05:65:E4:57:AF:DF:C4:43:49:9F:40:1A:C4:04
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:b0:de:e3:b4:e6:8a:17:83:d6:6e:2f:75:49:6e:4c:b8:
e0:92:ad:a3:72:8f:a9:e5:51:25:6a:5c:e4:04:bb:bd:71:fb:
03:67:5d:d3:d2:83:f4:f3:a4:96:df:b3:17:4e:85:a3:b4:52:
a5:a4:82:2f:4b:93:a2:e6:b2:68:f2:9f:dc:ce:b3:b1:38:c9:
42:bf:87:7d:42:64:e0:a5:df:eb:a1:8d:fe:e9:45:96:47:12:
bb:e0:24:56:21:8f:3f:81:7e:d7:cb:01:39:85:4f:ae:39:2e:
0f:6c:6c:5e:1b:0c:02:ac:53:09:ac:5c:9b:e2:80:a5:15:92:
ea:e6:44:46:29:74:b5:8a:16:92:07:5b:e1:a9:ad:1b:e3:3c:
45:c3:aa:bc:7f:e6:93:46:7e:b7:8c:02:f2:89:eb:6c:2d:7f:
be:c1:58:9d:e2:88:08:61:bb:5b:0c:f8:88:de:14:db:6e:e0:
19:5c:f9:b1:d3:48:67:51:78:9a:da:c1:14:78:8d:08:8d:e7:
a3:10:f1:7c:f0:7d:86:26:70:d6:60:75:f0:2c:33:58:10:6b:
69:27:2a:82:cf:52:b2:3a:95:e5:f6:ac:19:4c:14:a7:c2:03:
13:a4:10:c0:90:ef:8c:27:8b:66:51:b3:ea:79:1d:fe:f7:64:
4b:9b:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:14:25 2026 by rpki-client