This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: 9pCpYB/ZuxaT0AiMM47/jWe5Em1IwP1e+RwTJDbCuN0=
Subject key identifier: FE:CE:8D:6F:4D:E0:6A:38:43:3F:98:AB:38:C3:01:B0:5E:77:33:DB
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019BF273D6BE4A34FF8EDA566BB4C35C4F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0ADB
Signing time: Sun 25 Jan 2026 00:00:36 +0000
Manifest this update: Sun 25 Jan 2026 00:00:36 +0000
Manifest next update: Mon 26 Jan 2026 00:00:36 +0000
Files and hashes: 1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: Nb4/7TMUUZlN8ihsTbyE2r1FX/cJqQ/3l84BpZZ+gEs=)
2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:73:d6:be:4a:34:ff:8e:da:56:6b:b4:c3:5c:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jan 25 00:00:36 2026 GMT
Not After : Jan 26 00:00:36 2026 GMT
Subject: CN=fece8d6f4de06a38433f98ab38c301b05e7733db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:1c:47:e4:78:0d:59:2c:15:51:41:20:d0:
3f:b5:39:16:3c:e1:3f:62:d6:3c:a1:f2:28:a6:f8:
6f:43:97:24:33:74:c0:54:d8:11:a8:84:eb:01:54:
8e:06:3d:b1:54:0f:67:cc:d8:68:0a:2e:ef:d1:a8:
c3:79:cd:6d:2f:5d:37:e9:62:0c:f8:61:2c:40:ba:
5c:d6:87:c2:8e:17:52:ea:70:28:0b:f2:f7:44:26:
af:e3:1f:85:1c:60:72:6c:38:d3:72:dc:42:f3:b5:
f5:a2:dc:87:2a:4f:5f:05:7c:92:db:f3:c9:2c:fc:
cd:a0:5c:81:9d:29:9d:1e:8c:29:7a:8e:af:58:03:
42:f1:63:44:b9:34:ee:36:ff:79:6a:71:c9:83:6b:
18:08:80:b1:b8:4b:a4:4e:db:b5:c0:f1:36:73:4b:
15:fb:5c:5e:bd:0c:04:64:a5:49:59:ab:ec:02:10:
40:58:35:76:60:9b:6f:94:1e:28:7c:2d:e5:26:e9:
6a:83:84:1e:07:cf:8a:9f:4b:8e:60:58:a0:23:ee:
1b:f3:2d:20:44:0e:f4:97:6c:dd:43:ab:f2:84:3a:
75:b1:6c:17:93:8b:1b:eb:bc:94:a9:7e:9d:e7:13:
f1:45:9c:2b:ae:5f:b2:3b:06:65:63:6b:2b:7b:3d:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:8D:6F:4D:E0:6A:38:43:3F:98:AB:38:C3:01:B0:5E:77:33:DB
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:19:bc:47:87:7a:b2:ab:5a:59:1a:61:4d:90:26:43:0c:2f:
57:14:b1:f4:4b:48:c8:dd:de:00:9a:0c:70:d3:f6:88:f9:4e:
4f:b6:9c:f6:99:ae:05:87:3f:79:0c:aa:67:8a:f3:ce:a2:d9:
61:d0:da:6e:ee:3c:69:f7:ea:a4:b3:76:28:14:d4:26:09:34:
76:1e:3b:4a:e2:e2:ea:5b:d5:6a:38:ca:6f:95:8b:e7:16:b1:
77:e1:69:a0:69:ba:e4:fb:ae:de:24:43:09:86:cb:b6:d1:2b:
39:95:1a:69:dc:51:12:92:93:b9:f1:51:a6:70:f6:59:1b:c7:
a4:29:d1:cd:a2:6f:21:63:b6:4d:ca:18:93:f8:87:0a:2e:7a:
38:95:4f:48:49:9f:78:48:dc:28:1d:d4:2c:74:8f:6f:a3:e8:
c0:7c:35:f1:28:4f:65:4d:44:a5:b9:e8:81:02:24:6f:7b:a1:
ba:f3:d8:11:40:65:2f:ae:2f:dd:08:16:d5:cf:f6:4c:90:5b:
9f:13:5e:3f:d6:c9:5f:a4:db:f0:a1:e6:1c:83:5d:57:66:a3:
a9:d7:b9:95:1d:b5:a1:6d:da:49:c2:31:5e:c6:7e:31:80:76:
59:ca:a5:3a:d0:3f:8d:04:9b:d8:9c:ae:74:20:c4:da:b6:9b:
6b:12:9d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyc9a+SjT/jtpWa7TDXE+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx
YzRkNjgwHhcNMjYwMTI1MDAwMDM2WhcNMjYwMTI2MDAwMDM2WjAzMTEwLwYDVQQD
EyhmZWNlOGQ2ZjRkZTA2YTM4NDMzZjk4YWIzOGMzMDFiMDVlNzczM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jIcR+R4DVksFVFBINA/tTkWPOE/
YtY8ofIopvhvQ5ckM3TAVNgRqITrAVSOBj2xVA9nzNhoCi7v0ajDec1tL1036WIM
+GEsQLpc1ofCjhdS6nAoC/L3RCav4x+FHGBybDjTctxC87X1otyHKk9fBXyS2/PJ
LPzNoFyBnSmdHowpeo6vWANC8WNEuTTuNv95anHJg2sYCICxuEukTtu1wPE2c0sV
+1xevQwEZKVJWavsAhBAWDV2YJtvlB4ofC3lJulqg4QeB8+Kn0uOYFigI+4b8y0g
RA70l2zdQ6vyhDp1sWwXk4sb67yUqX6d5xPxRZwrrl+yOwZlY2srez1BawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7OjW9N4Go4Qz+YqzjDAbBedzPbMB8GA1UdIwQY
MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt
Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy
LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxm8R4d6
sqtaWRphTZAmQwwvVxSx9EtIyN3eAJoMcNP2iPlOT7ac9pmuBYc/eQyqZ4rzzqLZ
YdDabu48affqpLN2KBTUJgk0dh47SuLi6lvVajjKb5WL5xaxd+FpoGm65Puu3iRD
CYbLttErOZUaadxREpKTufFRpnD2WRvHpCnRzaJvIWO2TcoYk/iHCi56OJVPSEmf
eEjcKB3ULHSPb6PowHw18ShPZU1EpbnogQIkb3uhuvPYEUBlL64v3QgW1c/2TJBb
nxNeP9bJX6Tb8KHmHINdV2ajqde5lR21oW3aScIxXsZ+MYB2WcqlOtA/jQSb2Jyu
dCDE2rabaxKd0Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:40 2026 by rpki-client