This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: vA1ItfX4B08U/NV5nGO4HV6fr5X39AUFVqLz6BJSU7E=
Subject key identifier: 72:A3:DF:BE:45:C9:6A:B8:F6:97:91:B7:5E:17:4B:E5:91:AC:A4:59
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019BF72D690039E33BB0A83E8E55983F0ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 180B
Signing time: Sun 25 Jan 2026 22:01:46 +0000
Manifest this update: Sun 25 Jan 2026 22:01:46 +0000
Manifest next update: Mon 26 Jan 2026 22:01:46 +0000
Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: sCW23ReemtdgS69XrN4k7jG5LyyquFiujShPesgrnXY=)
2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:69:00:39:e3:3b:b0:a8:3e:8e:55:98:3f:0a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jan 25 22:01:46 2026 GMT
Not After : Jan 26 22:01:46 2026 GMT
Subject: CN=72a3dfbe45c96ab8f69791b75e174be591aca459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:23:a9:43:05:f8:62:d6:a9:55:8c:6e:49:
29:29:b9:f8:a4:58:2c:7f:86:1e:37:07:f0:a2:46:
4e:7a:05:8f:b8:74:2a:33:00:73:e8:eb:46:38:2f:
fa:37:3e:81:14:5b:21:16:a8:42:33:d6:83:53:c2:
d7:0c:c4:ab:c7:91:2e:ed:be:22:ee:2b:68:e7:b3:
bc:61:d0:d1:b0:5c:d6:15:9a:6d:95:00:75:f0:d1:
cc:56:eb:08:a9:0c:8e:45:af:84:8d:9c:d1:26:79:
de:0a:ed:a7:54:26:a0:f0:46:00:eb:8b:e7:43:c1:
6c:24:2e:17:4b:06:fe:a4:44:8f:e5:a3:e9:1c:55:
45:a6:d7:26:0d:61:70:c2:4f:e9:ff:0c:73:bf:0b:
d8:f6:62:34:39:b9:d5:b3:2e:4b:f5:16:5a:00:05:
55:79:55:7e:08:8b:08:53:79:9b:34:bf:a4:87:a7:
96:ad:b5:b7:00:b9:20:54:94:e1:31:fb:88:13:4b:
cf:01:65:76:2d:07:10:4c:6b:6a:da:a8:4a:8b:34:
2c:55:6b:6b:91:d9:82:32:d9:86:d9:e0:f1:72:ef:
1a:ab:a8:9d:36:c7:f5:c9:34:23:b0:4c:6c:ee:d7:
60:1c:92:ea:4f:6e:7b:9c:01:e3:5e:56:0f:b5:a5:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:DF:BE:45:C9:6A:B8:F6:97:91:B7:5E:17:4B:E5:91:AC:A4:59
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:f8:40:f4:43:db:c0:42:9c:b7:04:ea:1f:24:69:26:94:
6f:f0:e6:1e:ff:24:00:2e:87:a5:d8:bd:b0:a9:3c:c8:b8:f4:
df:e9:7e:8a:01:9e:56:42:d1:f7:77:7a:67:cb:bb:12:a6:80:
48:05:88:2f:b7:2d:49:da:a7:b4:86:98:50:17:64:b0:3e:ca:
00:d2:5f:fd:61:99:09:fd:a3:16:f5:35:60:75:30:17:31:f6:
a0:cf:f7:98:56:b7:93:68:cf:31:61:f9:5c:0c:17:3a:04:29:
52:fd:92:ad:72:fa:c2:0d:a3:af:df:99:0b:ea:95:1e:02:bf:
64:14:1c:87:d9:80:07:b6:91:cf:4f:22:3a:5c:8c:0b:2e:78:
c0:09:50:5f:c9:48:ba:92:ae:80:90:4c:ee:02:94:b1:19:6d:
62:e7:65:7d:87:ff:5e:5e:6c:ac:5f:4e:9c:8f:c1:22:c1:a2:
d8:99:0c:db:b7:ea:80:e3:b6:55:fd:e4:7e:cf:3b:78:fb:a0:
6c:5a:86:e5:de:99:4d:55:46:61:d7:59:27:23:58:7a:4f:28:
ec:90:92:7e:5b:9d:da:e9:29:9c:07:6d:a0:d6:87:4a:09:32:
c9:d2:0b:1e:48:cd:16:e9:ef:bd:0c:e5:8b:e0:42:bd:35:40:
a9:18:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:10:53 2026 by rpki-client