This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: QNbIEks1z9M0geV9P64HpBikZCj4FQIAj3P7D8zfN1I=
Subject key identifier: 19:AA:10:89:68:F5:21:87:6D:A2:48:D8:8A:33:E5:6D:31:54:5E:2B
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019BF3500E4D4BA40F2D578B8EF506B82E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0F9E
Signing time: Sun 25 Jan 2026 04:01:08 +0000
Manifest this update: Sun 25 Jan 2026 04:01:08 +0000
Manifest next update: Mon 26 Jan 2026 04:01:08 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: NYBMA8a+m4aDEuA854oGsaM8kZrQzceVYwWVAdunskE=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:0e:4d:4b:a4:0f:2d:57:8b:8e:f5:06:b8:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jan 25 04:01:08 2026 GMT
Not After : Jan 26 04:01:08 2026 GMT
Subject: CN=19aa108968f521876da248d88a33e56d31545e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:1e:e5:94:c9:6f:cb:6e:74:12:e8:70:ae:
54:92:17:cb:0c:be:3f:d7:99:87:18:fa:4f:1f:85:
1b:dd:e7:a2:66:62:f0:90:74:b4:9f:74:d6:31:13:
98:13:11:0f:50:12:10:7c:48:cf:93:04:1a:0b:34:
3b:31:9b:a9:f3:41:27:e4:63:b3:6e:b2:1a:34:71:
b0:d3:89:cc:28:7a:a7:2a:f8:4b:06:de:b7:71:6b:
03:40:f2:79:2b:af:b3:59:6b:85:c0:6e:f3:77:a1:
ee:27:42:76:38:48:cc:c8:75:60:2c:e3:b6:52:3e:
9d:f6:b8:d1:e8:0d:95:01:e1:3a:f2:8c:10:64:bf:
a6:0f:0f:df:ea:c3:d0:aa:f8:bf:ac:a0:28:06:20:
9c:b4:16:9d:85:ee:26:2c:43:da:25:86:9f:f8:7c:
b1:8a:5e:20:14:e5:d5:ba:19:64:09:c2:4d:27:2d:
94:a1:e8:0d:9c:d9:c6:ad:6f:37:07:41:4d:a4:62:
1d:f0:70:85:6d:83:19:77:df:0d:99:e9:dd:cc:c6:
a6:db:30:f0:0f:1f:0e:20:6b:cb:05:17:1d:48:4a:
68:b7:6c:f8:1c:01:8a:0b:d5:29:9d:0e:92:eb:88:
ab:2d:59:9a:48:84:40:72:48:88:91:f2:d4:46:c1:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:10:89:68:F5:21:87:6D:A2:48:D8:8A:33:E5:6D:31:54:5E:2B
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:4a:c4:0c:ad:61:74:1d:f5:d7:ce:78:17:71:a3:12:a8:42:
e4:60:3e:9c:e2:e7:4d:21:ea:d7:94:43:ea:7c:e1:17:6e:3e:
fb:c6:8c:75:b3:e4:d1:b8:c3:e0:a1:17:a7:37:1b:74:09:b1:
3f:c2:4c:c9:5b:16:29:93:43:66:4c:82:1f:80:c6:f5:ea:28:
b1:46:8b:37:c5:52:3a:cd:1c:86:79:98:71:8c:28:83:49:be:
35:90:45:d9:3b:15:d4:17:3e:4b:a5:b2:a6:a4:1f:49:51:ce:
09:a1:3d:55:53:eb:66:5b:e0:5b:83:1b:3e:da:e5:d3:43:94:
d6:92:96:7f:6e:c4:0f:4a:37:15:57:14:e2:5f:5c:fd:24:9e:
b1:9d:62:9c:11:ba:bd:ae:0a:50:89:91:40:ac:e7:3e:ec:58:
22:5b:0a:87:9b:54:2d:52:b9:5b:23:f3:6d:d0:92:4e:e1:8a:
a5:95:2c:a2:06:8a:bd:78:91:94:db:6b:70:4f:ec:7d:a5:42:
74:36:a6:a5:12:47:d4:4b:25:12:b3:cb:e8:02:69:5b:22:61:
54:8e:e2:d5:b8:4d:6c:e8:0f:07:b2:ad:f6:81:01:52:28:89:
7d:5b:47:a8:a2:66:19:09:9d:26:bf:5f:cb:9c:06:6e:f0:34:
41:33:f0:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUA5NS6QPLVeLjvUGuC4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGM4NjdjOTc5ODcxYzdhZGIwOWY3YzYyMTliYTViMDY0
NTkzMWMwHhcNMjYwMTI1MDQwMTA4WhcNMjYwMTI2MDQwMTA4WjAzMTEwLwYDVQQD
EygxOWFhMTA4OTY4ZjUyMTg3NmRhMjQ4ZDg4YTMzZTU2ZDMxNTQ1ZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3voe5ZTJb8tudBLocK5UkhfLDL4/
15mHGPpPH4Ub3eeiZmLwkHS0n3TWMROYExEPUBIQfEjPkwQaCzQ7MZup80En5GOz
brIaNHGw04nMKHqnKvhLBt63cWsDQPJ5K6+zWWuFwG7zd6HuJ0J2OEjMyHVgLOO2
Uj6d9rjR6A2VAeE68owQZL+mDw/f6sPQqvi/rKAoBiCctBadhe4mLEPaJYaf+Hyx
il4gFOXVuhlkCcJNJy2UoegNnNnGrW83B0FNpGId8HCFbYMZd98NmendzMam2zDw
Dx8OIGvLBRcdSEpot2z4HAGKC9UpnQ6S64irLVmaSIRAckiIkfLURsEzYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmqEIlo9SGHbaJI2Ioz5W0xVF4rMB8GA1UdIwQY
MBaAFGoMhnyXmHHHrbCffGIZulsGRZMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUt
ZTQ1ODYzZWFjMmI0LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUtZTQ1ODYzZWFjMmI0
LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5UrEDK1h
dB311854F3GjEqhC5GA+nOLnTSHq15RD6nzhF24++8aMdbPk0bjD4KEXpzcbdAmx
P8JMyVsWKZNDZkyCH4DG9eoosUaLN8VSOs0chnmYcYwog0m+NZBF2TsV1Bc+S6Wy
pqQfSVHOCaE9VVPrZlvgW4MbPtrl00OU1pKWf27ED0o3FVcU4l9c/SSesZ1inBG6
va4KUImRQKznPuxYIlsKh5tULVK5WyPzbdCSTuGKpZUsogaKvXiRlNtrcE/sfaVC
dDampRJH1EslErPL6AJpWyJhVI7i1bhNbOgPB7Kt9oEBUiiJfVtHqKJmGQmdJr9f
y5wGbvA0QTPwaQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:40:54 2026 by rpki-client