This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: ea0ied8bwrM+6Hi9hpmhW4YwhHPjst12N7KanpVR7wI=
Subject key identifier: ED:BF:4C:29:A3:AB:8A:99:90:45:F7:3E:1B:92:5F:87:3A:2F:37:63
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019B804C7591A6DBDA21F3C06CC3ED6013C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 113E
Signing time: Fri 02 Jan 2026 20:00:52 +0000
Manifest this update: Fri 02 Jan 2026 20:00:52 +0000
Manifest next update: Sat 03 Jan 2026 20:00:52 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: JHiOpCq1JEz30xOu+g8TrYWRWOeTpNCi6olwRcU/2q8=)
2: xGSQtxBpS573s4zPyTFpERUQH7o.roa (hash: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:80:4c:75:91:a6:db:da:21:f3:c0:6c:c3:ed:60:13:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Jan 2 20:00:52 2026 GMT
Not After : Jan 3 20:00:52 2026 GMT
Subject: CN=edbf4c29a3ab8a999045f73e1b925f873a2f3763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:ee:8a:8f:aa:59:29:d1:b1:c8:ba:7e:a0:
89:61:3c:76:ec:dd:bf:1b:91:11:4c:2a:2c:3d:9c:
db:f6:11:13:bb:eb:ea:25:c3:72:22:45:25:a4:93:
81:24:a7:53:22:b7:a8:95:3b:22:48:86:77:4f:56:
5d:54:5e:9d:41:85:63:17:eb:ef:8d:2b:cf:8d:d5:
a3:be:a7:86:0c:8c:b8:06:74:8b:8a:82:e0:ba:e7:
e9:ec:33:d8:d0:33:6c:59:c2:f1:a9:f1:ea:f8:05:
25:2b:5f:8f:f2:a9:55:46:da:39:32:37:38:19:99:
8f:4d:b3:88:3a:23:16:b4:ae:c5:49:35:55:3e:fe:
0d:62:c8:62:aa:6d:09:a3:72:1b:bb:68:d5:d3:f3:
b1:58:48:09:37:0c:cb:6a:a7:72:fb:e8:da:d5:76:
d8:7d:9a:7c:cf:ea:f5:32:c6:c4:24:28:63:4c:79:
1d:57:73:77:46:f9:e0:d3:1e:ce:f6:60:67:1a:d1:
3f:3b:cd:d0:7f:81:7c:fa:1c:8a:e9:b3:a6:fa:79:
6a:3c:ed:1c:04:6d:bb:86:f1:b6:4b:98:ea:d8:c0:
86:fc:a3:35:eb:85:20:70:bb:19:6a:70:8f:59:04:
14:ae:91:9d:de:ce:a1:86:2a:d9:6e:0c:36:81:fa:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:4C:29:A3:AB:8A:99:90:45:F7:3E:1B:92:5F:87:3A:2F:37:63
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:18:2f:ca:a0:2b:04:b5:0d:5b:e8:4b:c8:e1:45:f6:ed:c7:
77:c5:eb:e4:56:4d:c9:57:f4:41:5a:a5:9c:37:8d:8f:92:68:
02:7a:bd:32:56:17:f9:e9:d3:e8:55:63:31:6c:d2:71:6c:cb:
4f:43:0c:36:7b:c5:73:25:77:50:da:1f:94:d9:13:af:73:18:
35:8f:53:33:e6:64:f5:c4:dd:28:9f:f3:4b:68:40:c0:44:8c:
e6:6b:f5:38:15:a5:97:13:af:d7:a5:32:d3:14:5e:e0:3d:d5:
f6:bb:1c:bb:92:e9:70:55:b0:03:5d:dd:50:65:f2:78:0d:95:
67:e8:94:b2:f3:c4:3f:f8:97:5f:9b:eb:47:45:81:08:30:f6:
72:50:87:e4:ca:36:19:7e:82:a0:26:b5:e3:ef:ae:43:0d:c1:
62:23:fd:bb:37:84:6e:47:0b:0f:1b:f9:c3:2a:07:16:dc:ee:
bd:8e:cb:4e:ad:4b:48:7c:f5:18:c3:09:b7:c7:6c:31:26:9f:
f5:de:82:21:0f:1a:cb:ee:a3:85:39:27:80:6e:00:46:5e:41:
6e:66:b4:4e:a1:d9:1b:71:f4:1f:8d:05:8e:2c:fb:2c:22:3a:
67:fe:ce:4d:ae:57:b3:f6:b2:f5:8f:f8:68:46:ac:7a:65:62:
0c:e1:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:23:15 2026 by rpki-client