This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
File: i8Wo923xVof4NEHJprVUV48831c.mft (raw, json)
Hash identifier: zCKux9ORgVD7RjCu2sxRb6/JNJ43mHB5BIpsuNSkPRM=
Subject key identifier: 00:D4:43:0F:42:3B:11:8E:95:E0:A8:F2:98:E2:AF:08:AA:8E:57:08
Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Certificate serial: 019C4321E034DC5DD08CE0110166B468125B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
Manifest number: 04AE
Signing time: Mon 09 Feb 2026 16:00:19 +0000
Manifest this update: Mon 09 Feb 2026 16:00:19 +0000
Manifest next update: Tue 10 Feb 2026 16:00:19 +0000
Files and hashes: 1: YmvEy21Oo_K93uY9_6q4yH9waAs.roa (hash: Dd5U/8FlVGfaWd8sQ9wxYRvKK+HxQrbJ5WW1os00xSE=)
2: i8Wo923xVof4NEHJprVUV48831c.crl (hash: SNRDRIdyeSdhLFUrq1gw4tefHSo0sbhmbLhHxRz739M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e0:34:dc:5d:d0:8c:e0:11:01:66:b4:68:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Validity
Not Before: Feb 9 16:00:19 2026 GMT
Not After : Feb 10 16:00:19 2026 GMT
Subject: CN=00d4430f423b118e95e0a8f298e2af08aa8e5708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:5e:a7:63:19:64:1a:df:b2:1e:6b:88:5e:
7a:50:f8:75:9e:af:5a:53:26:57:bb:00:0a:69:a1:
77:b5:8f:bd:f0:78:44:c3:d3:f1:2f:69:0c:0d:00:
5a:ae:ea:a2:82:fe:e8:25:f6:75:7b:5a:be:5e:f3:
d0:21:2e:95:c2:18:2a:b6:40:98:f4:9d:97:66:6a:
60:2a:13:a7:1c:67:de:03:89:8e:cb:26:11:8e:1e:
d2:6c:05:ff:99:fc:df:82:48:3c:80:58:36:87:3a:
06:c6:f2:08:ca:4d:6b:19:04:23:1d:d9:67:62:ba:
da:df:48:38:7a:0b:66:49:a3:d1:19:c8:df:6d:9d:
ee:cc:a7:6d:73:d5:38:11:72:bf:6b:7e:73:70:83:
34:21:f3:1b:81:54:25:d5:fe:b2:2d:98:a2:85:a9:
c3:a4:60:8f:7c:da:d6:74:22:fa:17:1f:fe:2c:c8:
4a:86:22:0c:32:dd:f3:09:9d:10:c8:70:4f:6d:08:
f7:84:56:ea:3b:fe:94:dc:99:35:0a:25:dd:89:4b:
6c:74:1f:c6:86:d5:5b:5e:2a:4a:9b:6f:f4:33:48:
62:09:2f:da:0c:93:eb:61:93:d6:1a:31:ec:a7:bb:
07:a7:1e:82:1e:fd:6b:9a:ec:48:34:24:9e:95:86:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:43:0F:42:3B:11:8E:95:E0:A8:F2:98:E2:AF:08:AA:8E:57:08
X509v3 Authority Key Identifier:
keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:03:55:ca:11:bc:e3:7b:47:7c:7f:93:a4:cd:90:44:70:9f:
9d:7d:c4:2a:9a:3e:7f:b9:d7:e9:df:da:d8:ca:90:0f:8d:b4:
52:b8:fc:60:f7:b0:7b:ae:1b:e1:a0:f4:3f:78:18:88:b3:a2:
dc:68:b5:47:b8:d4:63:c2:8a:57:91:c8:87:8f:81:08:3f:17:
2a:d4:cc:c1:ba:5e:7b:26:5a:d7:cc:4b:bf:fd:58:60:1d:41:
52:cf:e6:fc:89:e3:71:48:7a:65:79:83:67:e3:b4:ac:06:5e:
df:07:e2:15:02:c0:48:86:fb:26:17:4c:e8:1c:10:56:08:5a:
aa:8a:6e:71:85:f6:70:b7:00:df:65:ef:6f:cf:23:2c:e1:6b:
8d:f6:85:a7:6d:62:5c:61:de:28:ba:34:d9:78:56:9f:4a:f7:
37:f8:a9:ba:94:33:65:ec:aa:32:b0:83:a2:1c:94:6c:70:79:
8f:2b:93:60:02:6c:60:d5:c5:87:af:11:71:29:78:8c:16:5b:
f1:2a:bd:b8:ac:a1:68:56:ff:5a:a9:fc:27:6d:01:d4:db:ff:
05:52:b8:89:ed:58:4e:01:a9:e7:fb:19:5e:0f:32:a4:ef:f8:
b1:95:2f:73:3f:e6:20:a2:1e:ad:52:3a:00:36:84:6d:54:ee:
1f:f8:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:51 2026 by rpki-client