This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: bSFY0LAY6OS7PXC/nqPhosCEkeC6AaEX3ORi7kY45fQ=
Subject key identifier: 65:7D:5E:2C:63:08:FC:4D:59:04:1E:18:F6:05:D0:34:29:19:FA:C1
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019C424645CEB8AEC2E41D8E2B27386FE495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0C69
Signing time: Mon 09 Feb 2026 12:00:27 +0000
Manifest this update: Mon 09 Feb 2026 12:00:27 +0000
Manifest next update: Tue 10 Feb 2026 12:00:27 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: ziYSSVEZGLOe4c08PEU3R3R+n8S/8RJ/OGE/MKOcEX8=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:45:ce:b8:ae:c2:e4:1d:8e:2b:27:38:6f:e4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Feb 9 12:00:27 2026 GMT
Not After : Feb 10 12:00:27 2026 GMT
Subject: CN=657d5e2c6308fc4d59041e18f605d0342919fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:8b:17:e1:8f:4b:77:bc:5a:3c:dc:f2:e2:
48:07:de:e1:1d:f2:99:b7:07:e7:4e:6e:09:ce:c6:
44:33:31:fc:1a:87:7a:1b:a6:c4:1e:55:9e:67:0f:
32:99:65:e2:2c:73:24:6e:34:c0:9a:8d:f6:f9:82:
76:c9:fb:0a:21:96:57:ad:07:66:a1:4a:81:a0:98:
e9:5a:92:71:e1:2f:50:81:de:d2:e2:5f:dd:7d:fc:
84:b3:8f:a3:76:8f:08:aa:e8:14:07:f2:34:a2:56:
65:b7:94:69:f4:e0:83:5e:c9:03:73:d2:71:9a:68:
71:f0:52:8b:30:99:d0:9f:02:7c:8e:c2:c3:98:cc:
57:e1:82:c4:21:42:8e:2a:39:a6:a3:d9:ef:26:40:
41:81:1d:bf:de:54:99:ad:58:0a:61:a2:6b:1f:4c:
f1:e8:f2:5d:47:77:63:1c:e2:64:f9:3e:4b:7b:2f:
40:c7:4f:45:50:89:58:9b:dd:93:f1:c2:94:d6:68:
b4:14:f4:a3:3c:92:ed:34:d3:da:a9:75:ea:46:4d:
79:f5:f8:8a:0e:44:f8:3c:0b:62:48:02:dc:09:b5:
23:90:b0:7a:6a:64:55:73:a9:4f:60:27:c2:c9:30:
5d:b1:8b:82:1c:e4:12:38:3a:ad:b3:7b:c9:29:29:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:5E:2C:63:08:FC:4D:59:04:1E:18:F6:05:D0:34:29:19:FA:C1
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:8a:a6:f6:c3:a1:d1:ab:c3:7d:9d:4c:26:7e:d7:7b:9c:
5a:3a:08:1d:e2:7d:3b:a2:70:7d:b8:d5:ce:5c:fa:44:66:4f:
16:8b:8b:62:c8:e5:5b:10:c0:1d:dd:0e:09:8f:af:81:68:a8:
01:22:ca:8b:99:48:0a:7d:8f:ba:1f:e1:fe:a4:44:57:ca:5d:
bc:f3:c4:1b:f8:b2:73:00:58:65:2b:04:95:e7:43:00:07:66:
70:59:b2:90:9d:91:4e:16:1f:59:12:d9:5a:98:2a:50:ab:bc:
f5:8e:7f:b8:4f:f6:fa:1e:69:30:80:ea:25:cc:c4:b3:fe:33:
dd:ff:00:a5:b8:de:de:e2:1a:e7:d7:b3:59:39:23:6e:04:d2:
8d:fa:99:69:63:93:77:be:cd:8d:a5:2d:ca:d2:1c:37:cf:95:
95:a7:e8:75:af:1d:25:67:9c:85:93:aa:9b:d5:49:29:b9:7a:
99:73:02:96:75:92:c1:54:ef:99:37:2b:70:54:f5:67:45:25:
86:fe:2d:81:7c:8d:6e:ca:d2:9d:81:f6:17:ba:2d:94:fc:7d:
83:67:92:32:0b:22:f7:3f:10:d3:85:ae:e8:78:18:29:da:e1:
de:be:b3:81:73:77:23:ee:a7:e2:c9:ec:04:85:c4:89:ad:c6:
20:2a:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:11 2026 by rpki-client