This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: NcrK3nSjajUCSmiA/V4lwEvVuxTDj8XByvEm72NxJOI=
Subject key identifier: E6:89:04:0F:A5:A6:EC:F0:93:AD:C5:61:94:EE:DD:D5:EE:2E:F5:88
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019C4321C963778C7AB097F90B348C6B573D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 16:00:13 +0000
Manifest this update: Mon 09 Feb 2026 16:00:13 +0000
Manifest next update: Tue 10 Feb 2026 16:00:13 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: XszcPjzL2uaLFScFANzy/qhmnN3LHoolG/Ne//Z6mDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:c9:63:77:8c:7a:b0:97:f9:0b:34:8c:6b:57:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Feb 9 16:00:13 2026 GMT
Not After : Feb 10 16:00:13 2026 GMT
Subject: CN=e689040fa5a6ecf093adc56194eeddd5ee2ef588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:6b:44:00:e8:55:15:b3:c9:a3:45:36:27:
e1:36:f5:7e:20:81:36:11:46:e4:38:95:84:e5:70:
e1:79:17:51:f0:2e:6b:bc:5d:41:94:6b:5f:82:38:
cc:20:27:76:cb:7e:bc:59:27:33:82:84:d0:82:91:
95:ae:55:36:08:db:fa:f9:b0:d3:7d:c3:ec:91:f5:
f6:75:22:4e:0a:73:0b:ab:e3:ed:c6:e9:21:29:b5:
5c:8e:b3:b5:03:8c:6d:3b:8d:13:17:f7:70:42:fd:
f7:fd:35:cd:fe:4f:f1:6d:72:c2:fa:52:68:01:7b:
38:0b:c1:4f:08:db:1c:36:d6:0e:68:6f:32:bc:e8:
b3:04:db:cd:d4:24:37:67:f7:95:fd:22:4c:aa:16:
27:dd:6a:59:b0:62:2f:86:96:bd:74:f7:af:e9:e3:
0d:50:fa:58:0b:d0:f2:09:aa:96:05:0e:61:83:7e:
93:54:30:9d:1a:10:e9:c1:e1:b1:c5:9c:c1:57:68:
5c:d4:90:98:d5:db:ef:46:de:fa:8d:1f:c3:25:83:
ac:73:9f:f1:da:9f:42:7e:1b:40:7f:70:31:9b:65:
af:32:4e:e8:c4:75:e1:f5:53:66:6c:db:03:ba:e6:
f1:5c:32:d4:25:7b:82:d0:bb:21:00:ca:b4:6c:be:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:04:0F:A5:A6:EC:F0:93:AD:C5:61:94:EE:DD:D5:EE:2E:F5:88
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:25:ea:57:5d:2f:6c:da:50:68:89:7d:45:30:db:d6:ba:
b2:17:80:d4:47:03:1e:58:0b:f5:1d:c5:c9:db:0c:39:8f:82:
78:64:de:d3:5f:99:43:32:bf:f0:1a:eb:d3:d7:69:92:87:81:
2f:6c:57:d4:dd:fb:03:df:3b:77:55:24:c6:1a:0a:97:a5:1e:
d4:fa:e8:5b:6d:6a:34:7a:93:b8:13:ca:d3:e8:43:5d:98:27:
cf:e5:b1:4e:af:9d:f5:75:2a:8a:0e:25:63:43:c0:f4:14:cc:
41:07:97:c0:75:9b:95:ab:2d:f9:a8:b8:b4:1c:d6:3a:6e:ea:
19:bb:42:1e:ed:6e:75:14:c6:2f:94:7a:41:88:87:f0:a4:04:
bd:07:45:81:98:26:6a:7e:2d:ac:29:59:45:a2:12:e6:33:f3:
68:07:e8:60:db:97:3a:68:3f:ec:d9:71:77:ae:94:72:8f:75:
11:d1:24:96:6a:99:50:d9:6a:75:3a:be:f8:3e:3c:5a:83:37:
30:81:bb:e7:54:53:16:71:b2:2a:9f:2e:e7:aa:5e:9a:43:d5:
4c:2a:24:3a:fa:37:8a:9d:95:04:9b:6b:f9:31:0d:6e:12:d5:
7e:2b:b5:ad:c7:97:6a:a0:79:40:7c:fa:fc:89:c8:44:42:9e:
ea:36:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:56 2026 by rpki-client