This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: Hi1X2QVnUOgnzqxbbUZBaIR1rRsWPRxu+piK2mUz8NQ=
Subject key identifier: 66:24:0B:D9:44:39:25:95:B5:3F:9C:69:57:98:DB:35:C6:6E:2C:B8
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 019C42EAE47EF81F38E4B02B0D52F2E9DED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0E01
Signing time: Mon 09 Feb 2026 15:00:16 +0000
Manifest this update: Mon 09 Feb 2026 15:00:16 +0000
Manifest next update: Tue 10 Feb 2026 15:00:16 +0000
Files and hashes: 1: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (hash: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: f7v2B9uONaGO4WIiJ3rXehyEzHSab9P2eLe8smOBFiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:e4:7e:f8:1f:38:e4:b0:2b:0d:52:f2:e9:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Feb 9 15:00:16 2026 GMT
Not After : Feb 10 15:00:16 2026 GMT
Subject: CN=66240bd944392595b53f9c695798db35c66e2cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:d3:d9:38:3d:44:f2:8d:b8:9d:28:c2:08:
ef:a7:81:89:f5:d5:02:82:84:0b:09:eb:89:a2:9c:
af:72:44:e9:93:8c:de:ee:4c:88:a9:9a:fd:74:39:
45:99:59:2b:fd:ea:12:0b:ef:89:2a:56:07:71:00:
97:e6:f9:20:ff:32:e2:c0:d4:ed:0c:21:4a:e2:33:
5f:fa:c6:04:27:10:b3:90:81:cd:a8:5d:1a:c2:d2:
97:d8:dd:0b:01:c9:a6:13:ed:28:4c:05:0f:f9:44:
53:61:c4:de:25:49:31:2b:da:2d:d5:9b:f9:19:1d:
88:6a:db:bf:b3:c1:c5:11:bf:53:3b:f1:c4:64:d2:
ef:17:93:ce:28:c5:45:2a:c5:be:80:1e:2f:4b:4f:
b1:91:a8:b7:a9:91:ba:af:0b:c3:be:6f:29:a5:95:
f2:65:98:04:82:5d:54:bb:b3:66:58:df:e8:d4:ee:
53:b8:4b:85:ab:2e:e9:8f:3d:a0:98:f1:a8:ba:bf:
6e:8c:2d:a3:bb:e8:b6:d4:1e:52:61:9a:40:d8:c0:
e8:69:60:b8:47:ed:0b:ea:4c:48:68:f0:1c:80:95:
3d:29:ab:0a:ea:cb:d1:69:6f:44:69:8f:c9:89:54:
ed:e7:8e:b1:7e:00:b3:ff:fc:a9:93:6d:ce:d0:e7:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:0B:D9:44:39:25:95:B5:3F:9C:69:57:98:DB:35:C6:6E:2C:B8
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a3:79:11:22:83:35:2a:e6:6f:6e:c5:f0:33:a7:56:66:1b:
b3:8e:71:94:a5:a0:0a:03:a6:18:85:1d:d4:3a:d7:43:17:90:
7b:a9:74:8d:79:08:d5:71:27:d0:6e:5c:f5:c6:b5:de:c8:8e:
2a:ee:0b:fe:f3:35:5d:ed:ad:40:6f:0f:cb:65:82:84:a7:07:
87:f5:c8:0d:da:bc:4e:0e:25:36:c4:35:fa:9a:64:51:9b:5f:
73:69:fc:59:9a:01:95:47:04:e8:0e:6f:7e:e3:d1:91:36:cd:
53:5f:7b:61:ae:67:49:d5:19:fb:87:fb:ac:a7:7b:6b:c4:8b:
2c:fa:47:cf:c2:a0:f3:72:72:b9:9e:40:b6:62:39:a0:de:9c:
80:6a:49:ea:2e:49:71:6a:1a:8a:07:f6:e8:41:d8:b7:e2:65:
b3:0a:08:4f:23:a8:0d:b1:0c:60:51:e5:d6:0b:f5:32:a0:e9:
bf:c0:2f:54:01:42:b7:1c:0e:2c:fb:38:05:d6:57:5f:21:4c:
f9:b7:7a:cf:15:40:6d:c6:13:8e:79:ba:57:da:37:b4:23:76:
2b:95:f5:1a:60:40:01:03:21:9d:8f:54:ab:1a:4c:a8:b1:19:
93:a4:50:69:b2:1d:21:59:56:da:dc:c1:41:7a:ca:d7:89:bb:
e1:e4:ae:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6uR++B845LArDVLy6d7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3
ZjI2MWMwHhcNMjYwMjA5MTUwMDE2WhcNMjYwMjEwMTUwMDE2WjAzMTEwLwYDVQQD
Eyg2NjI0MGJkOTQ0MzkyNTk1YjUzZjljNjk1Nzk4ZGIzNWM2NmUyY2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC7T2Tg9RPKNuJ0owgjvp4GJ9dUC
goQLCeuJopyvckTpk4ze7kyIqZr9dDlFmVkr/eoSC++JKlYHcQCX5vkg/zLiwNTt
DCFK4jNf+sYEJxCzkIHNqF0awtKX2N0LAcmmE+0oTAUP+URTYcTeJUkxK9ot1Zv5
GR2Iatu/s8HFEb9TO/HEZNLvF5POKMVFKsW+gB4vS0+xkai3qZG6rwvDvm8ppZXy
ZZgEgl1Uu7NmWN/o1O5TuEuFqy7pjz2gmPGour9ujC2ju+i21B5SYZpA2MDoaWC4
R+0L6kxIaPAcgJU9KasK6svRaW9EaY/JiVTt546xfgCz//ypk23O0OfAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYkC9lEOSWVtT+caVeY2zXGbiy4MB8GA1UdIwQY
MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt
OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy
LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6N5ESKD
NSrmb27F8DOnVmYbs45xlKWgCgOmGIUd1DrXQxeQe6l0jXkI1XEn0G5c9ca13siO
Ku4L/vM1Xe2tQG8Py2WChKcHh/XIDdq8Tg4lNsQ1+ppkUZtfc2n8WZoBlUcE6A5v
fuPRkTbNU197Ya5nSdUZ+4f7rKd7a8SLLPpHz8Kg83JyuZ5AtmI5oN6cgGpJ6i5J
cWoaigf26EHYt+JlswoITyOoDbEMYFHl1gv1MqDpv8AvVAFCtxwOLPs4BdZXXyFM
+bd6zxVAbcYTjnm6V9o3tCN2K5X1GmBAAQMhnY9UqxpMqLEZk6RQabIdIVlW2tzB
QXrK14m74eSupg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:26 2026 by rpki-client