This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: F1joh/dlqpP4XDiKDXP4Vxh7EF1le9DkwHKeqLtsyCo=
Subject key identifier: 41:3F:B8:F9:E0:78:B6:8E:52:69:ED:58:3C:0E:AD:1D:90:B0:42:6E
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019C439087B5327FC19EDDEEB4F2A7240A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:01:11 +0000
Manifest this update: Mon 09 Feb 2026 18:01:11 +0000
Manifest next update: Tue 10 Feb 2026 18:01:11 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: EcFKCYsDdvFZ36Kyl1hgnVddfZZo2Ua0+g19aQxv5R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:87:b5:32:7f:c1:9e:dd:ee:b4:f2:a7:24:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Feb 9 18:01:11 2026 GMT
Not After : Feb 10 18:01:11 2026 GMT
Subject: CN=413fb8f9e078b68e5269ed583c0ead1d90b0426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:e6:60:39:cb:50:c7:68:6a:b0:5b:74:66:
b6:a1:2c:b1:07:23:2b:12:11:9d:c8:bf:c5:99:51:
15:df:ee:46:74:3a:21:71:4e:5e:1d:9a:c2:39:49:
82:b1:f4:7b:d7:74:a8:06:74:41:58:97:f0:4e:c6:
48:dc:dc:9b:e9:a1:59:1e:ea:b2:c4:a0:d5:5b:a2:
db:0b:2a:e6:5c:36:65:a5:a9:1e:e6:4f:18:f1:32:
ef:ff:62:c7:9e:90:65:e7:4a:5e:b8:07:5c:91:2c:
83:c2:11:99:a2:69:aa:93:ed:ce:e7:60:e5:63:de:
41:2f:3e:5a:57:00:99:d4:da:14:c6:91:44:96:94:
6e:e6:10:76:0c:3b:26:45:5e:d7:d2:46:1c:c0:f2:
8c:87:29:a2:b4:2e:26:ae:4a:09:b7:56:1e:ed:f8:
bf:02:f5:f8:23:60:1f:21:26:bd:f6:ee:52:aa:21:
5b:60:d2:73:df:7b:ad:df:59:ec:84:52:3f:2d:67:
53:35:f6:00:66:bc:34:27:c8:2d:2e:03:cf:dc:79:
06:51:c8:9e:25:4f:3a:88:9b:1a:24:96:83:0f:94:
de:3d:06:3a:e3:6d:ca:3f:62:b0:91:6d:ef:58:b8:
62:88:fd:a4:79:1e:62:6d:6f:4c:88:27:7c:40:6b:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:B8:F9:E0:78:B6:8E:52:69:ED:58:3C:0E:AD:1D:90:B0:42:6E
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:4a:e0:f8:0a:28:03:2e:86:40:43:8f:c4:32:f5:10:7f:
07:88:21:12:1f:7d:34:4e:d9:fb:99:f5:7f:66:34:59:c4:36:
8e:a4:c1:a5:5b:14:2e:03:a3:85:73:47:71:d3:ff:d3:51:68:
e7:08:fa:f5:7b:97:3a:d2:31:1c:f4:20:45:4a:8c:06:c8:d9:
17:1e:f2:87:5d:59:5c:81:e4:00:ea:24:5d:38:85:cf:31:dc:
6f:47:cc:ef:e6:00:86:9c:9b:23:e0:33:9a:4e:fd:dc:26:f6:
20:3f:69:e8:60:ea:0f:48:0e:08:73:45:e0:68:13:18:85:ee:
00:4e:de:15:5d:c1:b9:ec:48:c0:02:c6:95:f0:7a:cd:23:55:
3f:69:e3:ef:66:a1:98:bb:c2:a9:f7:7f:07:ca:6a:2d:81:b3:
a4:19:44:42:0f:b1:d7:92:f7:a4:8e:3e:ae:fc:3f:25:95:97:
cb:ed:e6:46:48:01:8f:23:73:17:73:25:d6:92:99:53:2c:89:
8a:44:15:58:7c:1c:ee:2f:d8:9a:2c:ca:e5:4f:80:c8:cf:2b:
50:29:e5:2d:f8:f6:3f:47:c1:ba:54:1a:3a:e3:11:d0:4c:c4:
33:e3:83:fd:e9:04:6f:8f:be:35:4d:3c:7b:14:39:ea:5f:a6:
42:1a:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:01 2026 by rpki-client