This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: iJfu2UE3lAdrYh5SfOlpvKlA5CS7rqDGuUMvhiG6aCY=
Subject key identifier: CC:92:39:E7:0A:45:AD:E2:FF:C2:2F:9E:36:AF:7C:AE:D7:E9:FB:BC
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019C457E5225EE78990DA3204FE10CB50376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1813
Signing time: Tue 10 Feb 2026 03:00:32 +0000
Manifest this update: Tue 10 Feb 2026 03:00:32 +0000
Manifest next update: Wed 11 Feb 2026 03:00:32 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: EGJy6jVhoqk+gTLNIKEFPSZ+iWjFZev9/AOveM8M2DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:7e:52:25:ee:78:99:0d:a3:20:4f:e1:0c:b5:03:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Feb 10 03:00:32 2026 GMT
Not After : Feb 11 03:00:32 2026 GMT
Subject: CN=cc9239e70a45ade2ffc22f9e36af7caed7e9fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:f0:b7:a8:6e:bc:da:45:29:e2:b1:b6:a1:
d3:93:50:27:d6:03:57:81:72:9f:f1:e0:85:59:a4:
3c:a5:9e:b5:b8:11:f5:e2:b9:3b:d6:97:a1:7f:60:
32:12:b4:f6:e9:4a:e6:ef:85:89:70:1e:e7:76:f0:
b7:e8:27:84:53:16:96:65:f3:39:55:19:23:44:d0:
54:ca:ce:23:bc:35:5e:df:bd:4a:6a:79:03:78:1a:
3f:4b:c0:9f:9a:e8:6d:fc:3a:24:e4:e3:29:f2:40:
70:91:25:e5:eb:4e:9c:93:2d:1f:3b:48:57:2c:11:
2d:99:13:fc:2d:e5:dc:85:8a:fb:dd:ea:f3:49:b5:
c0:3b:09:ac:a7:bb:b5:f0:a7:8a:e9:b9:d9:04:4b:
30:2d:da:63:c4:ac:32:76:f2:2b:d7:72:0e:3b:fb:
12:64:d2:12:3c:c3:dc:48:d7:df:b4:09:9b:3c:89:
3c:79:39:e4:b3:79:1e:5d:f3:8c:7f:3f:7c:5a:c2:
32:13:6f:4a:36:6b:8e:bb:55:82:3d:8f:a9:3c:c4:
10:6d:d2:a3:58:b2:60:89:9d:01:36:24:5b:f1:5c:
fe:cd:cd:b0:d2:ee:7e:33:6b:24:c1:5b:c3:68:45:
e2:58:56:8b:f5:6e:3f:67:f8:45:4c:98:0b:42:7e:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:39:E7:0A:45:AD:E2:FF:C2:2F:9E:36:AF:7C:AE:D7:E9:FB:BC
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:17:25:08:62:37:bd:66:6e:52:fd:b4:01:70:cf:e1:a1:30:
73:05:ff:ff:cd:75:7b:3c:6d:fe:88:a2:5f:99:4c:17:45:2f:
22:7f:35:34:0f:70:41:e8:75:d3:c3:43:4e:99:17:c5:7b:02:
0f:d6:da:bd:8e:fa:31:88:bd:94:9a:36:e6:2f:20:9e:d6:b7:
99:37:74:55:12:cd:34:26:ef:b3:66:40:19:5f:d8:ec:ec:93:
ac:b2:f5:66:2f:5d:21:9e:d4:eb:cd:1f:5a:ce:21:70:83:df:
ef:4f:f5:a8:b8:3f:63:4a:b7:12:28:5a:dc:93:14:99:bc:11:
62:51:ee:fe:5d:61:04:89:8d:c7:f2:13:1c:b3:04:5d:74:8d:
c0:a4:8c:ed:62:54:dc:c8:e3:4b:a1:12:7d:b5:c0:08:f3:89:
2e:fc:f3:16:5f:7f:59:b0:ed:e4:b1:0c:f2:d0:e1:13:f4:61:
45:4f:d3:aa:37:eb:1a:5f:e6:cb:7c:a8:41:4d:5d:28:f0:52:
7a:58:8d:d4:89:d5:0e:e1:56:94:36:02:3a:3c:9a:16:b6:1c:
9e:23:bf:3d:c2:e2:ab:ae:12:7b:0a:08:c6:fd:6a:e8:60:95:
1b:7c:c9:74:8e:8c:b0:ae:7d:bb:ba:2e:2c:a3:fa:b4:04:79:
7a:70:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:41 2026 by rpki-client