This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: 8obFcCbl1gPB8RVHFXCnUVSf8KlhVLTdKAgjaEb1A5M=
Subject key identifier: 7D:35:DA:5A:0F:D7:59:B9:2D:6C:F6:A1:BF:FD:39:CC:A6:0B:3B:7E
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 019C4322F2023C8014A7CF8F42D93C12814C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 16:01:29 +0000
Manifest this update: Mon 09 Feb 2026 16:01:29 +0000
Manifest next update: Tue 10 Feb 2026 16:01:29 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: rlq74HbbZbtweJd8ZJrzXNypFyUCDuHZBA82p3vdn6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:f2:02:3c:80:14:a7:cf:8f:42:d9:3c:12:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Feb 9 16:01:29 2026 GMT
Not After : Feb 10 16:01:29 2026 GMT
Subject: CN=7d35da5a0fd759b92d6cf6a1bffd39cca60b3b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:c1:82:75:e9:73:28:79:8c:c1:a7:7b:8c:
e2:1c:64:01:f1:23:22:34:87:af:41:b2:80:c1:f7:
d3:a1:29:1f:87:02:04:14:a9:41:04:65:d8:ae:a3:
65:c6:be:e5:db:9e:ef:fb:51:ec:ca:9d:46:b9:76:
e5:00:5e:4a:c7:fa:79:0f:ec:d9:28:a2:3a:73:44:
5b:5f:ee:57:48:58:3e:f6:b7:55:b1:ef:90:d0:d9:
8e:f6:c1:46:ff:e8:97:fc:78:fb:83:9d:e6:5f:1f:
0f:75:4c:4d:36:50:56:0a:45:bd:45:0e:c9:c0:2e:
66:9a:a5:2a:9e:4e:53:f3:f0:04:28:c4:3e:85:c4:
2b:bd:3d:34:d3:06:36:86:4d:cc:c7:dd:2c:84:4b:
d5:fd:5f:06:fd:11:cb:cc:52:50:57:75:81:5b:43:
97:ef:1e:7e:37:31:b9:88:9d:18:80:ca:c7:fd:a3:
98:b3:b1:f3:81:11:72:d5:05:70:fc:93:4f:a2:b1:
28:d3:d0:4f:7d:92:67:77:4b:f8:d1:c0:16:75:77:
c3:26:71:7c:d6:af:87:bf:a7:19:40:b2:c3:6f:db:
a3:bc:33:e2:ec:af:1e:19:0c:8c:09:d9:65:8a:53:
33:26:a9:44:7d:32:85:a5:b7:e4:3a:98:00:56:d3:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:DA:5A:0F:D7:59:B9:2D:6C:F6:A1:BF:FD:39:CC:A6:0B:3B:7E
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:66:06:c4:91:c6:d0:a9:2c:4c:0e:34:30:c3:97:36:a9:3c:
0b:7b:0d:cb:0e:ae:d6:32:81:8d:4f:cd:81:d7:b0:e3:d2:57:
db:86:31:df:f5:62:6b:53:c5:e4:9f:1e:64:25:63:77:97:c0:
58:87:60:24:87:52:c7:2b:c2:44:6a:52:57:ac:b1:04:9b:81:
06:b5:b9:27:0d:89:e4:67:01:70:c1:63:e0:42:1f:63:d1:63:
7f:30:df:da:db:2f:b5:12:69:45:86:7a:d0:c6:5b:55:23:a3:
e9:f0:ed:7d:a3:f9:39:d2:16:95:57:f6:df:20:3a:ae:7b:1c:
81:d4:cb:9c:f4:70:03:27:9a:63:51:34:7e:53:b5:90:32:22:
5a:ec:df:d0:c8:f8:9d:b7:34:a4:55:13:a8:2b:16:59:28:5a:
b4:cd:d1:f6:2d:d7:9e:31:d2:69:d2:dc:98:4f:88:4b:fe:95:
bc:99:d8:70:e4:0d:9e:f0:7b:13:13:ed:34:a4:03:0f:4a:a7:
4f:6a:84:91:c0:77:f3:1f:78:13:4c:77:51:e1:63:f2:a6:23:
98:e5:c0:3f:94:53:57:73:af:d3:dd:69:af:07:71:91:50:a4:
1a:0d:07:39:07:df:14:fb:8b:b2:37:ed:1a:d3:af:fc:ed:d1:
b2:79:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:33 2026 by rpki-client