This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: wt2V1zHAlb/uJt/4rCTO4zAWJYhDJ3XjqXqPJFAZgkc=
Subject key identifier: 56:EF:2E:9C:93:17:E7:1E:BF:86:3A:4D:E6:CA:9B:BE:11:F7:43:DA
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 019C41A24A9D7C6B9FB1BDAC5D4C40AFD4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 180A
Signing time: Mon 09 Feb 2026 09:01:20 +0000
Manifest this update: Mon 09 Feb 2026 09:01:20 +0000
Manifest next update: Tue 10 Feb 2026 09:01:20 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: mE0KLO9wXrejeYupYODGy7z734sYVIg6vO084T+HWoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:4a:9d:7c:6b:9f:b1:bd:ac:5d:4c:40:af:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Feb 9 09:01:20 2026 GMT
Not After : Feb 10 09:01:20 2026 GMT
Subject: CN=56ef2e9c9317e71ebf863a4de6ca9bbe11f743da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:44:d7:47:8e:de:a9:cf:87:1f:48:f7:41:
40:0d:6c:7f:c2:c4:04:1b:5b:13:17:eb:ac:c1:e7:
24:79:8f:df:35:98:3a:7a:2d:5f:97:fe:df:06:00:
37:f1:80:5b:86:b4:3f:d8:4c:21:10:24:53:05:42:
01:11:e5:1a:83:ae:09:b9:80:19:2a:ea:eb:2b:59:
95:8f:07:84:40:59:7b:0e:25:8a:ce:66:03:b0:32:
13:84:fb:2b:54:1f:95:56:80:57:7c:1b:23:36:bf:
d6:bd:62:e5:dd:40:ff:60:ce:ab:46:26:d2:20:81:
6f:6e:da:6d:fe:64:95:bd:2f:96:db:cc:67:55:6e:
df:7e:64:d6:7a:a8:e9:31:2e:b2:b8:b5:cc:89:87:
82:1d:eb:5b:fe:e1:7b:c7:60:38:67:7e:9a:b1:c6:
b9:6f:a5:38:5e:5a:00:29:7e:8e:4d:e9:ea:8f:52:
55:e5:2c:8e:3d:01:17:1b:ec:39:f4:e6:79:f9:c9:
01:92:18:cd:c9:cd:07:c9:6c:06:4a:87:19:aa:12:
40:e8:a0:fe:53:16:8f:46:e9:bb:7d:5e:43:43:0f:
63:b8:29:ff:0c:b1:ca:50:bb:6d:82:e5:27:e4:74:
c5:e5:96:85:28:7d:a2:ac:3e:e1:9e:a8:c5:26:71:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:2E:9C:93:17:E7:1E:BF:86:3A:4D:E6:CA:9B:BE:11:F7:43:DA
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:d7:95:18:42:a7:a7:0d:94:f4:c5:11:17:c2:32:80:8b:
a4:71:63:b4:b5:39:06:4f:bc:9c:2d:cf:5a:32:13:e0:1a:b0:
04:f5:d3:1f:9e:2f:86:05:7b:14:2d:d7:3c:1c:57:b8:83:6d:
52:02:0d:46:30:b3:ab:41:f2:bd:13:80:8a:43:e4:8c:ef:3e:
f4:fe:42:89:d4:e9:54:37:f9:9e:88:34:fe:48:22:df:fd:86:
55:b0:46:f8:e9:45:19:a4:20:0b:3e:75:7d:4b:a5:d9:cc:00:
88:9b:c6:4b:85:91:48:99:de:29:06:45:8c:00:0d:55:0f:8f:
69:03:a2:e0:89:ce:b1:78:8f:80:ee:06:d3:41:4f:67:e7:cf:
de:70:c8:e9:aa:3c:38:7b:47:e4:8b:15:d0:cc:e2:9e:1e:d2:
be:c0:f0:d8:ba:e5:52:31:bf:fb:e9:4b:4c:47:be:3e:87:61:
6a:82:5f:d6:df:23:ad:88:48:40:9b:81:d2:bb:03:c9:c7:72:
e9:a8:83:cb:d8:6e:39:e2:4f:eb:66:6f:a9:27:78:72:cf:b2:
44:f8:69:97:93:e3:f9:82:4a:8c:1d:a0:5f:6b:02:d6:43:77:
75:b6:ab:2c:be:81:8b:04:67:7d:8b:f3:99:c9:8b:e2:9a:2b:
3e:ee:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:37 2026 by rpki-client