This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: 0Qi0c2gNX/GtFrTbA2deiVGaFYOGvtPvSlfm9Y06aBM=
Subject key identifier: B3:D2:03:3E:79:35:45:73:4D:C0:63:79:20:FF:C2:3B:CC:48:8B:1F
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019C4322949AA8B7C50F2ABCA12F58E8C53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1546
Signing time: Mon 09 Feb 2026 16:01:05 +0000
Manifest this update: Mon 09 Feb 2026 16:01:05 +0000
Manifest next update: Tue 10 Feb 2026 16:01:05 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: +kw7EncjGZesM+QHTTlc0xa2Tot7bVc/MtitWZGj4oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:94:9a:a8:b7:c5:0f:2a:bc:a1:2f:58:e8:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Feb 9 16:01:05 2026 GMT
Not After : Feb 10 16:01:05 2026 GMT
Subject: CN=b3d2033e793545734dc0637920ffc23bcc488b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:50:77:7e:4a:d8:e4:80:f5:85:07:96:6b:
4f:95:66:fd:89:c7:26:fc:45:ca:c9:50:5b:4e:9d:
17:72:49:f2:5b:bf:ba:f7:8c:10:4c:a1:7c:8f:82:
15:dd:45:5f:bf:a4:03:f5:3a:b9:ab:35:ff:85:12:
b6:78:04:60:e2:da:f5:dd:ae:1f:d3:30:12:74:14:
7a:48:ce:ad:9d:04:de:e9:65:7b:19:23:20:bd:8f:
fd:9c:68:c7:86:38:76:f9:2d:ad:8e:ee:55:d3:92:
f9:fd:95:28:f5:37:56:43:b3:93:d7:e6:f8:1c:c5:
52:74:b3:91:b0:52:a1:33:36:1b:15:02:16:de:a8:
93:10:cd:15:c9:f3:85:a7:8a:30:06:fa:c9:ea:40:
66:08:3b:b6:3d:18:51:89:52:8d:9b:85:c4:49:a7:
af:a9:d2:a0:04:04:48:6e:ef:66:d7:33:6f:fc:7d:
fe:c2:40:e8:f9:15:74:e9:79:40:25:97:13:3d:3b:
73:5e:96:8b:6c:34:f0:3a:21:7d:3b:92:07:f1:70:
d1:83:28:1d:4d:cf:09:12:37:2b:a9:74:f2:1f:69:
50:15:81:65:7b:ef:bc:53:cb:9d:7b:7f:7c:45:a9:
1b:91:dd:48:a5:e3:eb:33:48:3d:1c:a7:ca:4d:c2:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:03:3E:79:35:45:73:4D:C0:63:79:20:FF:C2:3B:CC:48:8B:1F
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:17:ef:b8:00:c2:18:b6:97:44:58:fc:a0:3e:a0:09:01:
27:fd:a4:7f:5a:aa:be:ed:c4:db:8b:4c:b2:f7:3f:d3:98:25:
a3:4d:bb:48:26:a8:56:8b:36:2a:6e:0b:93:e2:27:31:6f:ec:
6e:b4:fb:8b:c7:c5:17:2a:eb:8a:79:7c:7c:cb:6f:94:13:8f:
a9:45:6f:58:af:93:45:97:a9:d3:b0:55:97:4e:ad:47:43:0a:
2c:11:92:29:c7:5c:83:c8:3a:72:6e:24:df:56:ce:b5:4e:5b:
3a:9a:8f:bd:2d:6d:9d:58:da:e1:10:f7:6b:c7:b5:8c:20:e0:
1c:6e:fb:e1:5c:a5:f5:70:8e:cc:a8:9d:a2:e7:06:5e:ef:5a:
7b:ad:31:29:f8:bb:83:07:41:34:c5:d5:9d:8e:64:f4:e4:ae:
1e:6f:72:a0:12:8a:ee:1c:c9:89:03:c6:d0:24:e4:e2:ba:bb:
f2:88:d1:d3:cd:89:c2:58:e7:7f:26:95:39:0a:c7:c7:54:4d:
2d:22:df:44:ed:f8:ff:a7:f9:8e:6d:b2:00:be:a1:81:a9:26:
f7:a5:11:37:d3:75:e3:81:20:2b:8d:9e:2e:a1:3d:59:40:c4:
8f:a5:40:92:89:34:31:d6:9c:dc:c7:7b:68:37:01:23:1b:d4:
67:3e:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:56 2026 by rpki-client