This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier: XBjMNlPNz5ti+OCugj4tD+0Y+QNqzZkL4xoHBqIftJM=
Subject key identifier: 12:8B:70:D8:02:5A:29:28:B5:A9:0C:C7:14:E1:FF:AB:17:D3:7D:23
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019C2D7630A3E0105446EF9A404785FFB57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number: 1146
Signing time: Thu 05 Feb 2026 11:00:46 +0000
Manifest this update: Thu 05 Feb 2026 11:00:46 +0000
Manifest next update: Fri 06 Feb 2026 11:00:46 +0000
Files and hashes: 1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
2: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (hash: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk=)
3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: svcY/faLDOy1vnFsLdxk3V75SanWmB+/+vRe+CRNqy0=)
6: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (hash: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q=)
7: u-b7hCj6gdd6K9YCWBDHTcbmd6g.roa (hash: qRx5Ajf58qovX1XwWQ0T9y9tHlrDKVNojCTuf45PlRo=)
8: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:76:30:a3:e0:10:54:46:ef:9a:40:47:85:ff:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Feb 5 11:00:46 2026 GMT
Not After : Feb 6 11:00:46 2026 GMT
Subject: CN=128b70d8025a2928b5a90cc714e1ffab17d37d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:81:9c:ab:5a:b6:0c:79:c5:d6:51:ea:bb:
a4:b0:54:50:b0:56:64:d1:56:de:c0:56:12:19:d4:
3c:97:fb:33:ee:9e:b8:3a:cb:21:a0:fd:c6:1e:3e:
6e:e7:d3:4b:f6:06:42:7d:f5:66:e2:f2:8b:a9:55:
08:89:9c:13:30:b6:73:0f:8e:d9:3b:31:28:b9:b0:
cc:35:2c:94:9d:72:e8:33:9e:6c:ef:93:7e:0f:20:
73:2b:c7:4c:b7:09:a7:f9:fd:68:3b:c3:74:a2:f8:
91:03:4f:82:cf:4a:aa:2f:a7:b9:14:e7:0e:be:87:
2c:1f:e3:74:48:6b:70:eb:ef:75:17:0a:ee:93:86:
40:cb:af:7b:9d:7d:da:bd:57:03:3b:cf:e8:78:06:
ee:c3:9e:68:ba:69:bc:49:88:13:dc:82:69:ba:2a:
2a:ac:8e:8f:84:0f:2b:5c:cc:7e:51:fe:ce:9c:47:
b2:b6:eb:42:59:6c:ac:de:73:de:a3:d3:17:6b:11:
30:99:a2:31:09:fd:23:96:db:62:3b:45:a6:c5:51:
e2:87:c6:b7:bc:fc:5e:9d:2f:86:0c:42:ea:88:73:
0c:5e:f0:26:9c:5e:b2:86:a1:86:fd:d4:6d:6b:0a:
37:05:c5:2a:d2:5f:b5:e9:64:21:17:69:88:8e:87:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:70:D8:02:5A:29:28:B5:A9:0C:C7:14:E1:FF:AB:17:D3:7D:23
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:74:30:38:92:b7:b6:c9:e5:c1:cb:53:65:e8:04:56:e7:4f:
e7:73:21:a1:cf:c7:c7:72:b0:49:ff:d8:aa:23:0a:78:fb:6f:
18:ef:44:bb:d6:7e:1b:b2:c1:f4:2a:f3:aa:c9:9f:3c:76:e2:
dc:d8:38:27:c5:d9:5b:29:d4:bb:e9:c7:79:14:ca:6b:e5:65:
2e:45:29:4d:ce:14:a6:33:45:cb:eb:92:35:76:82:63:52:ec:
31:18:b2:f2:89:cf:60:c4:af:13:49:73:45:ba:89:91:f3:88:
5a:de:81:67:27:a1:62:57:1d:01:8b:a9:f2:c3:b7:93:7d:d7:
fd:fa:77:bd:44:2f:e9:36:8a:f2:d7:ba:1d:38:b3:5e:bd:11:
06:94:62:f8:0f:81:dd:17:7d:8b:66:e5:d1:2d:21:a9:9e:8c:
dc:e5:1b:29:ed:e1:99:00:92:02:f3:e8:36:14:78:d4:0a:bf:
72:ce:71:df:6e:90:3e:ef:90:53:9d:8a:d4:e1:6b:cd:92:24:
6f:dd:a6:0b:2b:09:44:d4:38:b6:76:97:5b:8d:df:2e:d8:2e:
67:36:13:2f:9f:d7:1a:70:46:fa:e0:c3:9c:43:2d:e0:a8:d8:
d9:4e:5e:db:d2:73:65:17:40:05:d3:2e:ff:6e:e4:76:59:11:
db:c1:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 14:51:46 2026 by rpki-client