This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: KgD/ag82uPMoFrS+on55S/wULGM3sO1fxxdidBuKrWA=
Subject key identifier: 65:39:0A:6D:06:FB:F7:88:58:39:B8:B3:98:69:AB:33:8E:D7:21:0A
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019C42B42D87A3825E94D4F2579824F71FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 14:00:30 +0000
Manifest this update: Mon 09 Feb 2026 14:00:30 +0000
Manifest next update: Tue 10 Feb 2026 14:00:30 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: GyJ3VScx9NOHQeY5SKv6sBr3GJKJv/OEixAowXbS37o=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2d:87:a3:82:5e:94:d4:f2:57:98:24:f7:1f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Feb 9 14:00:30 2026 GMT
Not After : Feb 10 14:00:30 2026 GMT
Subject: CN=65390a6d06fbf7885839b8b39869ab338ed7210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:70:3f:70:42:cf:86:da:82:08:1c:fd:98:
ff:dc:ce:fc:09:ad:20:8f:5e:7d:1a:33:56:97:5e:
68:2a:65:b9:84:fb:6b:ce:16:cc:78:38:60:3c:eb:
ef:ae:2e:9b:05:9f:d3:eb:44:4b:de:27:8d:ae:1a:
6c:32:f3:20:bd:5a:fb:00:25:c2:ab:f9:a3:de:ac:
74:3b:37:c7:53:2f:e0:6a:e2:47:c3:14:f8:7c:37:
cc:ba:7d:79:43:eb:4f:7d:ab:c1:5d:64:2f:b5:ea:
68:94:8f:5d:b0:72:d5:f0:5a:ed:e1:f6:9a:2c:3b:
c2:e8:74:1d:b5:76:53:12:c2:6b:5e:4a:8b:cd:3e:
ce:a2:06:9c:44:bf:96:89:99:fd:0e:6a:49:2a:65:
e3:be:94:1b:6e:25:de:50:1c:50:fc:1e:17:d3:28:
16:22:cd:45:91:72:9a:f9:0d:86:4d:ad:9d:13:1c:
19:d4:19:ae:22:30:a2:82:22:bd:5d:45:dc:c8:8e:
d7:4d:12:d3:2e:d1:ed:41:92:74:07:4e:59:61:85:
3d:94:8e:a6:03:d5:70:bd:ab:a4:b5:0e:d3:24:83:
d8:21:ba:96:d0:1f:bc:4c:9a:da:ab:f8:f6:d4:2f:
38:4e:59:65:06:bb:37:a0:e5:1f:4c:03:e6:26:52:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:0A:6D:06:FB:F7:88:58:39:B8:B3:98:69:AB:33:8E:D7:21:0A
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fa:29:a1:1f:eb:eb:d1:31:9b:8f:a1:68:9e:10:df:16:f8:
ce:4f:de:2e:0e:5b:72:59:57:8d:62:81:a7:63:26:2b:f3:a1:
6d:d8:a6:90:da:68:28:6d:3a:8b:55:20:39:b6:e9:07:47:29:
2b:d3:3a:7d:78:6b:67:73:de:16:ac:5a:8a:b5:96:21:f8:f4:
66:12:97:b7:41:5a:90:bf:58:cc:08:9a:43:6f:2c:49:54:06:
9a:20:57:df:52:b2:97:69:eb:cd:ec:79:be:90:31:60:5f:67:
57:f2:7c:c7:83:69:5f:cd:a1:5a:98:ce:16:f4:95:2c:fa:3d:
fa:a4:3a:83:7f:dd:b2:7c:34:20:91:cd:e3:6f:cd:a9:ec:f3:
f7:e0:9a:fa:01:fe:9a:7a:cd:e8:13:b6:6c:1d:80:86:85:d8:
ec:f8:ff:61:33:13:26:b5:04:b9:71:db:d8:ea:f9:8e:79:e3:
cc:60:8a:ea:88:52:1f:47:21:d3:c8:60:47:97:e0:5c:a1:8a:
9a:cc:7d:b0:03:5e:9d:42:7b:d1:99:59:93:2b:2d:bf:6c:c2:
b2:0f:99:97:95:f4:11:47:3c:43:87:58:49:4f:f2:cf:1d:a8:
c2:e0:49:f2:62:0b:f3:51:c7:f3:ca:4f:97:0c:a6:b9:45:20:
4e:09:71:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtC2Ho4JelNTyV5gk9x+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx
MTg2ZGQwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD
Eyg2NTM5MGE2ZDA2ZmJmNzg4NTgzOWI4YjM5ODY5YWIzMzhlZDcyMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJwP3BCz4bagggc/Zj/3M78Ca0g
j159GjNWl15oKmW5hPtrzhbMeDhgPOvvri6bBZ/T60RL3ieNrhpsMvMgvVr7ACXC
q/mj3qx0OzfHUy/gauJHwxT4fDfMun15Q+tPfavBXWQvtepolI9dsHLV8Frt4faa
LDvC6HQdtXZTEsJrXkqLzT7OogacRL+WiZn9DmpJKmXjvpQbbiXeUBxQ/B4X0ygW
Is1FkXKa+Q2GTa2dExwZ1BmuIjCigiK9XUXcyI7XTRLTLtHtQZJ0B05ZYYU9lI6m
A9VwvauktQ7TJIPYIbqW0B+8TJraq/j21C84TlllBrs3oOUfTAPmJlIp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU5Cm0G+/eIWDm4s5hpqzOO1yEKMB8GA1UdIwQY
MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt
YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy
LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfopoR/r
69Exm4+haJ4Q3xb4zk/eLg5bcllXjWKBp2MmK/OhbdimkNpoKG06i1UgObbpB0cp
K9M6fXhrZ3PeFqxairWWIfj0ZhKXt0FakL9YzAiaQ28sSVQGmiBX31Kyl2nrzex5
vpAxYF9nV/J8x4NpX82hWpjOFvSVLPo9+qQ6g3/dsnw0IJHN42/Nqezz9+Ca+gH+
mnrN6BO2bB2AhoXY7Pj/YTMTJrUEuXHb2Or5jnnjzGCK6ohSH0ch08hgR5fgXKGK
msx9sANenUJ70ZlZkystv2zCsg+Zl5X0EUc8Q4dYSU/yzx2owuBJ8mIL81HH88pP
lwymuUUgTglxgw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:59 2026 by rpki-client