This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: bLQOqQ6bb9pdREs51XU/JA7VJkErAZ2ytdW35qUoOXA=
Subject key identifier: 99:FD:2F:20:79:53:77:4F:57:55:1C:2D:98:84:A0:F4:D2:88:A4:5C
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019C427DE1C97610A8274596B4B97B5CB22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 09B5
Signing time: Mon 09 Feb 2026 13:01:11 +0000
Manifest this update: Mon 09 Feb 2026 13:01:11 +0000
Manifest next update: Tue 10 Feb 2026 13:01:11 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: z2NRRZH6K+bv5Hgo9w2uYsummLXiqlevToZonPF5boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:e1:c9:76:10:a8:27:45:96:b4:b9:7b:5c:b2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Feb 9 13:01:11 2026 GMT
Not After : Feb 10 13:01:11 2026 GMT
Subject: CN=99fd2f207953774f57551c2d9884a0f4d288a45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:9d:74:35:cc:21:1c:59:ca:3d:9d:1b:bb:
65:2a:f7:54:cd:a5:a6:76:fd:9b:07:7d:51:17:01:
92:c3:a2:7d:94:4b:c0:5c:d7:7a:09:13:34:56:c4:
7e:f8:0a:80:db:52:99:78:c5:73:ce:a0:c9:3d:ac:
a7:44:41:4f:38:7b:94:6e:f1:7a:cf:34:60:53:75:
99:c4:9f:0b:63:00:2a:46:fc:5b:ad:1a:77:a5:1e:
64:91:96:71:47:b6:93:a7:87:90:89:9b:f2:65:88:
f1:60:9e:83:0d:d9:6e:ca:05:19:4b:36:08:4c:5d:
93:0f:be:29:ea:9d:ab:20:32:67:17:61:25:5a:5b:
d4:62:c0:75:31:05:02:4a:53:0c:77:21:41:25:c3:
74:93:9c:f4:21:03:c8:cd:30:94:b4:75:18:bd:a2:
66:8f:58:11:14:a3:20:e2:bb:10:1f:e0:1d:86:bd:
ac:33:37:de:f8:0e:c7:6c:10:7e:78:c9:d9:b5:b5:
a2:f0:03:d5:01:8b:11:c5:e4:7c:50:ec:3f:36:76:
7e:e3:33:a9:11:83:4e:3e:f2:8b:f3:24:11:f5:1a:
16:ea:a8:40:16:57:d2:08:b0:36:7c:4a:8e:de:ce:
cb:16:27:88:c9:4a:07:09:f1:4c:03:cb:85:d9:a8:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:2F:20:79:53:77:4F:57:55:1C:2D:98:84:A0:F4:D2:88:A4:5C
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:9b:5b:3b:28:0a:9d:fd:17:17:69:43:d1:fb:92:47:50:
e3:4a:10:e0:68:72:97:87:cf:1f:21:6f:df:61:bb:b2:28:28:
6a:0a:f0:6e:8c:c8:1b:54:91:5d:da:b8:dd:be:bf:1a:ff:b7:
b0:04:86:4c:e7:89:9b:92:fd:c3:77:36:ef:0b:19:db:ea:47:
55:b8:18:98:56:c9:16:6a:50:71:06:df:17:2f:c4:41:63:3f:
82:8c:58:d0:6c:01:44:51:27:99:6c:16:64:86:25:8e:11:81:
4f:e6:a4:bf:5c:85:6b:41:79:e1:70:a4:98:dd:99:d7:53:44:
44:47:d3:db:f5:56:4f:22:db:07:fd:b8:9f:ab:7f:cb:b3:83:
a9:54:e7:a4:56:cd:0c:7c:03:38:f0:c7:a7:8e:e6:b5:63:61:
8c:0f:77:25:0c:be:04:ce:70:8d:5e:b5:30:c6:47:c2:17:64:
e9:5d:5e:05:a6:0e:51:b9:ed:93:b1:70:87:d7:fc:f2:25:f8:
2a:84:61:fb:c6:31:92:2e:ad:e7:1b:b7:2e:13:c5:c4:f8:90:
a2:96:25:94:8d:09:36:db:e3:22:1d:48:e0:69:45:2e:f7:c5:
7e:23:8e:61:ec:a1:c9:fa:68:80:02:12:70:a4:f5:ff:20:ca:
ff:4c:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:19 2026 by rpki-client