This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File: 18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier: rmJdgsnT4Jna6dRTrfwPgwVI608PowgdxnjC1+lX5qI=
Subject key identifier: 80:8A:B2:74:ED:10:9A:72:16:D2:FD:93:74:6A:48:06:6F:08:01:71
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer: /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial: 019C427D1DE670CF39E5B81A07ACDBB9FBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number: 12AF
Signing time: Mon 09 Feb 2026 13:00:21 +0000
Manifest this update: Mon 09 Feb 2026 13:00:21 +0000
Manifest next update: Tue 10 Feb 2026 13:00:21 +0000
Files and hashes: 1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: DkCDofXvQCaIJ0qRPVU4PVGD5b/DSArEkarta8uxNZU=)
2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:1d:e6:70:cf:39:e5:b8:1a:07:ac:db:b9:fb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Validity
Not Before: Feb 9 13:00:21 2026 GMT
Not After : Feb 10 13:00:21 2026 GMT
Subject: CN=808ab274ed109a7216d2fd93746a48066f080171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:e8:59:b6:50:86:87:66:f8:91:4f:c1:b4:
66:ab:a7:e2:75:0d:3c:36:9a:78:c2:2f:1c:ed:03:
56:cd:f8:8b:ca:0f:c4:f9:91:19:1e:9f:90:0b:aa:
74:b6:9f:98:20:84:bf:c1:bd:78:5f:72:74:f3:9d:
34:4e:a0:bc:80:82:70:8c:8f:94:0d:9d:18:5d:54:
ed:1a:31:e0:94:be:f0:34:70:1c:54:d4:85:c7:d5:
c2:93:11:96:2f:57:4c:f7:b4:fb:64:52:cc:17:5c:
98:c8:08:c2:ec:7f:9d:0b:ca:53:33:b9:49:9b:a5:
fc:3c:af:bd:0a:73:60:a6:df:fa:ad:35:a8:71:9c:
8f:46:df:0f:ee:b6:c3:d3:2e:81:34:69:7d:b7:c0:
58:25:3c:2a:64:00:71:9e:3c:82:08:c5:f2:27:f9:
e4:fd:33:d6:a6:51:24:e0:25:43:8f:33:a8:63:55:
50:25:44:57:41:30:5e:7a:fd:33:0a:98:bf:b4:80:
af:aa:15:43:df:b8:72:1b:47:0c:90:69:87:99:2a:
e0:21:e1:59:28:e7:78:fc:01:57:3c:8f:05:0f:3a:
1c:5b:18:5b:eb:d2:be:de:e9:a1:dd:a0:03:13:24:
5c:3f:6e:20:8d:0a:02:a8:24:34:e4:82:34:1d:b0:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8A:B2:74:ED:10:9A:72:16:D2:FD:93:74:6A:48:06:6F:08:01:71
X509v3 Authority Key Identifier:
keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:15:61:0a:58:80:71:4d:e9:17:cf:cd:fe:61:ef:d6:20:76:
93:90:b9:b5:1f:a0:d0:3b:84:2c:05:d6:b7:55:a4:a2:03:a5:
b4:7a:d2:15:51:c8:7f:e9:3f:60:ff:21:73:20:90:b6:a3:76:
96:ca:f7:7f:c9:80:08:d9:84:bc:03:6d:56:91:bd:54:8d:70:
c8:d5:45:41:59:fc:ee:56:12:29:31:fd:60:71:b9:a0:73:a4:
55:4b:22:20:9b:be:4a:fa:95:89:6b:cb:8c:20:bf:78:df:49:
e6:2f:8a:82:7d:b4:fa:a9:c8:e0:45:ce:f3:f3:51:18:82:5d:
00:c4:55:73:95:42:77:fe:b6:8c:4a:59:2f:be:c7:30:33:ee:
c4:cb:e1:5e:ef:bf:b9:02:53:c4:fd:ee:64:48:f7:d5:02:70:
f3:c2:2f:d5:7a:58:5b:91:a0:3a:1c:97:e1:8b:bc:cf:b3:14:
11:f5:41:35:78:d2:81:03:d0:54:b1:0c:c0:65:e1:52:47:cf:
57:6c:31:88:a1:78:76:68:0d:10:6f:c4:0f:bc:f3:74:32:f1:
03:46:dc:e7:1c:d3:48:65:7d:3b:87:b2:a3:c0:9f:41:fc:9e:
ed:98:7b:fa:08:4a:bd:4c:00:5a:29:8a:7b:91:7f:bc:2b:78:
11:04:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:06 2026 by rpki-client