This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: r9CjpUqPYiiNCMCaPd3Qqrd04s07QklJfqIJiX8FkRY=
Subject key identifier: 86:A8:EF:F8:61:CB:C1:1B:E3:75:0B:DD:2E:56:03:28:A6:AD:AA:45
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019C487F50F39E1E98BAB509826B2BDE7117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0992
Signing time: Tue 10 Feb 2026 17:00:29 +0000
Manifest this update: Tue 10 Feb 2026 17:00:29 +0000
Manifest next update: Wed 11 Feb 2026 17:00:29 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: F4iOwDTNlmr3N8ncs8j0Dhgbezlb/hWdDiSV54jvuw8=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:7f:50:f3:9e:1e:98:ba:b5:09:82:6b:2b:de:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Feb 10 17:00:29 2026 GMT
Not After : Feb 11 17:00:29 2026 GMT
Subject: CN=86a8eff861cbc11be3750bdd2e560328a6adaa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:44:65:e6:c0:7b:22:b4:d5:0a:a9:b3:1a:
11:b8:94:36:ad:ba:e9:90:7d:d2:1c:1a:c2:66:aa:
f7:61:d7:ab:ca:63:e1:84:6b:7c:da:e8:cf:11:bd:
73:2f:ed:d9:57:6d:c6:18:c8:b9:f4:d7:c7:28:b1:
7c:af:55:2b:48:7d:a2:19:3c:2d:90:24:0a:c8:0c:
09:56:0c:4c:13:e3:7a:73:af:47:de:7c:2a:57:b4:
2c:37:ad:08:d3:53:54:95:29:2f:86:0a:9a:34:52:
5b:22:55:92:f6:ad:1e:4c:fb:33:4a:84:4e:28:5d:
47:77:26:94:fa:b9:64:63:39:86:be:02:3e:3e:8e:
a0:50:03:41:46:2d:45:3c:b3:09:9c:e3:44:cb:66:
89:c4:19:fd:81:2d:a4:22:b3:41:e0:e2:a4:9a:6f:
5c:d1:e2:a0:55:2a:5b:4f:4c:f6:a7:b2:a6:e7:e2:
b4:bc:6a:e1:96:20:a8:34:4f:19:17:fa:84:49:99:
0a:ac:6b:e2:82:7f:3b:63:a3:23:4b:29:9f:3f:49:
49:4f:9f:d7:3a:da:49:11:ba:53:f2:4b:8b:a3:54:
ae:55:27:16:5e:68:9b:64:39:c3:ba:cc:56:72:f9:
76:10:02:38:7c:30:f0:10:f8:28:78:5b:40:ab:3f:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:EF:F8:61:CB:C1:1B:E3:75:0B:DD:2E:56:03:28:A6:AD:AA:45
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:20:0a:73:32:db:90:f8:85:51:be:4c:f3:8e:ce:f0:96:95:
69:a3:ee:35:c2:f6:44:8e:36:32:a3:c1:6a:93:a9:11:01:d9:
e1:49:25:69:04:d9:3a:92:55:91:38:27:6d:0c:d8:fa:4b:6c:
ee:1a:49:48:0b:d4:9d:88:b1:88:1f:a1:ae:8a:e5:3a:a5:a2:
28:ad:ab:75:63:64:8a:30:54:8d:ab:48:b3:81:b9:bd:40:72:
d3:55:c7:d0:4f:fa:18:e9:a7:29:b3:f9:dc:32:d3:50:8b:e4:
f1:1a:38:b5:48:a4:85:af:5f:b9:01:e2:e0:23:0c:33:2a:ec:
0f:d2:b9:74:f3:06:cd:91:92:b0:88:27:4b:12:42:5d:80:cd:
e8:b9:e1:38:85:79:a8:fa:77:c1:10:ed:8b:94:d0:20:50:68:
87:eb:ae:93:1f:73:f4:e0:b7:2c:98:c4:db:8a:f0:cf:be:7a:
1e:df:b1:ff:73:d6:c3:b0:53:b5:13:ad:43:f6:65:1b:34:d7:
f2:a7:aa:0b:0e:23:af:91:9d:c0:d7:33:46:c4:9d:45:ae:04:
3c:11:63:80:f8:14:bf:96:3f:f1:c4:1d:eb:7b:3f:e4:4b:e6:
f6:c9:7f:bb:f8:64:df:eb:c3:a3:63:ac:a6:24:c4:d6:ce:85:
a9:17:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 02:29:31 2026 by rpki-client