This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: GUs6B0ORLs+YQaVdjLYmDeTTwbo3e+z3C4Ue1CxuPV0=
Subject key identifier: 42:D8:E1:97:61:04:F3:23:7F:64:DE:9F:33:15:47:8B:7D:DC:3B:48
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 019C416A8F40553775039AC15F4A25B4E9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 08:00:28 +0000
Manifest this update: Mon 09 Feb 2026 08:00:28 +0000
Manifest next update: Tue 10 Feb 2026 08:00:28 +0000
Files and hashes: 1: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: +bRbhv4ZZ2qaYttJrhYsLJtq92HJhfazjXJA1aV5nr0=)
2: fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa (hash: UicbF6HqFzNjuTONdGcIiDeIjerH1Ziz3AoeI+o7LaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:8f:40:55:37:75:03:9a:c1:5f:4a:25:b4:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Feb 9 08:00:28 2026 GMT
Not After : Feb 10 08:00:28 2026 GMT
Subject: CN=42d8e1976104f3237f64de9f3315478b7ddc3b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:26:10:4e:e5:3e:b5:50:c2:14:ab:f3:8d:
55:59:4c:a2:a3:ef:e4:f8:e9:9a:74:0e:f8:bf:90:
a3:ef:25:ed:f3:8d:ad:fa:b7:38:29:1d:56:57:14:
e9:2f:c9:a7:f0:b6:1b:20:23:38:81:ee:7d:fe:66:
23:e1:11:8c:18:ba:cf:4d:b6:8e:c7:8e:48:b9:f5:
1c:36:64:3e:04:69:71:bf:49:b4:aa:13:8d:d5:18:
30:08:92:51:ac:6c:7a:86:72:d3:52:d5:38:12:9a:
a3:0f:64:e5:2c:03:46:30:3a:88:97:8a:3a:ae:48:
a6:5a:47:43:8f:02:b5:eb:ad:66:fe:e3:2b:55:53:
8d:4a:5c:de:28:59:05:3e:8c:03:97:94:ca:4c:07:
aa:02:dc:51:28:9f:ed:0b:bb:6a:78:82:c1:2c:9f:
e9:d5:9b:c9:d4:76:38:15:72:f3:86:57:7a:7a:f8:
6a:ac:18:0f:a4:66:a1:63:0d:e9:4f:2e:61:96:18:
b8:64:3f:99:bc:53:f4:3b:15:e3:e8:a9:58:d6:40:
06:9c:32:1d:58:c8:fe:c2:eb:12:39:5b:8e:3a:ad:
02:09:16:39:32:3a:a5:c6:26:29:03:c9:8e:80:49:
fb:24:4a:ef:20:e6:45:e6:b6:0e:f5:db:3a:2a:48:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:E1:97:61:04:F3:23:7F:64:DE:9F:33:15:47:8B:7D:DC:3B:48
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:90:d9:6a:15:25:76:e8:fe:10:cb:86:94:70:e0:a7:cb:
b0:7b:bd:0b:53:80:df:19:85:f5:36:5e:b0:06:e0:49:90:01:
9f:87:4d:3d:ce:ac:d4:d1:3f:f4:b7:d6:ce:9f:40:f1:1b:0e:
10:10:1f:ab:49:99:69:1a:10:df:ec:1c:36:96:3f:86:4b:ec:
e9:ae:db:7a:df:ca:46:cc:69:d3:63:fc:69:46:f1:29:d1:1c:
6f:f2:05:b5:2d:ef:a2:7c:4b:ad:c3:af:4b:1e:38:4f:e4:5b:
5c:1b:e7:d5:03:3c:ce:e1:37:27:79:ae:d7:c4:12:20:da:3d:
5b:be:3b:65:0c:ae:59:a2:5f:f3:45:9e:22:5c:98:d8:1b:7f:
fb:43:50:f8:03:08:19:63:23:c5:14:66:19:f1:90:e5:91:20:
68:57:85:02:89:29:15:2b:eb:23:3f:3f:b7:f5:52:f5:ff:92:
e5:66:e6:ea:c1:25:f7:4e:c2:01:34:05:46:56:11:c5:40:5b:
38:fc:4a:6f:48:75:74:47:dc:43:be:a4:6f:05:36:02:fe:c2:
aa:4b:17:c0:aa:9a:3b:e3:0e:08:0c:6a:aa:6c:f2:84:a7:7b:
37:23:a9:86:8b:da:70:d5:3a:f8:b4:22:d8:a9:85:a1:7d:e7:
cc:e4:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:26 2026 by rpki-client