This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: f7WS8bIIWRKoqJJFu+r/MPVfq+yiLp34t+XTGrmUrSQ=
Subject key identifier: 73:F1:0B:3B:9F:21:14:AE:49:87:A4:15:1A:AF:A7:02:5F:9D:B4:45
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 019C42B464DE65BF7871A36A11173916A6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 023B
Signing time: Mon 09 Feb 2026 14:00:44 +0000
Manifest this update: Mon 09 Feb 2026 14:00:44 +0000
Manifest next update: Tue 10 Feb 2026 14:00:44 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: 1WS6JXbLKUab9B1uOp831F2cYTZy7f8lZViR5unGPyY=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:64:de:65:bf:78:71:a3:6a:11:17:39:16:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Feb 9 14:00:44 2026 GMT
Not After : Feb 10 14:00:44 2026 GMT
Subject: CN=73f10b3b9f2114ae4987a4151aafa7025f9db445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:94:42:d7:f5:2b:ff:04:b4:d3:f8:2e:ce:
36:c1:2e:87:78:99:52:b2:32:86:0c:93:6d:23:d7:
90:19:de:bb:69:65:7c:db:4a:25:f7:32:7e:57:33:
37:6d:24:70:a5:41:bb:0f:55:bc:ac:32:92:a1:ff:
01:4b:38:c1:71:25:1a:9f:9d:54:60:da:42:87:eb:
9e:5d:bc:42:98:29:73:65:40:75:84:52:89:7c:23:
b1:1e:51:01:e5:48:ba:3f:92:4a:7d:bd:ca:f7:5d:
b9:aa:de:f7:70:0e:b6:0d:68:a9:86:bb:b9:00:f0:
c7:43:73:da:90:72:6c:2f:a1:65:1d:df:53:fb:17:
6c:00:42:ec:d9:98:c9:d5:84:2f:20:63:e6:19:74:
88:33:63:79:2f:03:64:13:e9:da:fa:43:2a:53:70:
87:96:63:b1:e2:a9:b8:fc:1f:3a:e9:d5:6a:91:1c:
6e:56:99:f8:d6:8e:ad:9b:c3:80:14:e7:4a:e8:1f:
d0:70:b6:6e:8a:9e:db:d6:46:d3:ce:5d:c8:cf:c7:
11:6f:35:da:5b:9e:8c:1c:71:d6:68:a0:43:a9:d9:
69:df:34:74:0e:5b:d7:c2:fd:5b:91:0b:8b:08:4d:
c0:41:03:8e:f8:ba:c2:fd:e8:de:95:c9:21:04:cd:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:0B:3B:9F:21:14:AE:49:87:A4:15:1A:AF:A7:02:5F:9D:B4:45
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:98:3b:a6:e1:55:9c:f0:8b:91:75:0f:8f:8b:2d:2a:23:
c3:41:ad:0c:cb:71:fa:81:26:48:c8:4f:00:33:09:74:ea:3d:
c4:d3:79:f9:7e:d7:9d:69:da:e4:33:7d:31:82:6c:40:3f:8b:
85:b6:c2:7c:17:d1:ee:e0:03:a6:e6:88:03:eb:3e:54:f8:a9:
3e:ee:71:92:a9:fa:fd:d3:80:f4:59:68:c4:86:7b:d1:d0:79:
b9:2d:1b:af:a0:b6:38:20:77:72:18:2b:b4:69:ed:df:b3:ac:
14:42:22:18:ea:a2:86:9b:6b:4e:b1:fa:e6:29:8e:8b:8f:07:
f2:99:41:1f:db:16:34:82:3f:4f:95:41:7e:7c:39:98:ed:81:
ea:e7:50:e8:0f:b6:59:68:a2:7a:2c:85:a8:0d:f4:43:a1:95:
e3:04:a7:4a:55:d3:64:2c:d5:bc:6a:f9:68:9a:7d:17:27:36:
cc:83:2f:b2:69:07:73:bd:e7:42:02:86:f3:13:a1:eb:d1:2d:
5f:61:95:c3:52:ad:0a:e8:c2:f7:52:1d:25:0d:e3:33:78:68:
25:ed:7e:00:e0:4e:c1:7a:90:bc:c3:27:ea:47:49:1a:29:79:
e6:ae:d6:51:c6:38:e6:1c:cc:20:21:b4:f6:dc:1b:08:d9:e9:
47:58:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:06 2026 by rpki-client