This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: Si/RFl8ydkBWhQOw1Q9oWQ6+IHefkHhI3eAlOVxSxNg=
Subject key identifier: B1:99:80:AD:F7:63:1C:49:E2:86:B1:B6:06:B1:79:05:9C:73:20:6E
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019C4322110E3FDED53D38CE78B4CD9BB668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 16:00:31 +0000
Manifest this update: Mon 09 Feb 2026 16:00:31 +0000
Manifest next update: Tue 10 Feb 2026 16:00:31 +0000
Files and hashes: 1: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: 6OflpfS9spcEKFG7R6CxP1FDiM6Ssz4PYHcxgZP+Cp4=)
2: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (hash: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:11:0e:3f:de:d5:3d:38:ce:78:b4:cd:9b:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Feb 9 16:00:31 2026 GMT
Not After : Feb 10 16:00:31 2026 GMT
Subject: CN=b19980adf7631c49e286b1b606b179059c73206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:3f:de:f4:82:1e:f7:5b:8f:e5:32:8f:32:
12:71:cf:23:0a:94:98:7f:c6:07:8b:b6:e2:4f:07:
d6:c3:3c:8d:f3:2d:d2:69:5d:78:b1:1e:d8:94:a7:
df:8b:2b:18:0e:ec:05:84:78:aa:ee:43:30:87:83:
df:a1:fc:53:7d:b2:b0:e0:2a:9a:a6:e8:ce:0c:90:
62:62:9c:dd:7a:7d:c4:8c:4c:dc:6e:a6:c3:58:9a:
60:74:62:6b:de:7e:c6:12:89:d2:cc:79:a0:5d:cc:
48:61:59:94:eb:0d:b1:ac:3d:fe:d2:91:0e:09:5c:
b4:f5:6b:0e:d8:1e:84:ba:6a:7a:11:50:1f:e1:13:
01:ee:c0:a0:0d:e5:83:13:84:12:30:76:ce:24:bc:
23:62:1c:ad:d5:2e:5c:a5:5d:90:73:f5:93:30:d3:
ea:a6:7e:43:b5:52:d6:5c:1d:b0:d1:3b:73:86:23:
a4:d9:16:36:8c:8c:56:fd:6d:3a:9b:44:1b:99:d6:
a3:ed:0f:c2:25:a7:fa:9a:12:f7:5a:b0:05:46:f1:
0e:e2:19:84:80:5e:54:79:ee:8b:15:ce:87:49:8f:
e3:4d:c3:7b:47:77:65:68:b7:67:95:f4:df:29:c1:
a1:fc:b5:30:7f:5d:11:9e:1d:43:99:07:b6:ab:5d:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:80:AD:F7:63:1C:49:E2:86:B1:B6:06:B1:79:05:9C:73:20:6E
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:c2:4d:d9:a4:d6:aa:24:c4:16:86:d9:b9:48:b0:69:26:
b5:bd:73:06:5e:25:44:75:2c:31:c2:04:3e:d5:18:a2:aa:e7:
8c:0a:88:88:bb:e9:0b:fa:5a:94:47:cf:9e:94:2b:35:d3:be:
e3:16:52:7f:a3:26:fa:f4:ce:ba:4a:6c:97:8d:8b:e2:fe:67:
f1:a7:7b:41:17:06:f2:d3:d6:90:1a:0d:59:9a:ec:f7:7e:9b:
40:cd:0e:7a:66:e3:a5:ab:6b:5c:65:4f:18:e6:f4:95:81:8c:
5b:7d:af:dd:4c:e0:b3:3e:41:c4:85:db:5e:42:94:c0:d2:0e:
af:aa:93:5a:90:ad:96:89:e6:60:ef:bb:31:df:9c:74:0b:56:
6e:e2:4f:7f:db:58:79:b6:cc:f5:08:9d:95:41:b2:91:44:94:
61:11:66:5b:b3:c2:5e:ae:3e:5f:34:2e:6c:62:f7:52:26:82:
23:81:d5:cd:df:ae:7d:db:a8:26:a4:60:c0:1c:8f:b3:9c:93:
28:c9:f2:0a:28:e2:cf:69:e9:c3:e6:2d:a3:2c:cb:0a:26:22:
5a:ed:99:5b:94:44:92:19:24:42:a9:49:68:e3:28:13:c8:a4:
63:c3:d0:96:98:37:0b:a7:2c:df:67:55:55:81:2f:2d:66:cb:
16:75:6f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIhEOP97VPTjOeLTNm7ZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2YyODI4MjFkYTU3NWY2ODkxNzY0N2NmM2UxODk4Zjlk
MGE2MmEwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD
EyhiMTk5ODBhZGY3NjMxYzQ5ZTI4NmIxYjYwNmIxNzkwNTljNzMyMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuI/3vSCHvdbj+UyjzIScc8jCpSY
f8YHi7biTwfWwzyN8y3SaV14sR7YlKffiysYDuwFhHiq7kMwh4PfofxTfbKw4Cqa
pujODJBiYpzden3EjEzcbqbDWJpgdGJr3n7GEonSzHmgXcxIYVmU6w2xrD3+0pEO
CVy09WsO2B6Eump6EVAf4RMB7sCgDeWDE4QSMHbOJLwjYhyt1S5cpV2Qc/WTMNPq
pn5DtVLWXB2w0TtzhiOk2RY2jIxW/W06m0Qbmdaj7Q/CJaf6mhL3WrAFRvEO4hmE
gF5Uee6LFc6HSY/jTcN7R3dlaLdnlfTfKcGh/LUwf10Rnh1DmQe2q10TgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGZgK33YxxJ4oaxtgaxeQWccyBuMB8GA1UdIwQY
MBaAFP7PKCgh2ldfaJF2R88+GJj50KYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYt
MDYwY2Q5YzkyZjI2LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYtMDYwY2Q5YzkyZjI2
LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvLCTdmk
1qokxBaG2blIsGkmtb1zBl4lRHUsMcIEPtUYoqrnjAqIiLvpC/palEfPnpQrNdO+
4xZSf6Mm+vTOukpsl42L4v5n8ad7QRcG8tPWkBoNWZrs936bQM0OembjpatrXGVP
GOb0lYGMW32v3Uzgsz5BxIXbXkKUwNIOr6qTWpCtlonmYO+7Md+cdAtWbuJPf9tY
ebbM9QidlUGykUSUYRFmW7PCXq4+XzQubGL3UiaCI4HVzd+ufduoJqRgwByPs5yT
KMnyCijiz2npw+YtoyzLCiYiWu2ZW5REkhkkQqlJaOMoE8ikY8PQlpg3C6cs32dV
VYEvLWbLFnVvqQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:05 2026 by rpki-client