This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: yrABga7vuAh7SaVMjegRq+jQsAI9haXPHSW1c/8XYPo=
Subject key identifier: C0:8E:5D:D3:F8:97:FE:F1:84:81:98:45:17:30:2A:4F:C9:0D:4A:26
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019C420F63C1A8F249C47AC6E079180A0DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0F07
Signing time: Mon 09 Feb 2026 11:00:30 +0000
Manifest this update: Mon 09 Feb 2026 11:00:30 +0000
Manifest next update: Tue 10 Feb 2026 11:00:30 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: f0qIGRVh2lzq+C5tOeTYZSPvZBJJkKMNYX00vvCD98g=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:63:c1:a8:f2:49:c4:7a:c6:e0:79:18:0a:0d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Feb 9 11:00:30 2026 GMT
Not After : Feb 10 11:00:30 2026 GMT
Subject: CN=c08e5dd3f897fef18481984517302a4fc90d4a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:65:94:95:17:6c:36:6e:22:31:79:ab:4e:
3a:c8:2e:fe:94:3a:54:86:0d:13:0c:c3:f2:7c:be:
ec:59:75:d9:ac:ea:db:c9:6d:98:2d:9d:40:da:a3:
9f:df:eb:ed:32:f8:bd:ac:d8:24:a7:e8:fc:95:7a:
0d:2e:df:2c:68:e9:ae:1b:ff:71:9c:df:ef:5b:93:
92:3f:bb:25:e1:69:6d:51:2f:ae:34:cf:6a:76:63:
85:f3:15:26:47:36:a0:b3:58:25:ea:41:0b:54:54:
80:78:76:fa:d7:50:3f:3f:8a:5e:49:74:d8:6e:c7:
cb:79:28:9c:9a:88:b4:74:aa:bc:ec:a8:fc:f8:fa:
ed:fa:07:5c:61:ac:f4:5a:62:7f:97:b5:1a:b8:fa:
3d:5e:27:05:df:ca:83:11:01:34:83:34:d8:2a:8a:
1e:40:68:a3:49:7a:7e:cd:84:eb:b4:3d:32:75:36:
f8:bb:52:6d:99:d8:e9:67:75:4f:43:48:5a:1a:c2:
bd:3c:6e:03:c3:1b:dc:e3:27:8c:02:12:39:e5:0d:
30:cf:8e:1a:b2:56:c9:72:06:03:f5:33:57:23:7f:
b5:7b:68:48:b5:28:c7:2d:a7:c0:01:76:e3:41:5f:
71:37:6f:d7:e0:eb:74:f0:87:73:e0:18:31:18:d6:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:5D:D3:F8:97:FE:F1:84:81:98:45:17:30:2A:4F:C9:0D:4A:26
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:23:99:e0:0b:d8:86:b6:87:30:60:c5:f0:77:05:5c:53:
f1:aa:26:4f:c1:f6:43:08:7e:7d:9a:15:28:54:3c:62:57:40:
e4:98:40:7d:2f:1b:45:e4:a5:49:2c:d6:51:0c:5e:c6:09:b1:
4c:58:91:f3:82:c4:7b:cd:43:ea:17:a9:4c:9d:91:1d:cb:12:
5f:76:fd:48:39:c2:11:49:f8:05:f2:be:b9:cf:0f:11:e4:b4:
4c:11:22:76:bf:41:5d:bc:19:90:97:3d:89:d3:bd:e8:66:fe:
2a:2c:de:a5:72:3c:a6:21:74:f2:54:f4:ba:3a:61:d8:2d:57:
21:d6:88:a7:93:5e:d3:49:83:81:43:73:76:84:a8:19:f9:b2:
6f:f5:3b:e4:71:41:98:03:d7:32:06:0c:ed:5b:cc:66:6f:0d:
c0:b2:aa:e9:4c:c3:1d:02:c0:61:1c:af:67:fb:bc:08:b4:c2:
36:93:ab:02:d5:d7:e5:07:b6:22:10:8f:9c:c5:69:74:7f:bf:
f3:17:64:7d:90:83:9e:5c:c5:7b:6a:cd:a1:dd:01:2d:5a:4e:
ca:96:2e:bc:46:f1:d6:2c:dc:52:e4:50:34:67:cb:96:c5:03:
cf:44:61:17:47:b0:20:4c:4e:56:cd:27:8b:1b:cc:96:cb:bb:
8e:e7:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:45 2026 by rpki-client