This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: rriV5rgWvNDis2pCfzhOE42D6ERhq1gc65Vxglb5qfA=
Subject key identifier: B7:0A:C3:52:FE:8B:D9:DD:18:89:DB:DA:F2:CE:1C:98:27:97:6B:32
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019C420FEA22190F818EC9C5615698C746EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 0611
Signing time: Mon 09 Feb 2026 11:01:05 +0000
Manifest this update: Mon 09 Feb 2026 11:01:05 +0000
Manifest next update: Tue 10 Feb 2026 11:01:05 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: xvyPYicghFD2b5nKF6uvz2MLOp8krs28y8bz+TTD2XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:ea:22:19:0f:81:8e:c9:c5:61:56:98:c7:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Feb 9 11:01:05 2026 GMT
Not After : Feb 10 11:01:05 2026 GMT
Subject: CN=b70ac352fe8bd9dd1889dbdaf2ce1c9827976b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:79:93:29:1c:06:89:75:1c:29:8e:31:6d:
08:17:59:01:e2:52:83:85:99:e6:82:ba:85:f5:ea:
e0:f0:7d:0f:a3:cf:04:e4:d0:b3:ab:2b:84:bc:3c:
b5:59:db:35:40:d0:53:d2:ad:ae:3e:90:b4:0e:ff:
41:a7:6f:21:37:25:9d:3f:02:8c:e7:a8:33:c6:ee:
a2:e9:2a:58:82:2e:12:4b:25:f8:59:38:7a:1c:61:
d8:6a:e1:d9:a7:8e:33:3e:68:1f:9e:ed:f9:20:ee:
09:9e:7e:a1:20:f8:4e:ee:da:b6:64:ff:eb:bc:dc:
24:57:1c:ab:92:09:9c:f1:31:7b:0a:2e:9b:82:10:
62:09:d4:d9:fa:e1:1f:d5:71:aa:b7:fe:a4:67:13:
7f:36:59:22:c5:55:9b:12:04:e5:45:a1:56:e3:33:
a7:c0:48:83:3a:e7:3e:98:45:ae:a8:39:85:ba:d4:
ce:40:82:3d:5b:41:11:1f:6b:d6:10:61:1f:61:c3:
05:92:72:6e:d4:cd:ba:d5:98:49:b3:cb:46:21:9f:
3c:8b:74:0a:13:23:66:2c:2a:4c:67:2b:12:4a:14:
d6:c3:e6:a5:bb:0a:b6:0b:90:a4:cb:37:9d:3b:24:
a2:27:70:fa:69:02:6f:04:bc:db:7d:71:a6:74:a0:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0A:C3:52:FE:8B:D9:DD:18:89:DB:DA:F2:CE:1C:98:27:97:6B:32
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3f:82:22:03:65:8b:be:65:a4:82:d7:cf:7b:03:91:01:9e:
d7:a9:97:5a:cd:bc:30:56:56:f4:a2:91:89:4f:2a:ac:56:e0:
57:54:23:06:34:34:74:e1:12:96:bb:4b:bf:90:8d:1c:5d:c3:
f8:06:e4:14:f2:7b:45:2e:06:f8:ab:b4:c3:9f:57:0f:e5:71:
82:63:3b:c9:8d:36:87:aa:74:2e:4d:f7:2f:64:04:cf:a1:49:
90:7b:d9:be:05:b9:56:58:f9:89:fb:4a:7d:ac:01:cf:c0:5d:
a9:80:63:b8:47:f8:8d:45:9b:f3:3f:26:d0:0c:76:a4:85:72:
9b:0f:67:9d:e3:d2:4c:e5:2b:b2:45:2d:33:02:99:59:45:f8:
68:8c:32:71:d9:42:17:c3:b0:22:3a:b3:e4:a0:d0:5f:af:e7:
f1:c2:40:b8:0e:a1:18:2b:02:62:4d:79:34:9f:de:e9:fe:32:
b9:e1:3f:74:32:83:b4:67:e6:60:60:63:5b:36:40:8c:3f:eb:
39:c8:59:f3:68:11:81:f4:44:87:33:a8:32:72:67:92:f1:7a:
07:8d:fb:85:40:d8:e7:87:dd:20:54:0b:cb:f0:3a:49:6c:15:
cb:64:3f:2d:d8:2c:7c:f5:f6:a9:7d:b1:9c:37:15:da:f9:a4:
eb:b0:e5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD+oiGQ+BjsnFYVaYx0bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjlhZWNhYTM3ZGVkYzBmMmMwNGY1MWJjOTYzZmNkMmU0
YWFjY2MwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD
EyhiNzBhYzM1MmZlOGJkOWRkMTg4OWRiZGFmMmNlMWM5ODI3OTc2YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva95kykcBol1HCmOMW0IF1kB4lKD
hZnmgrqF9erg8H0Po88E5NCzqyuEvDy1Wds1QNBT0q2uPpC0Dv9Bp28hNyWdPwKM
56gzxu6i6SpYgi4SSyX4WTh6HGHYauHZp44zPmgfnu35IO4Jnn6hIPhO7tq2ZP/r
vNwkVxyrkgmc8TF7Ci6bghBiCdTZ+uEf1XGqt/6kZxN/NlkixVWbEgTlRaFW4zOn
wEiDOuc+mEWuqDmFutTOQII9W0ERH2vWEGEfYcMFknJu1M261ZhJs8tGIZ88i3QK
EyNmLCpMZysSShTWw+aluwq2C5CkyzedOySiJ3D6aQJvBLzbfXGmdKCeGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcKw1L+i9ndGInb2vLOHJgnl2syMB8GA1UdIwQY
MBaAFPG5rsqjfe3A8sBPUbyWP80uSqzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEt
MDRmYmQ2ODE4OTZhLzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEtMDRmYmQ2ODE4OTZh
LzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT+CIgNl
i75lpILXz3sDkQGe16mXWs28MFZW9KKRiU8qrFbgV1QjBjQ0dOESlrtLv5CNHF3D
+AbkFPJ7RS4G+Ku0w59XD+VxgmM7yY02h6p0Lk33L2QEz6FJkHvZvgW5Vlj5iftK
fawBz8BdqYBjuEf4jUWb8z8m0Ax2pIVymw9nnePSTOUrskUtMwKZWUX4aIwycdlC
F8OwIjqz5KDQX6/n8cJAuA6hGCsCYk15NJ/e6f4yueE/dDKDtGfmYGBjWzZAjD/r
OchZ82gRgfREhzOoMnJnkvF6B437hUDY54fdIFQLy/A6SWwVy2Q/LdgsfPX2qX2x
nDcV2vmk67DlGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:39 2026 by rpki-client