This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
File: g8t2BW38QWNCZu0C0GkCA6dUoXs.mft (raw, json)
Hash identifier: /jsw5zU/NHDRh1uyz71hTs/t2YovDSW/lPvthfgFdNk=
Subject key identifier: E7:D8:B4:2D:9B:2A:DA:91:EB:03:98:B4:AB:8D:ED:41:BD:C7:33:8D
Authority key identifier: 83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
Certificate issuer: /CN=83cb76056dfc41634266ed02d0690203a754a17b
Certificate serial: 019C432210D2AA529E59989EE4DC87378F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
Manifest number: 02C4
Signing time: Mon 09 Feb 2026 16:00:31 +0000
Manifest this update: Mon 09 Feb 2026 16:00:31 +0000
Manifest next update: Tue 10 Feb 2026 16:00:31 +0000
Files and hashes: 1: g8t2BW38QWNCZu0C0GkCA6dUoXs.crl (hash: bb1bTEivacleZpFVsYiUqe+vLu1lukIfgxXGfnA8Rd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:10:d2:aa:52:9e:59:98:9e:e4:dc:87:37:8f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cb76056dfc41634266ed02d0690203a754a17b
Validity
Not Before: Feb 9 16:00:31 2026 GMT
Not After : Feb 10 16:00:31 2026 GMT
Subject: CN=e7d8b42d9b2ada91eb0398b4ab8ded41bdc7338d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:85:4e:3b:f8:a9:65:5f:3c:ad:8e:fb:06:
75:5a:78:fe:11:46:05:21:04:2f:2a:12:fe:92:1c:
8e:52:bd:1c:83:4b:09:47:07:79:01:cd:3a:9b:2e:
b8:34:7b:a8:c6:93:7a:00:f1:7d:41:73:c3:f7:ee:
1e:fd:ab:d0:dd:51:87:f9:cc:09:d8:73:67:2f:2e:
82:be:8d:14:27:f5:53:3f:67:8b:0a:49:be:ff:79:
64:4f:d7:4e:40:a2:6e:35:d7:49:50:96:89:0d:79:
9f:76:c8:d9:b4:ec:53:26:a6:52:92:77:47:58:7d:
42:5d:a8:d6:13:97:92:81:38:1c:9d:64:8d:06:c1:
ab:8f:0b:ba:39:1d:16:41:e4:1d:a8:21:72:42:a3:
4a:ce:71:11:47:75:43:fc:0f:80:c7:80:e9:2b:24:
d4:b7:a3:7a:11:54:0c:bf:49:af:6e:b3:85:74:be:
73:b0:80:d0:94:72:b8:55:ca:fa:bf:d8:c2:81:3e:
22:b1:00:0a:af:eb:ac:61:bf:c8:60:ae:27:b3:16:
b1:9d:4b:d7:34:7a:2d:8d:2a:a1:7d:84:0a:a3:6c:
69:e1:68:ff:51:7c:04:64:ff:a2:dc:1c:34:0d:c5:
68:9c:28:29:f2:ba:62:be:9c:fb:72:cb:d0:79:df:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:B4:2D:9B:2A:DA:91:EB:03:98:B4:AB:8D:ED:41:BD:C7:33:8D
X509v3 Authority Key Identifier:
keyid:83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:e6:59:48:c0:42:67:be:07:63:6e:d3:42:87:13:30:a5:
c9:da:2d:e3:83:f9:e0:44:b9:8a:7f:c1:82:a1:90:49:46:54:
ba:b1:55:1d:dd:57:fb:f6:2f:1d:39:14:89:ce:05:08:37:ff:
dc:b0:3d:8d:d5:41:11:8d:11:f3:06:bc:b1:5d:b3:91:74:59:
cc:22:53:27:2c:c1:77:0b:a3:9c:10:38:ae:04:eb:e9:41:91:
55:4c:67:71:eb:0b:ec:8b:15:42:90:56:2a:2a:5a:41:9f:39:
15:bd:27:9c:32:fd:3b:8a:4a:db:4b:94:1d:ba:56:71:2c:a0:
46:31:25:19:ae:41:cd:eb:d8:56:1a:a1:4e:29:86:66:23:36:
a8:50:55:c2:86:3e:c8:a0:a5:7c:eb:6d:9b:fd:5b:7a:50:50:
8e:e0:dc:b4:fe:bb:2e:79:58:ba:ee:50:f9:76:76:ed:79:bc:
42:ae:32:d5:a0:98:5d:ef:94:77:8f:3b:82:b5:bb:50:c0:b4:
fe:e7:e7:75:07:c6:f6:3b:5b:7b:72:ba:8a:dd:f2:1b:25:61:
e0:2f:48:00:21:13:e0:04:9e:cd:a1:bc:9d:3d:9e:60:e2:a6:
8c:da:58:54:be:16:3f:18:de:e4:41:fe:ab:55:87:4e:2d:8a:
e1:73:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:02 2026 by rpki-client