This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: RatWFADAAHh0gpu5g32zkUffXWdlbegCsRDrWH0MXyg=
Subject key identifier: B0:8F:8B:81:A7:C4:66:13:D5:94:4F:86:73:2E:34:61:98:90:42:E1
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019C43221E22D3C6D7EFECDE185710EFE67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 090B
Signing time: Mon 09 Feb 2026 16:00:35 +0000
Manifest this update: Mon 09 Feb 2026 16:00:35 +0000
Manifest next update: Tue 10 Feb 2026 16:00:35 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: vXwiJRt7FAfu1cZx7ZQ45l9J1LF9dLXXl41g28A58cc=)
2: SFBkTzYwiLINrSxoZ2---TI2yUs.roa (hash: vAkDpmYQupbLbDU1ZR0gvrEp2AeDlJtoQMFulae2sms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:1e:22:d3:c6:d7:ef:ec:de:18:57:10:ef:e6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Feb 9 16:00:35 2026 GMT
Not After : Feb 10 16:00:35 2026 GMT
Subject: CN=b08f8b81a7c46613d5944f86732e3461989042e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:df:11:9d:28:31:a1:89:c5:5a:1a:25:ae:
8f:4d:04:ab:01:ea:de:10:cd:49:d8:2b:82:e5:d4:
f7:16:44:e3:56:d4:6b:13:ca:60:39:15:0d:82:a1:
d0:47:dc:d9:ab:ab:9b:f8:49:b8:2d:79:23:15:f0:
4e:ff:03:a9:9c:f6:32:fd:74:f9:e4:f0:d1:5b:b6:
bc:e5:7a:6c:d6:8a:54:86:a0:83:f2:ae:79:08:7c:
6f:b5:4d:d8:88:16:be:6f:6b:cb:22:df:a4:4b:10:
e8:fd:19:0b:6a:94:77:70:a2:51:82:fc:60:2a:43:
a3:bf:72:2e:39:f3:50:8f:70:6a:31:a4:92:5c:c4:
6c:f2:5b:83:a0:8d:23:95:2a:20:6e:71:e6:bb:a8:
18:80:3e:10:98:53:34:94:e1:55:9d:4e:f2:72:47:
c2:58:c2:e7:0d:b9:ae:1e:bf:34:38:69:5c:b4:c5:
1c:71:ab:66:89:7b:a2:6e:2c:03:90:80:a8:7c:8a:
ad:f7:01:fd:0c:17:ec:cc:45:72:d2:3c:34:e0:3f:
4d:97:78:3d:20:6e:ac:21:8a:21:45:7a:0d:9e:03:
05:71:f8:0d:56:3f:ed:cf:69:64:c2:64:ea:12:bc:
0a:3a:13:94:10:b8:06:1e:95:fa:9f:d8:65:88:36:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8F:8B:81:A7:C4:66:13:D5:94:4F:86:73:2E:34:61:98:90:42:E1
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:59:69:a3:d2:6e:c4:29:85:56:8f:0c:b6:b7:bb:73:a4:
86:83:23:1c:c1:89:9d:80:ee:e4:2f:26:d7:40:39:26:51:4b:
48:15:7e:a7:d5:ae:cd:c5:78:4a:79:09:0e:bf:ff:d9:76:ac:
21:56:78:c0:d0:4b:e0:12:86:15:a1:10:63:93:31:e8:bf:49:
11:31:80:f1:e3:f9:11:6b:64:12:3a:41:f2:f3:48:66:b3:18:
95:03:69:c0:ae:d2:ed:85:81:46:48:39:b2:2f:2d:32:8e:5a:
f5:b9:3c:41:1e:bc:8a:85:5f:b2:d6:ef:13:92:93:fe:37:dd:
89:dd:0b:42:5a:cf:81:e0:4d:f8:b4:06:a6:a1:1c:3e:c4:ff:
d2:fb:73:04:f2:99:9e:a0:90:4c:ff:81:8d:fb:34:20:b4:d3:
6c:84:45:30:19:a0:83:fa:cf:7e:04:87:57:f9:0c:b2:a6:f2:
2a:b0:54:84:d0:17:c2:f6:9c:10:89:60:5f:47:70:1d:02:9c:
92:86:11:61:70:fd:9f:bf:3a:9f:e2:b1:de:04:8e:07:05:42:
2b:09:4c:33:39:ee:b0:f2:58:15:55:4f:8a:e2:3e:69:86:c0:
b8:3f:db:fc:67:d3:b7:85:d9:30:0a:78:e7:04:4d:6e:01:ea:
85:33:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:21 2026 by rpki-client