This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
File: 8zXtZqwB15F1zk149nKh_kcgN4A.mft (raw, json)
Hash identifier: Zz+Qav2bG4XqRxv7MXw8KP4X96/isQYh8sGWUZ8jOZc=
Subject key identifier: 8A:91:94:BB:2F:03:62:2C:52:B0:0E:EF:D8:7B:FA:F9:91:C8:4D:AE
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Certificate issuer: /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial: 019C40FD5CA0761DC3F9C5741557685B4125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
Manifest number: 01D4
Signing time: Mon 09 Feb 2026 06:01:11 +0000
Manifest this update: Mon 09 Feb 2026 06:01:11 +0000
Manifest next update: Tue 10 Feb 2026 06:01:11 +0000
Files and hashes: 1: 8zXtZqwB15F1zk149nKh_kcgN4A.crl (hash: 5vS+XgOXCSb2rB0HnuU1+8hNIl5zmm3pdNcMy9XS60k=)
2: VpiFwK0hsjfTbGKdlZz4M450A4o.roa (hash: 7nG4whDnBMU971FoyHXyhGJf7PxhrWgEoIfy9EmmD2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:5c:a0:76:1d:c3:f9:c5:74:15:57:68:5b:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Validity
Not Before: Feb 9 06:01:11 2026 GMT
Not After : Feb 10 06:01:11 2026 GMT
Subject: CN=8a9194bb2f03622c52b00eefd87bfaf991c84dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:25:9a:2c:e9:dc:2b:4a:a6:25:aa:4a:f5:
87:a8:e9:f1:ac:ce:23:88:f8:d2:ff:f1:b4:f1:86:
17:9d:28:7c:31:53:f8:64:69:db:89:b9:9d:a7:c0:
92:19:6b:95:a5:26:91:30:c8:67:1c:9c:d6:1b:1b:
af:a3:73:2b:06:0a:1c:c5:1f:fe:d4:fc:db:6a:dc:
29:05:e3:33:7f:ae:ee:89:67:af:1e:ed:cc:6f:43:
e0:56:32:52:cc:c4:1d:de:0c:63:bb:bc:4d:2c:cf:
9d:7f:24:1b:a4:d3:fd:19:fb:dd:5a:8d:d5:6e:74:
f2:47:b9:61:df:97:0b:e0:d8:c7:8c:54:22:81:ba:
89:25:f7:e9:8c:fc:30:e3:bb:f3:05:e2:9b:a1:e6:
fd:36:23:bb:41:6a:67:f7:10:44:80:59:b4:e5:df:
41:0d:44:99:d5:0a:2e:13:b1:2a:e3:97:13:64:01:
3d:e5:82:c6:07:f7:d8:a2:0e:f1:8e:db:5f:e0:c4:
47:dd:4a:58:31:32:22:5e:f5:f4:89:0d:4a:62:24:
2d:a4:7a:a0:9f:67:89:75:99:ef:4b:59:26:dd:99:
7f:38:38:d8:96:a8:4f:9a:1a:09:79:ff:1f:98:0f:
89:3b:41:78:4e:1e:c6:54:bf:ac:14:21:bf:45:c2:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:94:BB:2F:03:62:2C:52:B0:0E:EF:D8:7B:FA:F9:91:C8:4D:AE
X509v3 Authority Key Identifier:
keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7e:e8:2c:88:e8:17:53:04:7b:cf:e4:73:ef:be:e6:71:c8:
f6:c4:b6:d5:8e:93:22:e0:2b:cf:c5:f1:7e:98:ed:26:69:d3:
84:db:2d:6d:0a:1d:f1:1f:77:fb:48:aa:8f:a1:35:15:69:27:
9c:e6:99:95:ad:8d:30:92:f4:cb:84:5a:f7:cb:35:d2:7a:d2:
15:32:8d:99:12:d3:60:b9:cc:c4:72:4c:2d:71:4a:8c:7d:fd:
ed:4f:dc:20:05:c5:fc:30:9e:21:d7:7a:f4:6e:40:a3:7c:8c:
bd:b4:fc:d6:8f:fa:2e:47:f4:30:a6:e1:79:01:a3:2e:97:c6:
d0:31:5b:f6:60:7b:2f:a4:72:a9:9d:7f:5a:73:42:96:3f:d0:
6f:f2:63:f0:1a:69:88:35:d8:4a:9d:b7:8a:fc:c5:bb:e3:7f:
62:ae:42:9d:8a:b2:57:59:a2:54:b8:29:18:2f:33:db:33:23:
20:e3:66:05:8e:2f:dd:07:e7:c7:c9:34:1f:e7:82:ff:f2:ae:
78:c0:02:34:b2:9a:c9:96:f5:f9:1e:5c:97:27:11:e8:2b:10:
d4:54:fc:cc:58:a9:16:f2:af:0f:86:fb:e7:32:1c:ee:65:d6:
35:fd:f6:7a:2c:76:ed:42:31:bf:23:8b:61:44:31:32:10:c8:
72:10:75:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/Vygdh3D+cV0FVdoW0ElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMzVlZDY2YWMwMWQ3OTE3NWNlNGQ3OGY2NzJhMWZlNDcy
MDM3ODAwHhcNMjYwMjA5MDYwMTExWhcNMjYwMjEwMDYwMTExWjAzMTEwLwYDVQQD
Eyg4YTkxOTRiYjJmMDM2MjJjNTJiMDBlZWZkODdiZmFmOTkxYzg0ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWMlmizp3CtKpiWqSvWHqOnxrM4j
iPjS//G08YYXnSh8MVP4ZGnbibmdp8CSGWuVpSaRMMhnHJzWGxuvo3MrBgocxR/+
1PzbatwpBeMzf67uiWevHu3Mb0PgVjJSzMQd3gxju7xNLM+dfyQbpNP9GfvdWo3V
bnTyR7lh35cL4NjHjFQigbqJJffpjPww47vzBeKboeb9NiO7QWpn9xBEgFm05d9B
DUSZ1QouE7Eq45cTZAE95YLGB/fYog7xjttf4MRH3UpYMTIiXvX0iQ1KYiQtpHqg
n2eJdZnvS1km3Zl/ODjYlqhPmhoJef8fmA+JO0F4Th7GVL+sFCG/RcJpSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqRlLsvA2IsUrAO79h7+vmRyE2uMB8GA1UdIwQY
MBaAFPM17WasAdeRdc5NePZyof5HIDeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OTg4ODktMjlkNC00ZjUzLWEwNDEt
NTBhY2JhZWVjN2NhLzEvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83OTg4ODktMjlkNC00ZjUzLWEwNDEtNTBhY2JhZWVjN2Nh
LzEvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH7oLIjo
F1MEe8/kc+++5nHI9sS21Y6TIuArz8XxfpjtJmnThNstbQod8R93+0iqj6E1FWkn
nOaZla2NMJL0y4Ra98s10nrSFTKNmRLTYLnMxHJMLXFKjH397U/cIAXF/DCeIdd6
9G5Ao3yMvbT81o/6Lkf0MKbheQGjLpfG0DFb9mB7L6RyqZ1/WnNClj/Qb/Jj8Bpp
iDXYSp23ivzFu+N/Yq5CnYqyV1miVLgpGC8z2zMjIONmBY4v3Qfnx8k0H+eC//Ku
eMACNLKayZb1+R5clycR6CsQ1FT8zFipFvKvD4b75zIc7mXWNf32eix27UIxvyOL
YUQxMhDIchB1Fw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:39 2026 by rpki-client