This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json)
Hash identifier: Qgis2eAZaCAw4aOksjIJf/NiJvT1+/Q4TpMlRiomi1Y=
Subject key identifier: 70:89:DF:65:94:34:E2:87:3B:F4:51:E2:AA:C4:1D:AE:16:4A:D3:69
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial: 019C427D4FCF4F6FEB280F4A73F67CDA1408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
Manifest number: 0D75
Signing time: Mon 09 Feb 2026 13:00:34 +0000
Manifest this update: Mon 09 Feb 2026 13:00:34 +0000
Manifest next update: Tue 10 Feb 2026 13:00:34 +0000
Files and hashes: 1: HYZwU1q8cqgPShX-RWS5UdIDZcs.roa (hash: pxyDD70WarwleFchwfjCCFNP4JSQb/ZGj4hPQ3pTdJU=)
2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: VOcQogqaYhppV4eXQKfW0FtO8PNNEdCZoD+cpe6j0JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:4f:cf:4f:6f:eb:28:0f:4a:73:f6:7c:da:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Validity
Not Before: Feb 9 13:00:34 2026 GMT
Not After : Feb 10 13:00:34 2026 GMT
Subject: CN=7089df659434e2873bf451e2aac41dae164ad369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:08:86:e5:8e:5b:35:4e:79:a0:96:1a:92:
1c:a2:31:25:b1:a6:69:12:0f:ec:e7:78:c3:d8:f1:
7f:ca:aa:a3:ac:90:d4:23:f0:0a:3a:b9:8f:73:37:
e9:f5:7f:6e:17:1a:ed:c0:26:aa:57:fb:99:39:c9:
fa:fb:7c:07:35:4d:fa:b6:de:c0:5a:8b:57:a3:56:
b8:c3:31:2e:89:1d:ca:df:ce:a4:ef:82:be:f7:80:
ac:b6:09:39:4e:5a:2e:49:af:60:b8:74:3c:5c:93:
0b:2d:59:78:65:00:10:59:c9:72:92:8a:aa:05:9d:
8b:17:5e:72:cc:4d:ea:bd:e7:a4:6b:5c:da:47:45:
50:52:92:f2:82:b9:33:b8:68:0d:42:cb:01:f0:6d:
01:dc:cd:ef:7b:db:a1:24:af:e5:75:29:cb:28:34:
ff:c0:77:a6:83:77:5a:2a:48:95:56:0a:1d:84:7a:
cf:ce:05:08:44:52:30:96:6f:67:7f:ff:fc:8f:d3:
77:53:82:44:e2:3f:93:89:64:d6:5f:cf:0f:d7:15:
a1:7b:04:64:d8:28:f9:97:bf:2f:e4:11:35:7e:7b:
65:0c:9c:c7:25:80:d9:9e:db:b3:53:41:57:c6:1f:
27:25:11:58:4f:60:95:60:2b:f3:8f:fd:75:8d:25:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:DF:65:94:34:E2:87:3B:F4:51:E2:AA:C4:1D:AE:16:4A:D3:69
X509v3 Authority Key Identifier:
keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f1:07:ba:5f:bc:8d:bb:9d:fd:88:2d:33:c5:56:af:00:65:
26:47:1e:05:bd:6d:07:cb:31:78:8d:30:d6:8d:74:9b:d3:d0:
fa:5d:17:7a:66:fd:c8:b9:1b:a2:6f:9d:af:49:60:d6:e4:46:
6b:67:88:9e:e6:9d:0d:b9:50:b0:da:77:ba:e2:0b:a2:a4:86:
4d:76:c1:1a:e0:77:60:2c:ca:f5:61:94:93:38:15:78:88:df:
1e:9f:7a:f9:15:9a:d9:52:96:30:26:6a:95:1f:18:05:32:a6:
5c:e0:19:56:ed:55:6d:1b:c6:fa:e8:3d:26:a9:11:ad:53:ff:
e3:2d:b7:79:96:78:b9:a4:eb:29:fa:3a:64:b9:56:9c:d5:7d:
c9:c6:09:c3:d9:e7:d8:02:5d:8e:48:60:fc:81:b8:a6:c1:39:
db:00:85:aa:95:7d:c4:85:68:4c:64:11:16:1f:61:b3:80:54:
61:46:86:cf:84:66:55:45:6f:ec:61:95:e9:ea:6b:5f:6a:0e:
6a:fc:95:01:9b:88:b2:34:d9:31:1e:e4:23:bd:37:01:16:bd:
4a:0c:7f:6a:6b:15:02:f0:2e:e5:de:0b:0f:a2:b8:27:22:34:
ae:15:27:97:fa:1c:bb:4a:2c:06:40:40:cb:c9:f7:9d:2d:bb:
a1:6f:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:39 2026 by rpki-client