This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier: ++6fNMo6zUJAGiHFUOrQ+jTicixE9A+GL02x5vI2Lgc=
Subject key identifier: B6:E7:20:EB:86:08:01:88:8C:2D:B7:DB:38:45:36:3D:BC:3F:E7:2E
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial: 019C424650FD2ABE7F868CA40419755AD17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number: 01AF
Signing time: Mon 09 Feb 2026 12:00:30 +0000
Manifest this update: Mon 09 Feb 2026 12:00:30 +0000
Manifest next update: Tue 10 Feb 2026 12:00:30 +0000
Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: Bbr2CqmyWZQgfBIhafsoM/wZ65kQM7Ni0QFpZyvTS3w=)
2: fGmytEtcKCBxP_COaX3EzxixmEo.roa (hash: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:50:fd:2a:be:7f:86:8c:a4:04:19:75:5a:d1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Validity
Not Before: Feb 9 12:00:30 2026 GMT
Not After : Feb 10 12:00:30 2026 GMT
Subject: CN=b6e720eb860801888c2db7db3845363dbc3fe72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:94:4b:59:bf:15:42:e1:7a:ca:31:c7:65:
a2:dc:32:88:cd:61:26:ef:9a:e4:be:24:ba:73:3d:
fc:85:f9:82:68:49:11:5b:cd:94:ce:51:b5:60:1c:
6b:86:07:9d:3d:21:e3:42:ff:6f:8c:33:b0:78:51:
28:9c:31:19:c2:09:f5:2e:f2:cc:7b:1b:67:14:a2:
85:f4:5e:88:a6:e3:1d:c3:5b:8c:55:99:e4:46:6f:
39:6f:9f:92:11:03:29:94:3d:be:90:38:55:64:de:
1c:95:6a:5d:a2:4e:7d:cb:61:d7:6a:92:b7:32:a6:
ef:a8:8b:8a:b4:c7:ba:da:78:d1:27:69:ce:a7:4a:
a6:36:9d:43:af:2b:d8:3a:3b:e7:49:36:9f:e5:de:
a8:2b:27:98:7b:91:f4:f9:08:0d:1b:60:2b:12:0e:
cc:ea:fb:09:33:5b:aa:71:24:62:1c:28:1e:fe:a2:
33:68:da:2f:a3:63:1a:6a:ee:53:22:6f:ef:ce:47:
51:d4:a8:5b:0e:df:e7:e7:9e:a3:fb:37:7f:83:e4:
56:41:7e:ae:c6:f5:22:a2:e4:b4:a5:c5:ef:99:af:
db:62:c8:57:1b:3e:ca:06:12:cf:76:51:54:cc:a3:
b8:00:e0:75:36:bf:e7:ef:3e:fd:b3:ce:ed:15:82:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:20:EB:86:08:01:88:8C:2D:B7:DB:38:45:36:3D:BC:3F:E7:2E
X509v3 Authority Key Identifier:
keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:eb:f8:19:89:9c:e1:e0:bd:94:aa:35:f8:84:38:ec:eb:
31:f0:82:f6:e8:54:a6:34:f4:d5:5a:ca:be:1d:d3:47:ab:0a:
05:33:7a:17:26:4f:61:df:3b:33:ed:c0:0b:76:f2:1a:44:ba:
59:f1:48:db:9e:66:36:f6:9d:24:3f:e9:6d:c2:eb:e8:bd:f4:
10:0a:0c:41:08:65:ce:50:18:ce:d7:7e:b3:e9:ea:e3:62:c0:
b9:0a:87:3c:62:85:bb:63:83:d1:2c:8d:34:df:a8:76:22:0c:
b0:17:6d:1c:7c:5c:f7:ed:91:54:5b:d2:fc:56:4b:67:b5:c3:
a9:c2:52:cb:7d:15:67:c1:43:14:48:c0:b0:42:83:e9:fd:cd:
56:30:32:0b:05:af:2d:b7:af:2b:d9:1c:06:fb:8a:11:f3:22:
9c:a4:8d:7e:bc:be:56:88:cf:6d:4f:d6:4d:fb:e2:83:a6:c0:
c6:66:b3:88:77:dd:f4:84:8f:66:24:a0:71:bf:20:ad:23:27:
ce:58:f5:61:c6:3a:36:54:c6:a2:d7:f4:fc:56:e1:4a:b2:90:
d1:47:db:52:81:e4:d7:c5:64:40:cd:8e:41:70:97:37:58:9f:
1a:e4:0a:08:10:f9:66:44:c1:ad:cb:e6:be:87:e7:64:9e:31:
6b:ba:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:42 2026 by rpki-client