This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: 7BoSn9n0MshF267wOv3hD8dYrJn94CjUOML7+j9nZu4=
Subject key identifier: 8E:BB:EC:CF:A7:25:17:24:5F:3A:C5:85:4C:20:13:F8:6E:BD:2C:5D
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019C43FE60E5997E2F9B05845A9C583BF108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 20:01:10 +0000
Manifest this update: Mon 09 Feb 2026 20:01:10 +0000
Manifest next update: Tue 10 Feb 2026 20:01:10 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: bFYsMnLhwtfJ9oDH9e8cP3Y2R4ZhD2cdir21uCA1g0I=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:60:e5:99:7e:2f:9b:05:84:5a:9c:58:3b:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Feb 9 20:01:10 2026 GMT
Not After : Feb 10 20:01:10 2026 GMT
Subject: CN=8ebbeccfa72517245f3ac5854c2013f86ebd2c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:2c:f5:ea:22:c3:6e:01:4d:57:f6:cf:31:
70:9a:68:91:f9:05:ae:fa:f7:e9:89:74:b4:04:a8:
73:61:2b:6e:53:ee:ef:35:16:ab:3a:45:42:e5:b3:
b5:8c:cd:92:79:9b:50:34:f7:ae:d0:18:d3:0f:80:
fd:a6:da:1f:43:3c:b8:a1:68:f6:45:d8:72:96:42:
e1:77:73:1f:4e:d7:1a:35:44:fa:7e:40:fc:de:64:
ff:97:85:22:f3:0a:2b:50:43:31:2c:6e:bf:ba:b4:
df:be:aa:63:13:fd:ba:29:b6:d2:f0:70:1e:ee:35:
72:bf:9e:74:61:28:6f:3d:6a:fa:ff:9d:2c:9f:f9:
c7:eb:47:4d:d7:3a:c6:82:1e:7c:ef:eb:1f:73:32:
88:87:01:20:1c:d0:ac:34:39:4c:77:6a:4b:86:59:
00:84:5d:e6:59:af:d2:cd:8a:17:d3:02:89:82:6c:
cf:fc:5a:69:f4:4d:fb:3f:69:66:7c:86:ca:02:cc:
a4:b0:6b:23:dc:5a:d0:49:0b:af:f5:c8:1a:c3:4f:
55:9d:81:74:00:6c:c1:23:c9:ab:19:bd:de:77:d4:
cd:c6:7e:c9:a2:3c:16:8b:f3:1e:96:8d:b7:be:85:
b9:87:ec:70:35:48:b8:ae:46:b0:69:88:bd:9e:fd:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:EC:CF:A7:25:17:24:5F:3A:C5:85:4C:20:13:F8:6E:BD:2C:5D
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:24:64:2d:76:17:de:35:d1:9c:d4:11:9c:d5:cb:f2:ab:87:
32:3d:5c:03:50:67:bb:01:75:83:64:b5:ba:4b:b1:f6:23:fa:
27:2a:93:ee:b1:2a:23:3d:80:ef:fa:b2:a7:61:dd:cf:5c:a1:
a8:cc:46:d7:bd:32:bd:9e:80:85:e2:14:c2:d9:29:f6:7e:3e:
45:36:f4:90:8a:6a:8f:a5:89:9e:bb:1a:b3:21:c5:ba:f8:62:
31:16:fc:f7:c0:2c:cc:c8:81:9d:af:51:d3:d2:12:f4:d3:d3:
3e:05:ff:33:de:67:c7:84:02:4e:76:63:66:30:62:87:fe:b7:
7b:ce:70:c9:05:11:00:89:22:0b:e9:be:3b:1e:6b:63:05:98:
b7:46:a4:61:ab:ab:eb:21:75:e0:40:11:aa:10:98:e1:2d:cf:
4b:24:7b:7c:88:b3:2b:f1:12:f5:7a:a4:c4:d7:df:0d:84:2c:
74:e9:d3:fc:af:1b:91:10:eb:ea:30:77:77:e8:43:db:87:5a:
c0:73:b0:5c:06:92:1f:7e:37:1a:2d:6a:51:62:dd:43:3a:91:
7f:01:78:b3:59:5f:ee:12:75:5f:85:50:af:a0:e7:0b:4d:b9:
89:cb:02:9a:55:38:11:44:06:5c:9e:b1:15:72:e3:34:f3:ab:
9d:16:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:21 2026 by rpki-client