This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: qbr9E7JGrifPzpjFcfTM9qrTXktwLzlA1Kx7X4O0D3A=
Subject key identifier: BE:21:23:C9:9B:92:83:F6:DB:12:21:54:7D:D9:E7:FA:EE:D5:07:55
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 019C43FE9EDB2FF7B6F7AEF0A39AE897A03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 10B7
Signing time: Mon 09 Feb 2026 20:01:25 +0000
Manifest this update: Mon 09 Feb 2026 20:01:25 +0000
Manifest next update: Tue 10 Feb 2026 20:01:25 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: 3nNL0DGn0q3yUpnXs2p2dmGyXw2AEJ5NivXu0/98Nnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:9e:db:2f:f7:b6:f7:ae:f0:a3:9a:e8:97:a0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Feb 9 20:01:25 2026 GMT
Not After : Feb 10 20:01:25 2026 GMT
Subject: CN=be2123c99b9283f6db1221547dd9e7faeed50755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:e2:14:19:65:76:0f:80:e4:97:95:9a:1b:
e2:5a:28:eb:fa:8c:38:85:eb:f6:be:a0:15:71:08:
76:fc:cf:4b:3c:de:e7:2c:e4:d1:44:5f:d9:a5:9d:
94:dc:fc:ab:81:e5:7a:76:46:45:25:fc:f6:56:f1:
35:d5:49:d8:1e:d9:5f:5a:f3:50:b6:cd:06:ac:5b:
87:2c:fc:cf:ba:4e:62:ec:e1:c3:3b:c4:17:0d:f9:
eb:72:6a:f9:5f:1e:2a:13:aa:f3:a6:9f:36:e9:ef:
21:4e:3a:ed:46:87:bb:4b:b0:09:be:d7:d8:2f:c5:
5c:40:93:fd:68:89:61:33:3d:55:36:5f:24:5c:ae:
5c:be:1a:8b:65:6b:27:73:61:f0:97:cd:d5:ac:88:
c0:c0:58:fa:94:f4:c7:53:ba:9f:65:4c:02:ab:7e:
92:de:0d:be:d5:5b:73:ce:fc:73:09:00:39:20:2a:
4f:a1:7b:fa:bd:17:2f:d6:05:4c:99:c5:51:b4:64:
81:7d:57:05:67:44:84:5e:1b:ab:34:1a:70:3b:44:
87:68:40:4b:41:52:15:33:c4:c7:84:e0:40:59:77:
bd:a7:52:3f:1a:4d:4c:d3:f6:08:98:d2:54:66:b2:
28:db:2b:78:38:34:a0:b0:81:2a:9d:06:69:99:f3:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:23:C9:9B:92:83:F6:DB:12:21:54:7D:D9:E7:FA:EE:D5:07:55
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cd:01:94:70:03:2a:8e:fe:f2:f5:cf:8e:e8:c9:5b:86:6e:
46:74:06:a3:d5:33:2c:63:d6:30:df:b6:0b:26:9b:6a:88:71:
67:a2:bf:ee:a4:c2:de:fe:ca:30:86:3d:16:ef:53:7d:7e:bc:
3a:a9:18:c5:3e:bc:84:0d:bf:4c:19:f3:05:14:2d:cf:47:8f:
bc:4d:03:08:64:66:4f:8a:2c:00:f6:5b:ec:42:98:29:c0:38:
5a:a1:49:df:eb:99:2d:a9:35:47:a8:6b:78:9b:5c:da:5b:7e:
da:7e:ef:f0:f1:31:2c:ec:72:8d:1e:c7:6b:f5:0e:08:7a:5a:
9f:8e:df:47:ad:d7:6c:fe:7b:ce:d7:6e:36:9d:3c:36:d0:18:
73:db:3c:9c:fb:d7:ee:24:b3:6e:5b:5d:af:e7:a5:97:e8:d4:
bc:93:9b:fb:d4:7b:23:19:91:cf:33:c0:2b:09:85:26:ca:d0:
6f:f5:35:66:29:5a:6f:2f:4f:c6:30:6e:b8:88:c7:5a:22:97:
5d:2b:a8:91:1e:36:05:f8:e3:ae:83:b3:fe:4a:1f:c3:e6:ee:
fa:7d:5b:81:8a:b3:d2:d1:9c:be:da:9d:40:ce:32:88:31:ba:
ea:ce:2e:e8:c6:4e:14:02:cc:ea:27:75:cc:fd:12:c6:e4:ab:
6c:92:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:38:56 2026 by rpki-client