This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: 5USIcy7oOAUqraPrOTazQpBxZ4tl1wkCShk++cJGmvA=
Subject key identifier: 8A:92:EC:9D:34:BE:D7:00:20:94:E3:65:AA:4C:C2:B8:48:71:6A:91
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019C43591F76495CEE5579F886677965154A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 0815
Signing time: Mon 09 Feb 2026 17:00:40 +0000
Manifest this update: Mon 09 Feb 2026 17:00:40 +0000
Manifest next update: Tue 10 Feb 2026 17:00:40 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
3: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: vJWM3bdl98+WolB3pv6nn+flM4w/9c9Afyowz88x2Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:1f:76:49:5c:ee:55:79:f8:86:67:79:65:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Feb 9 17:00:40 2026 GMT
Not After : Feb 10 17:00:40 2026 GMT
Subject: CN=8a92ec9d34bed7002094e365aa4cc2b848716a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:b9:5f:3a:8f:1d:05:f9:b4:a6:42:d5:f2:
08:56:2e:a4:21:f1:a1:bc:f2:a6:10:92:61:b7:dc:
98:d4:24:1c:30:be:8e:6f:8c:48:c9:b7:48:08:d2:
80:70:c2:dd:b4:8e:4a:a9:94:5d:14:a9:a4:41:70:
67:6c:38:d8:c5:9a:66:39:2c:d7:b5:9e:88:db:71:
fb:96:c8:47:0f:69:aa:a3:28:02:61:dd:a1:4b:3f:
46:7d:02:d0:12:86:8e:e6:ed:f4:ee:99:2b:ef:69:
85:a6:fe:00:42:3c:10:6e:6c:b8:29:43:60:83:c0:
d3:6c:05:95:37:f9:51:41:fb:94:be:c6:18:71:70:
ca:63:ea:d3:8f:41:d9:27:85:30:d6:f3:2d:14:8e:
3b:23:15:26:be:5e:38:19:e5:b1:e8:f1:fd:9b:28:
f7:47:30:6d:02:95:0c:13:71:eb:dd:06:77:14:8b:
41:98:1b:44:b9:3a:6e:8b:97:18:cd:1e:b7:6d:fd:
f3:39:ba:65:52:25:9e:7e:23:f2:16:89:3a:05:5c:
f3:17:4d:b4:3c:45:61:de:9e:c5:9a:0b:d3:ee:0c:
5d:16:53:5a:6c:6b:23:e0:80:08:72:18:57:5d:c9:
47:88:53:34:9b:49:c2:4d:c8:12:f9:ca:87:50:cf:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:EC:9D:34:BE:D7:00:20:94:E3:65:AA:4C:C2:B8:48:71:6A:91
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:6f:d4:cc:54:fd:e6:73:f8:09:63:be:fd:fa:32:22:62:97:
99:ce:84:84:66:ae:19:10:ef:38:35:04:92:6e:17:0e:0a:a8:
17:15:ae:c0:88:06:18:0d:e2:ff:58:3d:36:13:5e:a0:83:91:
12:c4:bf:a5:d0:a1:94:1a:e1:f3:0b:05:c4:b5:56:96:bc:56:
86:34:49:4b:01:97:dd:49:01:2e:2e:34:91:08:43:9d:2d:0f:
ed:2b:91:12:0b:13:d2:17:a5:4f:9a:83:c2:c2:4b:6f:7b:8d:
42:31:44:aa:53:fa:46:99:47:93:65:90:22:91:09:72:86:1d:
e5:84:f2:ce:28:a0:3e:7d:e2:4a:6f:6b:fb:9a:85:19:c3:25:
cd:6a:69:16:b0:f2:23:40:2c:eb:2c:db:eb:12:d7:13:76:d1:
a8:75:1c:5b:57:3c:53:61:fb:0e:0d:14:e2:b4:13:d9:0b:e3:
85:32:18:a1:56:84:d0:a2:08:20:c5:7b:b1:8f:e4:cf:4e:70:
28:6d:af:2a:ba:ae:79:b6:ca:dd:fd:e2:d0:19:0b:9a:8c:6d:
77:8e:4c:1f:03:18:17:dc:5d:24:7d:12:04:e4:b3:36:ae:49:
66:26:5f:30:84:5e:48:b1:a1:da:25:2a:ba:20:61:93:9e:8e:
34:a0:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:04 2026 by rpki-client