This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: mRssJq5rpJ+QLiHz7HAVJFU37u3gnQvJn4IQ+J8Gy5A=
Subject key identifier: 5C:69:68:75:06:50:97:4E:4B:23:05:9A:F9:67:0C:06:BA:5D:0E:AA
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019C438FD18A7DEF3A908C8D318BBBDD2BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1392
Signing time: Mon 09 Feb 2026 18:00:24 +0000
Manifest this update: Mon 09 Feb 2026 18:00:24 +0000
Manifest next update: Tue 10 Feb 2026 18:00:24 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: PXySaIIVDaLfWV0y+n4rWa3h+mQyiO0k+ivXyJOzCs4=)
2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d1:8a:7d:ef:3a:90:8c:8d:31:8b:bb:dd:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Feb 9 18:00:24 2026 GMT
Not After : Feb 10 18:00:24 2026 GMT
Subject: CN=5c6968750650974e4b23059af9670c06ba5d0eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:35:d8:32:9a:b9:59:e2:1f:79:d1:27:09:
22:33:94:68:2d:cf:ac:97:1c:8a:ec:58:ab:b0:5a:
e0:42:3d:4f:39:d7:16:dc:f7:d6:00:94:6f:8d:4c:
36:96:af:54:02:d4:54:81:c3:3d:51:de:68:81:09:
23:fe:fa:61:2b:8e:a5:76:95:62:03:33:93:d9:59:
2a:76:fe:14:5d:63:d2:c8:de:ab:f0:b9:df:65:c8:
1a:0c:c3:02:b9:07:f2:33:e7:1b:2f:05:ea:e9:1d:
ba:36:d5:96:ba:96:02:06:82:9c:3d:f5:bd:50:1c:
8f:37:e5:d9:8f:03:59:a2:e8:35:cb:d4:82:cd:1c:
32:06:47:ee:bb:aa:42:39:52:8f:3f:fd:a1:a8:94:
e2:b2:00:99:58:e6:48:5a:bf:44:4d:22:b5:08:d9:
a0:36:47:95:55:d5:ae:cf:79:a2:09:50:f0:95:48:
b6:f0:62:3b:56:8c:8b:cf:a0:23:b0:31:81:77:48:
ff:5d:46:47:ab:9d:d4:0d:dd:1f:39:47:ad:47:d6:
2e:58:7a:06:b1:5a:44:80:69:50:2b:e5:d7:7d:f4:
bd:3c:cd:83:03:79:6a:d6:28:4e:7e:5e:21:1a:df:
b4:7b:02:86:fa:69:e8:81:7d:9a:27:a3:be:23:21:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:68:75:06:50:97:4E:4B:23:05:9A:F9:67:0C:06:BA:5D:0E:AA
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:1a:6f:e1:94:ce:ad:01:ee:c9:56:e6:39:00:6e:03:31:
fd:9f:b0:47:f1:a1:40:00:19:07:68:f4:2b:3e:c8:bd:bd:a7:
42:ea:35:b7:2e:67:21:85:dd:7f:a2:a3:c8:b2:94:13:5a:46:
84:19:53:12:70:3e:e6:d2:18:f2:e8:66:17:96:d6:22:05:f6:
07:a0:e3:fe:dd:94:b5:67:0a:99:68:a8:fd:50:4b:e3:05:0e:
76:ee:b6:a7:e9:b7:b7:b4:03:4d:bc:e4:50:2b:d9:ea:d5:39:
83:ef:94:b4:ec:22:50:6b:0b:86:f6:6d:48:10:fa:68:5a:f7:
2f:8f:d4:d6:05:80:da:89:7a:35:4f:e0:17:c6:f8:d2:50:87:
4b:df:f3:f0:fb:d8:f0:7b:b4:d8:9e:51:e4:85:c0:03:41:f8:
5e:14:9e:c2:9e:2f:87:e4:61:81:39:a7:6b:45:24:24:dd:3c:
e8:99:5a:bc:8f:1d:47:71:5b:c9:41:b3:e2:b4:01:d2:64:65:
14:75:5c:ea:0b:0a:5e:32:70:60:db:6e:e8:c3:34:d6:5c:3b:
49:52:b3:b1:88:d9:5f:69:cd:1c:43:b4:e1:29:32:ff:cd:12:
5e:8f:5f:7d:4c:c2:66:16:ef:0e:25:62:e3:45:72:bb:97:87:
3f:71:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:06 2026 by rpki-client