This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: XxsCEbCWz/NDS9ZkmxCVY9XPRZUrR9vH5IULH1YUvRM=
Subject key identifier: 20:46:61:98:B5:66:C6:AD:FF:CC:36:3A:94:01:3A:58:92:B6:57:68
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019C446C3DC05B6FEEFB8A2C32329E509A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 11D6
Signing time: Mon 09 Feb 2026 22:01:10 +0000
Manifest this update: Mon 09 Feb 2026 22:01:10 +0000
Manifest next update: Tue 10 Feb 2026 22:01:10 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: VzuUB5lQgHUCRdwo7skPVanxExcG2YHrUBsKHRn9et4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:3d:c0:5b:6f:ee:fb:8a:2c:32:32:9e:50:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Feb 9 22:01:10 2026 GMT
Not After : Feb 10 22:01:10 2026 GMT
Subject: CN=20466198b566c6adffcc363a94013a5892b65768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:46:71:5e:00:da:cc:70:ff:3c:cf:e4:b3:4b:
2f:b4:91:03:5f:6f:a8:0b:1a:da:8f:e4:bc:10:fd:
32:2f:65:9c:5b:d5:ff:92:fc:41:7e:6f:d1:86:99:
50:88:eb:8d:8b:e5:9d:4d:7c:64:a0:5f:e1:5f:72:
e0:30:37:a9:4b:76:fe:65:80:03:f4:7f:27:7f:c4:
37:fc:8d:1d:d5:00:e2:41:d9:cb:a3:af:d9:f4:29:
3d:68:ba:13:eb:0e:9e:eb:14:f0:c9:64:ce:e6:84:
cb:38:d8:7e:9f:8a:fa:a8:aa:40:e6:f6:f6:c5:de:
85:9c:95:5f:c9:ab:d0:86:76:ea:d4:ec:06:80:b0:
ee:dc:48:57:6d:fa:ba:59:ac:2e:7e:05:eb:77:46:
1e:b0:47:6c:a7:d4:4b:60:17:f3:46:ae:c3:db:cc:
5f:4a:76:53:7b:6e:20:02:7e:f2:15:7c:17:e0:fb:
fc:1f:1c:46:99:7f:1c:ad:fc:38:28:6d:fb:33:c7:
62:c7:10:46:b6:08:66:29:d0:63:9e:2c:d0:b8:0a:
e9:cc:c2:40:5e:91:87:cc:46:37:fa:ec:d4:39:c5:
19:fc:e4:10:10:cd:c9:20:f0:37:37:d7:d6:e0:73:
e0:6d:b2:53:60:b0:34:c2:94:b0:e7:b0:2c:a4:40:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:61:98:B5:66:C6:AD:FF:CC:36:3A:94:01:3A:58:92:B6:57:68
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:92:63:d0:61:aa:22:ad:7d:c0:7b:7d:54:2c:f9:97:75:
d4:b5:55:f6:f7:99:b7:be:59:f0:9f:b8:46:00:13:2d:91:fb:
f7:ce:34:db:87:63:c4:94:d3:6d:49:40:11:f6:a1:39:9e:bf:
b4:01:3b:3c:29:65:61:f8:2c:41:d5:f9:c0:fb:48:ca:64:b9:
e1:e4:4e:71:7b:3c:67:b3:6f:ba:2a:4b:86:17:6b:8e:5c:9d:
26:2c:77:c7:a0:10:58:fd:69:28:fe:08:29:9f:c6:62:c2:15:
af:ac:88:3e:a6:59:e5:36:71:cf:e1:f5:ce:dd:94:d2:f8:8d:
b8:43:6d:5b:75:71:46:c6:c8:2a:f7:1b:15:be:b8:63:89:c7:
21:33:9c:90:46:fd:27:b7:50:29:66:2b:c3:89:e7:c6:55:82:
72:aa:99:11:c7:72:7b:00:90:f3:31:78:b0:3f:e5:0c:bd:72:
7d:a4:b7:61:ed:b6:96:8b:0b:1d:a4:73:51:b8:f4:17:52:3f:
8f:ed:a7:d2:bf:6d:af:eb:25:43:bd:47:51:f5:87:91:c3:9e:
8e:41:40:47:44:97:ff:ba:d5:ca:4d:c0:a5:35:4f:16:85:ab:
cf:db:a0:ab:03:50:dc:40:e9:99:c9:1b:87:7e:06:f4:d2:e8:
c9:92:f8:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbD3AW2/u+4osMjKeUJpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3
ZTFlMTYwHhcNMjYwMjA5MjIwMTEwWhcNMjYwMjEwMjIwMTEwWjAzMTEwLwYDVQQD
EygyMDQ2NjE5OGI1NjZjNmFkZmZjYzM2M2E5NDAxM2E1ODkyYjY1NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EZxXgDazHD/PM/ks0svtJEDX2+o
Cxraj+S8EP0yL2WcW9X/kvxBfm/RhplQiOuNi+WdTXxkoF/hX3LgMDepS3b+ZYAD
9H8nf8Q3/I0d1QDiQdnLo6/Z9Ck9aLoT6w6e6xTwyWTO5oTLONh+n4r6qKpA5vb2
xd6FnJVfyavQhnbq1OwGgLDu3EhXbfq6WawufgXrd0YesEdsp9RLYBfzRq7D28xf
SnZTe24gAn7yFXwX4Pv8HxxGmX8crfw4KG37M8dixxBGtghmKdBjnizQuArpzMJA
XpGHzEY3+uzUOcUZ/OQQEM3JIPA3N9fW4HPgbbJTYLA0wpSw57AspEC13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBGYZi1Zsat/8w2OpQBOliStldoMB8GA1UdIwQY
MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt
OTRiNTE0NDMzYzExLzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx
LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaySY9Bh
qiKtfcB7fVQs+Zd11LVV9veZt75Z8J+4RgATLZH7984024djxJTTbUlAEfahOZ6/
tAE7PCllYfgsQdX5wPtIymS54eROcXs8Z7NvuipLhhdrjlydJix3x6AQWP1pKP4I
KZ/GYsIVr6yIPqZZ5TZxz+H1zt2U0viNuENtW3VxRsbIKvcbFb64Y4nHITOckEb9
J7dQKWYrw4nnxlWCcqqZEcdyewCQ8zF4sD/lDL1yfaS3Ye22losLHaRzUbj0F1I/
j+2n0r9tr+slQ71HUfWHkcOejkFAR0SX/7rVyk3ApTVPFoWrz9ugqwNQ3EDpmckb
h34G9NLoyZL4IQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:47 2026 by rpki-client