This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: IyFSxzB1RYRIcNfbOMdJm182y1rRocfbtRpMvHABDGU=
Subject key identifier: E1:CA:4A:59:0A:30:8A:2D:36:03:04:C1:CC:89:39:E9:48:6C:E4:67
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019BFA9BCAB49FCBECADDAD837B450338BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 13D6
Signing time: Mon 26 Jan 2026 14:01:12 +0000
Manifest this update: Mon 26 Jan 2026 14:01:12 +0000
Manifest next update: Tue 27 Jan 2026 14:01:12 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: q4qr8LYXfW0GfHZmMv4kt4gCSIgIzrNjBMdXNoMeouk=)
2: BM26WSHmDXrBxfTRXw9OBN2bB5k.roa (hash: eTiUZXSOWwdAMhtFe/lHUOC73ALIZLmrUjbnWfXVaNc=)
3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
4: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
5: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
6: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
7: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
8: eeTRJICIDgN4JkjWbGf7_URm99g.roa (hash: mj84Q1Duee66N33HSly1ihLOIjdwFTJC4fdawSWCPqQ=)
9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9b:ca:b4:9f:cb:ec:ad:da:d8:37:b4:50:33:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 26 14:01:12 2026 GMT
Not After : Jan 27 14:01:12 2026 GMT
Subject: CN=e1ca4a590a308a2d360304c1cc8939e9486ce467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:6a:09:38:22:48:25:78:7b:c2:50:6e:43:
ae:01:cc:52:e3:e7:0d:eb:fa:a3:23:45:81:87:f2:
77:38:e6:e8:de:25:d6:f3:03:c4:02:7b:be:e6:31:
27:29:a8:41:0f:9f:29:4f:6b:70:28:bc:3e:e0:ee:
fd:b0:c3:1b:6e:72:69:e6:8c:ba:70:16:ca:60:2c:
84:c8:a7:c5:a3:71:4d:45:4a:19:56:41:68:62:2a:
7d:34:ce:e4:0e:8a:d4:24:7a:3d:6d:2a:fa:0d:ee:
dd:2f:5d:21:7c:fd:28:bd:39:d0:22:2f:38:cd:43:
7e:9b:ba:a1:50:ad:d9:f0:b6:d6:2c:58:bd:10:30:
90:3f:9f:86:71:ab:1a:83:81:2a:55:53:2d:e9:24:
94:60:21:94:ee:ef:6d:ec:13:87:cb:50:04:25:a4:
db:22:3d:64:2a:51:f2:38:ac:b6:26:1b:cb:64:0e:
71:c2:8a:da:f9:3f:bb:d2:6d:48:c7:78:de:4d:46:
7d:6f:26:c0:2b:9a:15:13:8a:67:db:2b:2c:a9:88:
b6:bb:35:b7:24:45:50:3d:5c:e2:99:ed:61:b9:41:
30:dc:a4:fc:e1:44:12:91:9b:14:17:5b:a1:c6:f9:
f7:aa:ce:1a:ea:02:dc:f3:76:34:6b:9d:83:ef:9e:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CA:4A:59:0A:30:8A:2D:36:03:04:C1:CC:89:39:E9:48:6C:E4:67
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:99:4b:9e:90:cd:45:c7:40:d4:61:65:bf:56:74:5c:6e:d7:
87:3a:09:3d:75:a5:9c:62:d9:c6:25:64:e3:b1:6a:51:ef:47:
53:5f:5e:19:2b:07:af:44:b2:ae:90:0f:ee:ce:b2:9c:92:2e:
c6:28:e6:43:35:41:e3:9f:6d:cf:d2:39:de:bf:91:7c:6f:19:
57:29:12:e9:e3:1d:47:31:f3:28:6b:91:40:14:f9:81:5c:2e:
47:23:fa:63:88:5e:df:6d:82:30:f6:19:d7:4a:54:fb:e1:2d:
a2:a5:18:19:06:b9:11:03:f5:ae:94:6f:96:04:0c:dc:ca:d7:
09:a0:0c:9d:31:0c:fa:32:81:8c:b4:67:ab:aa:16:c6:45:86:
8e:39:6e:1c:60:ad:58:94:c2:4e:4f:0f:0e:38:f3:ca:be:0b:
1a:f4:21:53:d0:31:1e:17:9f:ce:2e:88:e8:0f:3f:95:1c:59:
22:ca:43:00:c5:e0:01:99:f5:e3:78:49:d7:da:e9:b7:d8:19:
b7:46:de:61:4b:ff:7c:14:15:ea:69:a4:50:87:1f:17:dd:92:
00:d4:fb:9b:24:ff:81:f5:e0:72:54:af:af:48:02:cf:54:ce:
3f:c5:7f:a6:a1:03:9a:f4:7a:b3:56:11:7e:70:7b:ea:8b:4b:
20:8f:bd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6m8q0n8vsrdrYN7RQM4vUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjYwMTI2MTQwMTEyWhcNMjYwMTI3MTQwMTEyWjAzMTEwLwYDVQQD
EyhlMWNhNGE1OTBhMzA4YTJkMzYwMzA0YzFjYzg5MzllOTQ4NmNlNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4lqCTgiSCV4e8JQbkOuAcxS4+cN
6/qjI0WBh/J3OObo3iXW8wPEAnu+5jEnKahBD58pT2twKLw+4O79sMMbbnJp5oy6
cBbKYCyEyKfFo3FNRUoZVkFoYip9NM7kDorUJHo9bSr6De7dL10hfP0ovTnQIi84
zUN+m7qhUK3Z8LbWLFi9EDCQP5+Gcasag4EqVVMt6SSUYCGU7u9t7BOHy1AEJaTb
Ij1kKlHyOKy2JhvLZA5xwora+T+70m1Ix3jeTUZ9bybAK5oVE4pn2yssqYi2uzW3
JEVQPVzime1huUEw3KT84UQSkZsUF1uhxvn3qs4a6gLc83Y0a52D756y5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHKSlkKMIotNgMEwcyJOelIbORnMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJlLnpDN
RcdA1GFlv1Z0XG7XhzoJPXWlnGLZxiVk47FqUe9HU19eGSsHr0SyrpAP7s6ynJIu
xijmQzVB459tz9I53r+RfG8ZVykS6eMdRzHzKGuRQBT5gVwuRyP6Y4he322CMPYZ
10pU++EtoqUYGQa5EQP1rpRvlgQM3MrXCaAMnTEM+jKBjLRnq6oWxkWGjjluHGCt
WJTCTk8PDjjzyr4LGvQhU9AxHhefzi6I6A8/lRxZIspDAMXgAZn143hJ19rpt9gZ
t0beYUv/fBQV6mmkUIcfF92SANT7myT/gfXgclSvr0gCz1TOP8V/pqEDmvR6s1YR
fnB76otLII+9og==
-----END CERTIFICATE-----
Generated at Mon Jan 26 22:39:24 2026 by rpki-client