This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File: 8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier: N3YHtoqy1qw7gUtQXP86GYHoZrJV48h8zyOBd6AnXJA=
Subject key identifier: 22:A8:18:60:0D:EE:4F:B9:7A:F8:23:3E:8A:C3:2B:9F:C7:3A:C4:75
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 019C427E08145065B1E033FAB19C07116E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number: 17DF
Signing time: Mon 09 Feb 2026 13:01:21 +0000
Manifest this update: Mon 09 Feb 2026 13:01:21 +0000
Manifest next update: Tue 10 Feb 2026 13:01:21 +0000
Files and hashes: 1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: +O6rd1DgKYb5TZX/iCvXK1ZJ30HFnoufCHR/XLGA4mA=)
2: 9vmezDMgMLAYgubj0dZwQBpw7Zo.roa (hash: QLo0rxDXf9m7rqbC9zynXdEyUGpcYsQ8wFalcr82vIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:08:14:50:65:b1:e0:33:fa:b1:9c:07:11:6e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Feb 9 13:01:21 2026 GMT
Not After : Feb 10 13:01:21 2026 GMT
Subject: CN=22a818600dee4fb97af8233e8ac32b9fc73ac475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:f6:c6:87:9c:b4:84:a6:0c:24:54:77:4f:
f4:24:cd:7e:60:b7:82:d0:96:05:7d:37:31:cf:c5:
af:9b:55:da:dd:1d:65:3e:3b:96:b7:3b:da:51:14:
c7:b4:f6:d7:3d:51:e5:a7:2b:dc:2e:ca:6f:31:73:
27:36:48:b8:28:f9:6a:ea:25:5c:0f:d4:0e:54:de:
eb:3b:f1:7d:8f:89:8b:fa:a4:2d:4b:59:95:90:17:
6d:76:7e:0d:30:75:7b:a9:8f:ae:f4:1d:ea:5d:48:
33:eb:23:f2:e2:96:f2:34:e1:86:40:19:9b:e0:97:
3d:58:44:35:aa:a9:8f:91:da:cd:5a:e4:ac:6e:4a:
06:0a:ee:9b:c8:14:df:4f:cc:8f:0d:b1:85:89:f1:
6b:cb:98:9a:5d:06:0e:47:8d:e6:86:4a:fe:15:b1:
e0:b3:de:17:49:4d:d1:8e:5b:ab:a3:c6:8f:dd:a8:
ce:f9:f1:e2:5f:d8:96:74:6b:f6:c5:d9:32:41:f6:
d3:ce:4a:f8:32:fc:1e:b5:34:48:6a:df:ba:a7:dc:
3c:c5:a8:82:de:c1:db:a9:bb:e2:b3:d6:bb:12:90:
45:ef:6c:36:44:d2:8c:ba:d7:4b:23:80:a2:7c:c5:
a1:24:87:62:4d:f0:fd:49:4c:36:01:cd:25:52:ba:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:18:60:0D:EE:4F:B9:7A:F8:23:3E:8A:C3:2B:9F:C7:3A:C4:75
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:02:62:87:27:68:1c:5e:3f:dd:5c:44:b7:f4:ba:2b:17:e2:
b8:4a:47:fb:b6:6b:27:3e:d4:72:1e:ac:b7:88:1b:0e:e7:d4:
c3:b9:79:22:35:84:38:08:46:dd:48:6a:14:4d:cc:8e:1b:f5:
17:73:b3:85:e1:ef:6a:c6:3b:25:4e:23:07:c0:12:7b:13:89:
3d:55:85:1a:26:b5:6a:b6:9f:c1:bc:e6:e2:51:95:61:9b:5b:
b3:e9:85:82:6e:64:0d:44:48:02:c8:b7:4d:a1:80:bd:3f:2b:
6b:0d:df:2d:61:ba:1c:44:56:85:05:de:bd:61:23:26:3e:42:
89:39:5d:93:b5:96:15:d1:46:be:32:07:ff:4c:3a:91:46:fb:
7f:09:17:75:96:47:35:a6:9a:f7:da:5a:f4:2b:40:bd:d8:42:
12:ca:b5:da:29:28:e6:e1:47:e5:01:df:94:73:cb:9c:80:cd:
6a:ee:e5:dd:4b:21:01:9b:a0:ee:35:8e:7e:a5:64:04:fb:af:
84:0d:10:ef:53:82:55:ae:fa:a7:74:66:08:ed:d1:27:69:e8:
19:61:af:8f:81:c0:d2:f7:b2:a1:48:1b:f4:f1:69:4b:cb:fc:
86:67:a2:0b:a0:0c:ad:4d:63:bf:43:f0:dd:b7:e9:3f:0b:31:
f7:5b:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:47 2026 by rpki-client