This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: HWIq4glNB0+/PwAo1yrjfW65hXIdyxk5w9IOaJqVd7c=
Subject key identifier: B7:0D:DC:C4:72:57:F0:EC:7B:1B:96:54:E8:04:19:1C:03:DA:B4:DE
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 019C1F15CD5CE1BC0E11C80DDE45525CF34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 04DF
Signing time: Mon 02 Feb 2026 16:00:48 +0000
Manifest this update: Mon 02 Feb 2026 16:00:48 +0000
Manifest next update: Tue 03 Feb 2026 16:00:48 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: kN6Q2yeFg6B+Ty+ZejRMEu4zeScMM+rgWPRM1tewXs8=)
2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=)
3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=)
4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 15:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:15:cd:5c:e1:bc:0e:11:c8:0d:de:45:52:5c:f3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Feb 2 16:00:48 2026 GMT
Not After : Feb 3 16:00:48 2026 GMT
Subject: CN=b70ddcc47257f0ec7b1b9654e804191c03dab4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:13:3a:39:61:ec:35:53:6b:42:e9:77:78:
3d:0c:2e:68:ce:dc:29:3c:8a:83:73:9e:8d:28:63:
41:d8:d6:4b:46:82:77:3d:ca:bb:c6:73:15:c0:ca:
05:7e:a2:29:8f:b3:d6:4d:a7:cb:90:81:9b:b9:cb:
55:db:61:2d:80:1d:fd:fe:2c:9a:31:fb:b0:75:47:
09:96:4b:03:0c:a5:42:ac:4e:ab:c2:b2:8c:e2:25:
1e:15:b4:98:f9:c1:af:bb:73:5f:9a:03:fc:e9:b8:
df:7e:0c:64:8e:8b:76:8f:1a:3f:38:eb:b1:09:f8:
c0:21:18:55:03:17:05:10:2f:c1:67:c8:54:16:34:
c5:72:0e:df:f5:58:ed:0b:86:f8:5a:29:a3:b2:6a:
7f:d5:19:e0:6c:11:f4:f2:a5:1d:6f:2c:40:9e:67:
53:5b:12:5c:3e:6b:b2:36:d2:8c:85:77:5d:fd:72:
1b:2d:87:83:58:f9:bb:8d:3d:e2:85:c6:6b:5d:32:
7f:d2:02:ad:12:14:e1:ce:33:87:0a:9f:f1:03:cb:
8d:6c:01:00:e8:aa:59:b4:23:77:f3:a4:0e:b2:f5:
f9:99:2b:2e:08:16:af:00:38:3e:0d:bc:33:6e:3a:
db:ab:af:3a:f3:c9:26:38:8c:60:bf:70:cd:9f:0b:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:DC:C4:72:57:F0:EC:7B:1B:96:54:E8:04:19:1C:03:DA:B4:DE
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:25:20:07:ca:cb:d9:59:e5:be:57:c9:78:56:35:65:89:3d:
18:bc:1a:ff:08:40:bd:cd:e7:03:f2:f3:1c:72:41:c5:f2:d9:
81:f5:1f:bf:8d:2a:97:af:5b:51:f6:f5:e6:26:f3:2f:cf:69:
3c:b4:ef:f7:56:bc:ce:9e:4d:c6:6e:44:b9:bf:8a:84:8f:e5:
47:b8:40:04:48:ca:d7:bd:68:00:35:4b:da:a8:16:68:6f:c4:
d5:9f:70:aa:b2:7e:13:ef:f7:82:2d:72:fe:1d:94:f0:fa:0d:
e9:29:25:66:c2:11:4d:7d:95:20:93:77:22:91:be:38:c9:c1:
13:53:98:9a:c6:fd:81:36:0d:2f:42:c1:80:24:17:6b:8f:07:
30:4f:37:3c:1a:7d:99:75:4b:6e:ed:da:cb:87:ab:24:1b:ca:
92:28:3c:d1:c2:c2:72:a5:c6:e1:3f:a4:4a:08:6b:c3:b5:68:
75:8a:f1:0f:b1:a0:32:67:a3:5b:1e:05:3e:d6:80:26:aa:f8:
d6:e3:2a:6b:32:e5:f6:0e:2b:72:cc:ad:2c:4b:93:15:7f:d6:
dc:97:77:73:4b:02:9c:5f:e3:c3:31:99:b9:16:b5:8e:b8:15:
66:38:b3:51:dd:a3:5b:ab:3c:eb:af:95:5f:53:a8:c6:95:b8:
07:d6:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:55:01 2026 by rpki-client