This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: zn2ptXVqnGf1T5Ngg08S0vv95ye/ZNVQoIXJE21/Jog=
Subject key identifier: 05:0F:E7:1E:AE:16:34:94:9D:E6:B1:34:BA:0F:3C:CC:0F:3F:99:3D
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019C43FE16D7BF2A6D58CF35C29B7AF6B09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 20:00:51 +0000
Manifest this update: Mon 09 Feb 2026 20:00:51 +0000
Manifest next update: Tue 10 Feb 2026 20:00:51 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: jwiHAxJUU/RbIrErsu4sgQjqkLZuhZSIwqBFHgiax9Y=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:16:d7:bf:2a:6d:58:cf:35:c2:9b:7a:f6:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Feb 9 20:00:51 2026 GMT
Not After : Feb 10 20:00:51 2026 GMT
Subject: CN=050fe71eae1634949de6b134ba0f3ccc0f3f993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:a1:b9:db:66:a6:c7:59:f4:9d:93:db:8b:
cf:22:4a:3e:4f:6d:be:c7:7c:92:55:8f:85:8e:c8:
59:f2:94:45:57:b6:59:bc:84:24:fb:2e:30:9f:e3:
f5:0b:62:52:2a:e9:85:c9:6b:b4:cf:4f:26:ba:0c:
69:a9:57:05:91:d7:13:56:27:1f:07:e1:d2:ec:67:
61:7f:41:ac:15:96:c1:ca:57:f9:7b:af:2a:87:eb:
7e:bb:48:79:39:a5:b8:1f:0b:b0:b4:65:5c:9d:c3:
02:0a:aa:fd:81:c9:3b:98:5d:f5:c4:e0:3d:85:d4:
b8:ff:4a:eb:1a:ab:f7:a8:04:2e:e6:7a:dd:dc:c3:
a8:c6:aa:78:6a:66:51:21:54:56:f4:9e:13:2e:f3:
9a:bf:c0:76:66:f7:ac:e1:31:a7:b2:bc:72:d4:4d:
81:87:95:bc:22:c9:00:31:5e:ca:93:df:fd:18:68:
45:a7:4a:7f:a9:01:12:95:78:44:34:7f:04:32:f6:
96:51:da:15:f8:d4:23:be:60:04:46:09:f5:96:17:
45:20:f3:e1:5a:56:5e:c5:21:ac:e3:bf:cc:3d:51:
3f:c5:36:22:96:c3:8e:a6:a5:ab:21:fb:01:39:4c:
86:d9:d7:7a:e5:24:7e:12:cb:67:a1:05:42:b2:20:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:E7:1E:AE:16:34:94:9D:E6:B1:34:BA:0F:3C:CC:0F:3F:99:3D
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:06:b3:b6:13:e7:77:c0:81:b8:d6:40:4b:06:de:22:de:ce:
fa:8c:71:fe:69:93:57:62:5f:34:58:3a:21:12:82:bd:1c:61:
2b:f5:ed:38:5f:f2:ff:ff:73:a5:0e:c9:4c:bf:72:88:89:10:
75:76:46:c4:82:29:bd:a7:79:d1:17:0c:8e:f1:29:9b:64:6c:
27:a1:01:72:7a:06:10:d6:c6:47:61:00:57:9a:d1:82:ca:d4:
bc:10:eb:25:2c:2f:fe:28:b2:04:fd:6c:40:72:68:ae:0d:33:
b8:77:eb:2a:60:2e:9d:64:16:89:2c:5f:e5:9b:ac:7b:38:50:
e8:76:47:e9:b3:d0:bd:f4:5f:81:9e:73:66:fb:52:03:3d:60:
11:b1:39:3e:9a:35:bf:f1:f5:cf:bb:2e:e0:c2:ab:1d:5c:18:
c0:28:ba:42:fb:80:d2:43:77:17:9b:65:fb:ea:08:a2:2a:3b:
a9:f8:72:ea:f3:ae:e1:04:1c:09:80:12:cf:95:6b:92:9c:06:
93:43:aa:61:93:c8:7b:36:bf:e0:a3:eb:bc:21:86:10:7a:af:
fc:28:ea:a1:41:31:76:46:b2:f6:4e:bc:91:ae:a9:f7:29:58:
b5:32:50:1f:47:a8:0c:11:40:13:09:17:30:46:d2:5a:fa:3a:
f2:63:ce:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/hbXvyptWM81wpt69rCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi
NWQzZjIwHhcNMjYwMjA5MjAwMDUxWhcNMjYwMjEwMjAwMDUxWjAzMTEwLwYDVQQD
EygwNTBmZTcxZWFlMTYzNDk0OWRlNmIxMzRiYTBmM2NjYzBmM2Y5OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp6hudtmpsdZ9J2T24vPIko+T22+
x3ySVY+FjshZ8pRFV7ZZvIQk+y4wn+P1C2JSKumFyWu0z08mugxpqVcFkdcTVicf
B+HS7Gdhf0GsFZbBylf5e68qh+t+u0h5OaW4HwuwtGVcncMCCqr9gck7mF31xOA9
hdS4/0rrGqv3qAQu5nrd3MOoxqp4amZRIVRW9J4TLvOav8B2Zves4TGnsrxy1E2B
h5W8IskAMV7Kk9/9GGhFp0p/qQESlXhENH8EMvaWUdoV+NQjvmAERgn1lhdFIPPh
WlZexSGs47/MPVE/xTYilsOOpqWrIfsBOUyG2dd65SR+EstnoQVCsiCMiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUP5x6uFjSUneaxNLoPPMwPP5k9MB8GA1UdIwQY
MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt
NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz
LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQazthPn
d8CBuNZASwbeIt7O+oxx/mmTV2JfNFg6IRKCvRxhK/XtOF/y//9zpQ7JTL9yiIkQ
dXZGxIIpvad50RcMjvEpm2RsJ6EBcnoGENbGR2EAV5rRgsrUvBDrJSwv/iiyBP1s
QHJorg0zuHfrKmAunWQWiSxf5ZusezhQ6HZH6bPQvfRfgZ5zZvtSAz1gEbE5Ppo1
v/H1z7su4MKrHVwYwCi6QvuA0kN3F5tl++oIoio7qfhy6vOu4QQcCYASz5VrkpwG
k0OqYZPIeza/4KPrvCGGEHqv/CjqoUExdkay9k68ka6p9ylYtTJQH0eoDBFAEwkX
MEbSWvo68mPOEg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:54 2026 by rpki-client