This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File: 8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier: edr0Wd/RGXrtGGpqClm4menHl+svTEq8t/2mcvLTcJY=
Subject key identifier: 56:E9:A3:F7:7F:FF:B0:13:2F:5B:AD:E1:2E:3C:4C:F5:DD:5E:1B:2A
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer: /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial: 019C43222E1D1F29F88A33BCC62866F06B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number: 0F70
Signing time: Mon 09 Feb 2026 16:00:39 +0000
Manifest this update: Mon 09 Feb 2026 16:00:39 +0000
Manifest next update: Tue 10 Feb 2026 16:00:39 +0000
Files and hashes: 1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: CLgWtvGl14Mi+zDtFD3B84jQHvKLVPROLt2+iwNokbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:2e:1d:1f:29:f8:8a:33:bc:c6:28:66:f0:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Validity
Not Before: Feb 9 16:00:39 2026 GMT
Not After : Feb 10 16:00:39 2026 GMT
Subject: CN=56e9a3f77fffb0132f5bade12e3c4cf5dd5e1b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:73:63:58:f0:7b:41:fd:08:56:be:e0:60:
46:21:a9:ad:84:45:cb:b6:38:b6:f5:2e:b2:26:b0:
6f:1d:18:2c:67:a1:02:85:84:c7:e8:99:07:7b:a0:
29:8f:2f:48:88:cd:4b:39:e7:cf:2e:03:5f:98:dd:
9f:ec:b6:9d:a3:c2:5d:2e:b7:25:bc:5b:c6:02:97:
f0:b2:67:72:1a:c9:74:f4:da:cc:85:ad:48:d9:03:
9f:eb:56:d0:cd:2c:12:4e:d9:d4:2e:4e:a5:69:8b:
00:0e:6b:8e:74:04:66:f2:18:30:38:bb:1d:38:4f:
c2:98:58:de:f9:68:88:49:c0:63:c4:c5:c8:e5:3a:
a1:57:5d:74:10:50:e3:5c:a8:0d:78:a6:5a:db:06:
6c:0a:1c:c1:3c:ba:3e:a0:1c:4f:fc:87:0f:7c:a1:
73:35:c4:d5:51:d6:cb:9d:b0:b7:0d:ba:38:e3:fa:
77:c5:7b:da:85:27:92:51:5a:3b:c4:47:4b:90:c1:
37:46:ae:9e:42:8d:ad:8c:1d:f7:62:8f:fb:53:58:
ed:33:cd:ed:23:b9:6e:5d:6c:8b:6b:d0:46:d0:37:
4a:77:8f:44:bd:6b:69:29:80:0c:4c:cd:82:27:68:
52:89:da:e1:c8:de:32:9c:02:bc:20:6e:9e:f5:d1:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:A3:F7:7F:FF:B0:13:2F:5B:AD:E1:2E:3C:4C:F5:DD:5E:1B:2A
X509v3 Authority Key Identifier:
keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:cc:9e:ca:a0:e1:c8:7f:72:ef:af:ef:19:ab:7a:75:03:
94:cc:a9:f9:26:57:43:93:96:27:40:8f:9b:25:08:85:e1:64:
c5:f6:81:46:b1:31:46:df:cb:46:ba:04:e4:07:ad:44:cf:9f:
05:16:62:55:29:20:a7:f5:1e:da:e8:a2:cd:ca:05:f9:d8:80:
3a:93:02:80:8b:97:27:01:15:95:64:8c:75:e4:89:cf:61:83:
77:8b:83:1e:fb:0c:f6:d8:cb:2b:0e:49:a8:5f:a9:07:ad:7e:
c9:34:77:a2:13:35:c9:b7:f8:06:ec:be:86:01:83:69:64:7c:
be:5d:89:64:a7:51:49:fb:66:1f:a6:ad:6b:f3:bb:d0:d4:6c:
b5:b5:23:fa:1d:87:91:c3:be:e4:e4:85:bb:fb:34:06:2a:61:
af:30:be:3b:44:d6:ae:eb:45:45:d2:b6:dd:0e:d6:d6:c6:43:
de:08:92:ba:2b:e9:c1:ce:a2:6a:05:89:dc:bd:23:2a:39:8e:
14:2c:ca:c7:65:93:96:78:2f:38:60:ac:6b:42:49:05:53:60:
fc:f0:68:1a:01:91:91:14:0f:9c:b7:c4:48:14:6b:c7:74:a5:
ff:21:21:9a:2f:1b:a3:32:4e:4f:07:43:c2:d9:bc:8c:6d:64:
99:02:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:27 2026 by rpki-client