This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: b1KsoxEFea5WcT+xMQ8ccqbgtzkDysc4io6/F1hzxe4=
Subject key identifier: F3:CF:94:71:DE:BE:3C:D6:1F:09:D6:9A:35:F7:76:43:D3:52:EF:89
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019C41A1E59D744CEB3C01279C6F6DC29DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 09:00:54 +0000
Manifest this update: Mon 09 Feb 2026 09:00:54 +0000
Manifest next update: Tue 10 Feb 2026 09:00:54 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: UI9zWMrborlTGEY9T2Ei1y3v7PqrwGAsN/YER5hoKps=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:e5:9d:74:4c:eb:3c:01:27:9c:6f:6d:c2:9d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Feb 9 09:00:54 2026 GMT
Not After : Feb 10 09:00:54 2026 GMT
Subject: CN=f3cf9471debe3cd61f09d69a35f77643d352ef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:e0:dd:79:22:7c:c6:81:3e:70:ca:7e:d7:
bf:98:5d:c4:4c:b6:cf:d7:b2:04:05:92:7b:e5:e0:
dc:39:c8:85:5b:0c:e5:eb:c4:ec:77:4f:09:5b:bd:
9d:e8:eb:b6:d3:c2:4f:05:c3:9a:6e:9f:9c:19:36:
8e:cb:09:37:1e:fe:5e:06:9c:9d:34:2e:3e:80:82:
70:a4:06:f4:01:0c:8e:3c:c7:37:f4:5d:f3:68:bd:
ee:c9:33:41:78:ef:70:ca:8a:a8:9f:c9:7f:2e:2a:
02:b1:2c:f2:f9:d9:41:dc:ad:7b:b2:3d:24:b2:9b:
49:ef:42:6b:cc:ba:e2:88:b1:e8:f1:97:89:f1:53:
b2:24:10:33:e7:28:63:56:ab:b2:2e:0f:2a:93:65:
21:f3:9b:06:6e:59:8e:ac:5c:e7:c9:1b:c9:79:f7:
68:b4:f5:73:1c:ea:c1:c5:bc:71:fb:82:9c:97:c8:
fc:bb:16:36:ca:1e:d7:ea:9e:18:78:b1:32:a1:2b:
4c:1f:19:54:c9:84:e2:24:3f:28:4f:57:44:19:96:
c6:45:0c:ca:af:95:63:24:85:47:cc:29:88:a0:93:
b9:19:82:69:ed:60:7e:6e:9f:3b:99:a8:8f:d0:d5:
8a:25:56:c6:3a:91:6e:75:ba:0b:df:e6:3a:89:3c:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CF:94:71:DE:BE:3C:D6:1F:09:D6:9A:35:F7:76:43:D3:52:EF:89
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:2a:fc:8e:1a:81:2f:26:1c:76:49:33:3e:ab:61:ae:dd:
51:5c:0a:c8:6d:9f:35:16:ab:d2:c7:0d:f4:36:ff:e2:c1:c6:
0b:c2:b8:ff:ba:da:0f:c4:30:3f:99:60:71:84:57:be:2d:13:
06:f7:da:6d:48:0f:5d:16:dc:63:c1:c5:88:24:2e:bc:b0:8c:
d1:6c:07:67:14:43:83:06:a1:fc:17:c4:a8:fd:ef:4c:2a:a9:
65:08:6a:2f:43:02:48:e6:53:5a:0e:48:27:39:0f:94:9a:c9:
eb:f9:87:1e:1d:17:bb:51:00:1d:78:91:92:eb:60:f4:2f:46:
b4:11:e6:09:26:c0:57:27:98:68:b8:d0:86:e4:9c:b1:67:89:
27:17:66:d4:5d:e2:e7:bc:de:21:1c:a3:df:48:75:81:e9:fc:
c9:fd:eb:88:e4:2b:3e:37:1d:36:71:f9:a8:4b:96:14:9a:42:
b2:7a:64:50:42:83:a5:7a:96:0c:2c:20:37:75:23:fe:26:7f:
dd:44:2c:89:47:bc:a6:bf:41:28:ff:dc:d4:0b:30:b1:13:6e:
52:fa:db:d4:c2:8b:b3:61:cd:3e:fa:90:59:7d:00:4f:b2:f2:
0c:b2:8a:d1:27:9f:09:d1:83:b9:98:c0:8b:d6:f2:01:03:b6:
6d:a6:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:32 2026 by rpki-client