This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: kKX5KffdhMH9PoqdmZpOuMz3ZznIYPCfiSKIbX2vzA8=
Subject key identifier: 60:27:08:16:D5:DC:F1:61:97:00:C1:90:02:61:C4:E3:A3:86:86:40
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019C42EB92263371BB9CEBE968FFDCA9A256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 15:01:00 +0000
Manifest this update: Mon 09 Feb 2026 15:01:00 +0000
Manifest next update: Tue 10 Feb 2026 15:01:00 +0000
Files and hashes: 1: EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa (hash: 2NqTeKgydYUb/eDxmxXBdOU0et+RFyYo7oibb0+harQ=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: pDNd2YKS1MTH8Oe3tiqTB1cKo4saZrGb/xrg74ryXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:92:26:33:71:bb:9c:eb:e9:68:ff:dc:a9:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Feb 9 15:01:00 2026 GMT
Not After : Feb 10 15:01:00 2026 GMT
Subject: CN=60270816d5dcf1619700c1900261c4e3a3868640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:fa:7c:e2:0b:e0:cf:e3:42:d8:b0:c2:cf:
0d:a7:28:83:ef:16:c8:7e:fd:47:d9:fd:72:95:ad:
8d:a8:e9:c5:b7:24:3a:6c:84:d3:a0:9c:2d:40:07:
32:98:de:41:e2:82:91:7c:fa:7f:33:d1:cc:5f:90:
9a:a6:3a:3c:42:10:7e:11:23:1a:e6:52:21:cb:e5:
5b:40:b4:56:6d:fa:a5:b5:54:69:2a:e0:e5:2a:24:
4b:4f:75:95:f0:79:89:79:9e:4f:c5:fc:cd:e8:17:
45:f3:d9:d3:7c:96:4f:68:6f:17:c1:2a:c3:96:b1:
01:0d:9d:05:2c:c7:59:d6:ea:fe:69:ac:cb:04:96:
de:61:20:3c:50:13:a5:71:b6:f6:b6:b2:94:84:eb:
f3:0b:9e:cf:f6:32:a8:3d:d4:bb:c0:5d:f4:9c:47:
b0:d6:78:e6:c3:ad:29:44:16:a3:3f:91:0f:ba:d2:
b7:cf:df:ed:d1:ff:a0:a4:22:22:1c:e7:fe:89:05:
e1:6e:35:b9:d0:f6:62:e3:a3:54:36:3d:9e:ef:01:
95:38:72:22:4c:7d:87:44:21:c3:f1:2f:c8:df:fc:
99:78:65:b4:1f:ab:0b:f1:93:91:9b:a3:3c:84:68:
89:9e:fb:d7:e8:78:96:77:3a:28:df:79:de:85:49:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:08:16:D5:DC:F1:61:97:00:C1:90:02:61:C4:E3:A3:86:86:40
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:3a:17:2b:5b:65:ec:b8:55:e3:e6:73:65:77:38:83:41:
9d:37:02:9d:78:f8:fa:0b:60:d3:9e:35:38:52:6e:d1:3b:0b:
33:3b:d9:a4:34:67:c9:81:29:44:b7:a2:7c:67:79:f4:d8:91:
b4:b8:78:59:da:4b:27:5a:8f:db:c1:79:3c:17:9a:cb:67:89:
4e:ba:94:f1:4e:68:b1:d8:a9:43:a7:4f:ee:d7:f0:8e:35:41:
3d:63:b8:58:96:a1:59:dc:7c:ba:e4:65:70:1a:57:4b:4c:8f:
46:4e:75:2c:9b:35:94:4e:52:d1:56:21:43:c2:b1:1e:c6:f0:
f5:be:0c:88:26:b0:6e:d0:c3:58:6c:84:f7:51:32:bf:53:1f:
11:1e:21:f9:7f:ed:ff:a5:9d:ca:e6:46:d3:dc:a9:ef:a2:28:
00:15:4b:c9:92:d6:3f:2a:79:75:16:6b:bb:35:dc:e9:45:c2:
48:8d:14:26:3c:89:34:3b:00:14:8d:fe:bb:ba:d0:98:38:5b:
57:65:34:ae:c1:d5:f9:32:b6:1f:16:8a:a3:77:d9:b0:54:cd:
39:26:ce:38:80:a5:a0:ed:43:32:d6:66:27:94:2d:ee:52:36:
2d:0f:40:92:6b:52:4b:66:ce:5b:e8:31:f3:84:29:c9:00:bf:
cb:c8:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:21 2026 by rpki-client