This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
File: i8EWjaFgICh-6h_eygVBkwqdNok.mft (raw, json)
Hash identifier: pupT5NSt6N8S2R/n7/XVh7md7TsApiYgFuVJHezXHX0=
Subject key identifier: 3A:C7:EE:02:2A:7A:4C:C5:2B:DB:EC:0C:0A:1A:39:F0:43:63:82:AE
Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689
Certificate serial: 019C427D736DBD991485941F00B3C99F36CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
Manifest number: 0494
Signing time: Mon 09 Feb 2026 13:00:43 +0000
Manifest this update: Mon 09 Feb 2026 13:00:43 +0000
Manifest next update: Tue 10 Feb 2026 13:00:43 +0000
Files and hashes: 1: hMYGnZ8V3zn1wswDkH9uB5kQnbc.roa (hash: TZ/1y+suo43ZgqAyUHnWJ81Rah/utALvEr+b4U8z1+g=)
2: i8EWjaFgICh-6h_eygVBkwqdNok.crl (hash: Wlkx6bKkbHX8/Gv1/xEIo8bfG1dfcIBmEXecvx9jh9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:73:6d:bd:99:14:85:94:1f:00:b3:c9:9f:36:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689
Validity
Not Before: Feb 9 13:00:43 2026 GMT
Not After : Feb 10 13:00:43 2026 GMT
Subject: CN=3ac7ee022a7a4cc52bdbec0c0a1a39f0436382ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:12:93:86:e6:0f:61:a9:3a:8f:a0:f0:da:
66:4d:00:86:c7:fe:72:a0:b7:27:44:ac:b9:8b:8b:
f9:c7:a8:16:51:a7:93:9b:0d:7c:17:60:b0:30:e1:
17:21:83:31:6b:72:10:09:1f:3a:89:d4:b8:47:9a:
83:c1:b2:b5:e9:e8:9e:2e:fc:de:4b:9a:98:ff:75:
88:d7:db:52:ff:c9:fb:99:fc:c2:69:82:47:8f:f4:
a6:9c:1f:49:52:59:db:78:d0:57:d1:eb:65:f7:21:
8a:3d:6c:b3:c3:e0:6c:c0:18:99:b8:5f:f8:57:71:
b6:30:c8:d2:ca:82:7f:6e:22:6e:de:21:55:8f:40:
df:15:5f:20:58:35:e6:01:e8:0e:0a:02:ed:0d:c3:
0d:58:85:df:79:1c:62:9c:e1:f1:05:48:a4:14:69:
02:b4:c2:5d:21:72:77:f2:4c:f7:01:34:a9:8c:10:
20:c5:2d:57:c1:46:47:cd:db:64:4d:e5:15:87:27:
ca:47:50:1b:27:4a:29:83:1a:59:e5:4b:18:6e:0b:
29:46:9d:2e:27:47:19:f9:31:01:54:3d:85:62:96:
8d:71:8f:6f:89:72:f7:ed:c6:bb:df:95:8b:4e:98:
14:c1:f7:22:51:bd:44:b9:b4:9a:35:10:33:b8:a3:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:EE:02:2A:7A:4C:C5:2B:DB:EC:0C:0A:1A:39:F0:43:63:82:AE
X509v3 Authority Key Identifier:
keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:06:0a:38:d8:54:34:68:87:7f:10:2c:8f:f0:91:4d:fb:
de:ec:b1:13:d5:e5:01:dc:4e:3a:46:d9:5f:d0:08:db:c3:d3:
dc:9a:6d:60:04:ab:19:3b:ff:95:cb:fc:f4:5b:39:1b:d5:53:
e9:f2:43:36:2f:5e:22:63:ef:99:21:7d:ea:68:85:e6:1d:da:
a4:aa:9f:bd:07:61:5a:11:27:1f:61:fb:31:a6:d3:09:9a:2e:
6a:41:c3:c3:27:b9:10:6f:d1:2b:5f:e9:ec:33:21:db:7f:a0:
b0:64:2d:3a:ea:fe:20:76:0d:c2:cd:21:aa:ca:8e:6d:06:26:
10:6e:15:a2:80:96:9f:5b:9b:5f:af:fc:a8:40:71:67:c8:d4:
49:7a:73:42:a1:91:cd:4e:67:75:40:e1:10:c7:ff:99:74:47:
10:d1:0d:ac:7e:13:7d:a0:22:dc:a8:69:44:dd:02:9c:3d:60:
c1:c3:c6:65:ff:3e:56:ed:48:d2:e0:a4:44:c2:0e:c2:e6:9a:
f4:59:7e:77:b1:fc:b6:2d:68:93:16:90:d5:fa:24:97:38:d4:
85:55:be:33:80:13:0e:37:95:ae:4d:5c:40:3e:f9:e1:14:91:
a4:34:a3:e7:f1:e6:62:29:9b:cf:a6:d5:de:f0:c5:c7:b2:80:
89:9f:32:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfXNtvZkUhZQfALPJnzbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYzExNjhkYTE2MDIwMjg3ZWVhMWZkZWNhMDU0MTkzMGE5
ZDM2ODkwHhcNMjYwMjA5MTMwMDQzWhcNMjYwMjEwMTMwMDQzWjAzMTEwLwYDVQQD
EygzYWM3ZWUwMjJhN2E0Y2M1MmJkYmVjMGMwYTFhMzlmMDQzNjM4MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC8Sk4bmD2GpOo+g8NpmTQCGx/5y
oLcnRKy5i4v5x6gWUaeTmw18F2CwMOEXIYMxa3IQCR86idS4R5qDwbK16eieLvze
S5qY/3WI19tS/8n7mfzCaYJHj/SmnB9JUlnbeNBX0etl9yGKPWyzw+BswBiZuF/4
V3G2MMjSyoJ/biJu3iFVj0DfFV8gWDXmAegOCgLtDcMNWIXfeRxinOHxBUikFGkC
tMJdIXJ38kz3ATSpjBAgxS1XwUZHzdtkTeUVhyfKR1AbJ0opgxpZ5UsYbgspRp0u
J0cZ+TEBVD2FYpaNcY9viXL37ca735WLTpgUwfciUb1EubSaNRAzuKNrowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrH7gIqekzFK9vsDAoaOfBDY4KuMB8GA1UdIwQY
MBaAFIvBFo2hYCAofuof3soFQZMKnTaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTkt
MjZjZTA3MWIwYzM2LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTktMjZjZTA3MWIwYzM2
LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq4GCjjY
VDRoh38QLI/wkU373uyxE9XlAdxOOkbZX9AI28PT3JptYASrGTv/lcv89Fs5G9VT
6fJDNi9eImPvmSF96miF5h3apKqfvQdhWhEnH2H7MabTCZouakHDwye5EG/RK1/p
7DMh23+gsGQtOur+IHYNws0hqsqObQYmEG4VooCWn1ubX6/8qEBxZ8jUSXpzQqGR
zU5ndUDhEMf/mXRHENENrH4TfaAi3KhpRN0CnD1gwcPGZf8+Vu1I0uCkRMIOwuaa
9Fl+d7H8ti1okxaQ1foklzjUhVW+M4ATDjeVrk1cQD754RSRpDSj5/HmYimbz6bV
3vDFx7KAiZ8yJg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:44 2026 by rpki-client