This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: /y9+oEWGXy66QLtWsBTBOoJJXYx11Fi0lWHc8/UvR8w=
Subject key identifier: 08:F3:B0:5E:86:6D:C6:1B:BB:A9:20:D2:BE:17:AA:ED:B7:A8:B9:B3
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 019C420F49F8859D2908B7C952A0A12EA59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 11:00:24 +0000
Manifest this update: Mon 09 Feb 2026 11:00:24 +0000
Manifest next update: Tue 10 Feb 2026 11:00:24 +0000
Files and hashes: 1: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (hash: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: ROxsftfgmvEGXprKslCXKK2xGTiANZvK1gUW3BhapXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:49:f8:85:9d:29:08:b7:c9:52:a0:a1:2e:a5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Feb 9 11:00:24 2026 GMT
Not After : Feb 10 11:00:24 2026 GMT
Subject: CN=08f3b05e866dc61bbba920d2be17aaedb7a8b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:37:48:1d:8d:77:c5:85:63:ce:1a:1c:ec:
10:8b:3a:87:8b:7d:33:69:0d:90:18:fa:1d:d6:3b:
be:24:91:c3:1a:de:6d:5a:a2:f7:11:ed:91:79:99:
81:54:78:db:e3:5c:ed:fd:f0:4e:f2:2d:5b:14:17:
4a:a8:b2:b3:27:87:7c:74:08:55:12:23:0f:b6:70:
c8:32:80:56:ff:e8:a2:6f:82:c1:80:ff:02:4f:1d:
b9:17:8f:40:f4:54:af:f6:04:17:90:33:f3:f4:21:
c2:f3:f7:ba:9a:13:c7:fb:4f:5e:37:5b:77:a0:b6:
7e:24:c9:f6:39:27:6c:83:1b:a9:c7:83:83:a8:f2:
ff:86:ef:22:c9:38:bf:ae:13:14:a0:66:dc:8b:1f:
70:a8:9b:19:b0:50:93:00:87:7a:73:78:ef:d3:97:
c4:4e:83:c3:c5:f0:09:9a:40:52:4b:b7:0f:c4:14:
46:1c:63:f0:5a:73:ed:30:87:b6:63:38:70:f2:cf:
2d:40:8e:bd:ac:bb:35:30:a8:df:6b:84:c7:fe:a2:
c8:44:35:9b:e1:86:ea:de:1f:7f:e1:d3:16:ae:14:
1d:92:33:33:a1:97:3b:e3:93:46:26:0a:c4:88:82:
79:ed:0f:ac:ad:7a:fb:34:fc:fd:71:25:47:62:b5:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:B0:5E:86:6D:C6:1B:BB:A9:20:D2:BE:17:AA:ED:B7:A8:B9:B3
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8c:b5:a1:53:42:4b:ad:7e:35:5a:f5:ce:1d:0d:ce:6f:f7:
7b:c3:fd:a7:45:60:9a:af:e6:de:8e:92:27:14:73:18:e1:5c:
cc:69:96:a2:d1:23:c6:9f:ec:b7:84:0a:b0:b2:52:d3:13:06:
5e:2a:85:5f:38:56:f1:bf:c2:ba:73:b4:99:61:39:c1:17:69:
68:2c:f2:f5:24:86:23:46:65:7a:35:e6:0f:eb:d3:ad:2b:7f:
cf:5d:95:eb:45:a4:35:51:85:82:26:92:36:38:73:d3:8d:92:
97:53:1e:6e:69:62:05:23:8e:cf:aa:28:ce:b6:4c:c6:a4:3d:
75:d2:a6:17:9b:d5:33:8b:78:25:ee:ad:d8:5c:32:8d:a1:ca:
c9:b6:43:0f:37:8a:e3:e1:bd:3b:c0:b1:19:77:f6:52:f4:b5:
f4:02:ee:0a:03:94:28:2f:1b:82:ec:40:70:dc:ff:b2:ed:62:
5e:47:98:e6:99:75:9b:90:ee:46:21:a4:5d:16:5b:2c:10:6e:
2b:88:23:99:c4:0e:6d:c4:0e:65:7d:ae:04:7f:8f:79:68:43:
cf:5f:f6:8d:9a:17:52:2c:c0:85:47:ff:47:3b:d8:d7:12:08:
76:cc:a7:71:e0:95:30:db:ba:55:65:56:34:4f:6d:a5:05:fd:
e3:40:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:24 2026 by rpki-client