This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: HXpg4GFHGjweNzd7ZqbiN6suGEMaXsbmrfqaLYbVRcE=
Subject key identifier: 7D:FC:0F:CD:8A:6A:DD:54:33:D6:6B:B7:D7:22:C2:5B:6D:51:51:8D
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019C43FE335BC95714187DF06821C618BFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 07AC
Signing time: Mon 09 Feb 2026 20:00:58 +0000
Manifest this update: Mon 09 Feb 2026 20:00:58 +0000
Manifest next update: Tue 10 Feb 2026 20:00:58 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: H1AFhpcbH6mgsasnAnO7cA5RcUOAEFv/MGCFrSrBUak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:33:5b:c9:57:14:18:7d:f0:68:21:c6:18:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Feb 9 20:00:58 2026 GMT
Not After : Feb 10 20:00:58 2026 GMT
Subject: CN=7dfc0fcd8a6add5433d66bb7d722c25b6d51518d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:50:ad:0f:0c:f5:0e:47:d6:a7:bf:1f:74:
04:8f:e9:24:b3:50:50:95:f6:ac:73:c0:ae:77:17:
22:39:be:7d:96:59:58:a2:27:4f:3f:6b:81:36:cc:
b7:00:8f:88:d7:aa:23:9a:03:e4:2b:c2:65:b8:d3:
18:76:95:0e:9e:d6:4b:66:b5:ae:ba:b2:38:14:97:
17:42:5b:2a:93:00:d1:d1:61:be:54:de:b0:e2:5a:
da:68:be:c3:aa:8d:bb:78:34:3e:5f:20:97:e0:85:
38:4f:a5:8f:18:81:c9:76:7d:b7:9b:e7:ab:a0:89:
e2:06:b5:dc:f3:c8:c7:8c:f4:16:9e:e5:d9:80:29:
7b:b0:66:d3:0c:6e:4e:19:17:e3:fc:6d:8c:69:48:
95:ad:8e:b4:48:d9:ea:4a:7e:d6:b0:aa:1f:a3:25:
96:f2:40:50:87:0b:78:ed:80:00:73:b9:bd:9e:99:
a7:ff:55:eb:0a:4f:ab:81:05:03:ed:a3:39:be:c6:
f9:ac:f8:2d:c3:b1:55:dc:3b:7e:c7:5d:ae:8a:d8:
3f:bb:61:d4:81:04:33:7f:64:c4:a9:0b:e7:d8:13:
cf:c7:9b:8c:25:7a:6a:2c:ff:ae:81:1e:c8:96:9a:
a5:a8:68:4e:4b:9c:82:b2:75:93:bb:29:f1:af:f2:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:0F:CD:8A:6A:DD:54:33:D6:6B:B7:D7:22:C2:5B:6D:51:51:8D
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9a:83:0a:c6:41:38:a1:a9:47:24:24:03:37:52:f7:eb:98:
67:a3:b9:95:9a:72:22:41:78:8a:0d:8c:39:02:e5:cc:b6:ce:
97:94:09:c2:80:2c:a2:ca:30:57:89:2c:cb:9f:fb:81:d0:f8:
ce:81:9d:8d:e1:88:75:e2:8e:de:ae:b1:41:38:a4:3c:91:65:
5c:dd:9c:59:80:16:74:e0:00:1c:94:73:77:a9:b5:21:53:87:
23:25:de:e7:86:f5:19:a7:d9:cb:51:fc:a2:84:f7:3b:f2:4e:
bf:18:21:a5:1b:07:2e:48:d2:b9:18:d3:14:d2:a4:15:5c:f5:
d5:83:32:2c:09:77:32:d8:d5:e8:2c:8c:78:a2:77:3c:a8:11:
be:54:f1:db:29:b2:3a:f6:ad:7e:97:35:22:e8:7d:fc:08:bb:
e4:f4:74:53:60:b9:54:37:8d:73:e3:a8:07:34:f7:ec:5d:28:
dc:48:4b:cb:28:33:51:95:a2:5a:43:e1:fd:21:05:a9:3b:88:
bf:6c:32:ce:ba:c7:54:1b:a3:90:65:61:5b:10:b8:8f:95:21:
8f:64:6f:72:d3:12:7c:da:e5:5f:31:b8:97:f9:2f:3a:c1:45:
fc:2a:12:50:13:12:5a:cb:f6:18:8b:56:49:aa:d6:c1:f6:5b:
1a:61:3d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:23 2026 by rpki-client