This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: W1x5x1psaPmcr2Pi2DWLG4m2auIT95xDc0pyaJqZsDM=
Subject key identifier: A0:19:72:39:F7:36:B0:2B:87:47:0D:AA:76:C8:3C:40:87:9F:02:3C
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019C40FD92727ED3A336288A83E0DF376F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0790
Signing time: Mon 09 Feb 2026 06:01:25 +0000
Manifest this update: Mon 09 Feb 2026 06:01:25 +0000
Manifest next update: Tue 10 Feb 2026 06:01:25 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: NmHhY4FPJoJ4dbZULTDxez/gGs1yIcQ+x3Qanxp0PT8=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:92:72:7e:d3:a3:36:28:8a:83:e0:df:37:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Feb 9 06:01:25 2026 GMT
Not After : Feb 10 06:01:25 2026 GMT
Subject: CN=a0197239f736b02b87470daa76c83c40879f023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:0a:93:89:2f:bf:d5:1f:20:3d:01:9a:c1:
07:f6:d7:22:bd:eb:8d:0b:e8:ba:d0:81:62:8d:12:
8b:97:dc:11:a8:81:2e:86:0c:4a:f5:7e:a5:ed:2c:
26:b2:e3:de:3d:82:96:47:f6:e9:a4:29:a0:20:33:
c3:fb:9d:65:85:92:07:d1:9e:6f:cb:d0:e5:47:54:
f1:01:bb:24:bf:25:46:95:a0:47:4e:3a:90:5c:ef:
93:25:47:57:5d:8f:6e:c0:3e:3c:c7:d4:24:53:0c:
4b:5e:a7:c4:32:49:0f:35:87:ed:84:cf:3b:c5:84:
0f:72:d7:5a:51:58:7a:57:60:e8:31:86:95:56:d7:
13:88:39:a9:fe:0e:37:c1:e2:f3:b9:73:fa:80:3d:
fa:f8:2e:8f:b7:2e:5a:09:b2:9e:97:33:a8:d4:ea:
f4:42:2e:9e:ca:75:2d:60:d4:af:54:65:95:15:1e:
cf:22:40:50:1f:93:89:89:6b:4f:77:c3:31:35:9e:
8d:31:f6:3c:a0:b3:3e:e3:e4:3a:f0:60:2f:df:6c:
d7:ea:88:ec:2d:3c:bc:e8:b7:49:22:2c:b2:51:f3:
c5:19:c5:13:0e:68:7e:57:ed:bf:a6:2f:70:96:7d:
b0:6d:ef:63:10:01:a3:69:93:58:72:10:f5:dc:63:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:19:72:39:F7:36:B0:2B:87:47:0D:AA:76:C8:3C:40:87:9F:02:3C
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6d:22:a2:27:0f:a8:e1:f4:a4:1b:30:d2:a3:11:e3:28:30:
d4:c2:cb:28:83:7c:4b:f1:7b:72:92:a8:bd:55:9a:a3:76:10:
c1:8b:45:c4:c1:fb:cb:9a:81:cc:69:b8:5f:16:88:17:6e:e3:
80:1d:ce:76:08:b6:73:72:42:bc:b2:f8:d5:d7:62:7e:85:81:
e4:5c:ec:fa:f2:b2:5d:9e:29:62:99:ad:90:67:ce:54:e5:11:
f4:09:68:52:4a:2a:18:3b:6c:48:71:b3:64:8e:9a:6d:8c:af:
66:2f:9a:3a:4c:a0:92:90:1a:36:05:82:4f:1a:d4:41:7a:e4:
f1:41:69:aa:48:01:6a:14:9c:6a:1b:74:8b:2f:b9:96:9e:19:
a6:d7:d3:62:8c:6e:95:89:1e:c3:fc:17:e9:4d:e0:56:79:6c:
3a:31:2b:6b:ef:53:58:d4:a0:b4:55:ac:b0:ae:96:96:72:e2:
34:78:16:44:e3:fa:09:ce:f6:86:c5:ab:08:9f:d6:6b:f4:b4:
90:32:15:95:51:4f:f6:54:63:19:12:65:61:3f:35:dc:11:53:
7a:17:d9:50:bc:a9:68:3e:ba:35:21:be:ce:c7:fa:24:48:b4:
33:7f:0a:8a:12:d7:a5:1c:95:d5:dc:b6:04:a5:36:23:27:2b:
ae:cc:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:35 2026 by rpki-client