This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: X1UNd6ke0xsrh1yNg8+UuUj6UsQJyfS7bG3lZGGOL4I=
Subject key identifier: 21:7B:5C:D9:07:24:8C:0C:CE:34:D8:E3:B5:91:67:B3:FD:CD:C8:6D
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019C43900409D888EE670834DB5F5DDBA723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 16
Signing time: Mon 09 Feb 2026 18:00:37 +0000
Manifest this update: Mon 09 Feb 2026 18:00:37 +0000
Manifest next update: Tue 10 Feb 2026 18:00:37 +0000
Files and hashes: 1: ZCX1K491fuofD-KW-jb0pfq9nuw.asa (hash: 0g8X9qZdEwEVTUpjkYItWEgd8L4aVsf8OFtpGdhGrQI=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: cdUPPUNGltM/ZvEP9HC0GNROpStBNehwGJUSziahq40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:04:09:d8:88:ee:67:08:34:db:5f:5d:db:a7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Feb 9 18:00:37 2026 GMT
Not After : Feb 10 18:00:37 2026 GMT
Subject: CN=217b5cd907248c0cce34d8e3b59167b3fdcdc86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:ec:0d:9f:e8:d0:f3:0f:38:3e:63:b7:89:
a9:98:3f:dc:b6:6d:83:d2:a3:bd:b1:21:2b:d7:42:
c6:c1:07:11:76:6b:e6:ed:92:d7:0c:eb:ca:fb:60:
20:b3:e4:5b:cb:0b:a1:94:0c:77:78:4f:86:47:90:
7b:b9:89:83:9e:08:55:bd:1b:bc:32:17:68:63:3c:
65:e3:b5:3d:41:a2:ce:9f:70:e4:3a:74:c4:3b:2f:
08:07:9b:bd:00:cd:97:aa:14:8f:4f:31:c2:95:42:
dc:50:75:88:06:11:0d:60:f9:cd:44:02:a1:66:00:
a5:e4:99:c9:c0:97:ce:ab:bd:87:17:a4:ef:d9:0f:
01:54:15:d6:2c:e2:59:71:be:37:2c:cb:a2:08:63:
de:5f:18:02:b0:dd:df:38:aa:7b:48:72:29:1e:5b:
89:b2:b3:6a:5d:f7:d4:0f:f7:96:5b:bd:e9:b4:dc:
69:e3:c3:39:4d:9a:ab:53:8d:7b:1d:f0:4d:fb:e4:
33:fb:d8:95:b6:88:86:a5:b4:19:c4:6d:0f:40:a0:
b5:6f:a6:1d:bc:df:72:d4:3d:b5:26:7d:6b:08:b6:
25:bc:47:09:71:08:d7:2e:2f:f9:9d:6b:16:3b:97:
fb:d8:67:55:a9:76:8c:b5:f0:27:c2:84:50:e9:fc:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:5C:D9:07:24:8C:0C:CE:34:D8:E3:B5:91:67:B3:FD:CD:C8:6D
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:50:12:77:7a:8d:d2:27:60:fb:82:0f:aa:42:e3:1e:e7:cc:
e3:e8:c6:cd:be:1b:bd:80:ec:9f:c8:89:e3:e7:ff:38:b8:3f:
3a:c6:2e:4a:8b:22:e5:91:4c:c4:be:34:08:15:8d:26:a1:b1:
1c:fc:ae:13:3d:66:a2:44:6c:e5:b0:90:dd:6a:63:eb:7d:e3:
f0:f1:07:a8:1b:93:81:a2:ff:53:84:78:67:c8:55:c1:8d:64:
91:2a:1e:e5:aa:06:72:fa:ea:3a:a8:0a:1a:56:bf:70:f2:36:
d1:6c:8d:36:b4:4c:c0:8a:2f:70:87:4b:b5:df:2e:ce:e1:cd:
1c:94:ba:3c:e7:96:1f:f6:46:50:61:3b:2d:70:0c:0a:a4:ab:
98:e4:d2:17:c5:0a:a7:3a:b8:1f:c2:b1:f2:02:64:50:44:66:
bf:48:66:7d:01:a9:61:83:e5:7e:90:ee:58:13:73:ba:26:00:
95:9d:d4:6a:d3:2f:1d:85:c6:b6:d6:c7:00:24:94:e2:f7:16:
aa:bc:74:8d:ad:a4:52:66:ab:22:54:5c:69:8e:ee:b5:cb:ad:
6a:95:0f:63:ca:65:b8:d8:7f:5b:f1:d0:a9:79:47:e6:04:0b:
16:cd:da:54:18:02:c0:85:63:fb:48:c3:e5:20:c5:c4:b4:78:
c7:69:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:34 2026 by rpki-client