This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: LYXEqbmXcmKFxJNKKjTtl3LkccDgePc1drWMW9J3F0A=
Subject key identifier: 09:C3:BD:E8:7F:A7:EE:95:0D:93:9B:37:23:25:C4:C3:9C:B0:68:17
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019C416AB9659424A588F9CC95F6534CAA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0C08
Signing time: Mon 09 Feb 2026 08:00:39 +0000
Manifest this update: Mon 09 Feb 2026 08:00:39 +0000
Manifest next update: Tue 10 Feb 2026 08:00:39 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 8I+uGkDkcG5tsm3zO17yGDK/SUZ+gI+IDhLhO3lh0Wg=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:b9:65:94:24:a5:88:f9:cc:95:f6:53:4c:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Feb 9 08:00:39 2026 GMT
Not After : Feb 10 08:00:39 2026 GMT
Subject: CN=09c3bde87fa7ee950d939b372325c4c39cb06817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:cb:7c:81:8a:8a:a1:2f:ad:ed:16:5d:70:
57:28:92:47:04:01:e9:12:af:26:77:8e:7e:5e:d8:
1d:df:d2:bf:a1:df:c4:8c:b7:ef:42:b2:fc:e0:8c:
a9:47:5a:3f:b8:f8:42:46:db:73:70:ef:61:26:6b:
42:b1:d1:1a:66:c3:14:6f:94:82:ae:e7:a7:12:91:
c4:fb:87:62:d8:93:91:a2:9b:1b:b9:ef:70:0f:77:
58:af:8e:62:17:f8:92:1e:6d:f5:f1:2f:5a:53:48:
3e:ac:cc:3b:9f:78:9e:f8:7d:66:ca:98:ea:4f:b5:
2b:13:9f:89:fd:ed:5a:7c:c8:84:23:fa:90:d0:3b:
76:9c:b4:a5:c0:fa:d2:e1:2d:3b:f1:bc:30:97:b2:
87:55:43:fa:1c:1f:c8:1f:5c:3e:b5:4a:1b:6a:5f:
9e:f5:73:b3:d6:e8:14:62:51:08:80:d1:c1:0a:86:
d5:e3:4a:ab:5c:45:df:ce:21:21:f1:6e:bd:0f:1d:
5a:25:00:07:7f:28:15:44:5d:6d:27:95:cd:6c:dc:
ff:c0:68:93:b1:c7:f6:bd:8b:af:62:15:07:1a:aa:
79:7b:ab:ec:d4:0d:9f:1a:7a:52:00:aa:78:bc:77:
1c:26:ff:a9:36:8a:75:ca:82:45:d2:39:68:7b:01:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:BD:E8:7F:A7:EE:95:0D:93:9B:37:23:25:C4:C3:9C:B0:68:17
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:55:5f:6e:36:3e:b6:2e:44:27:c6:68:15:40:b3:9e:b5:
57:fe:d0:1d:85:71:7d:72:7a:ce:a5:78:8d:bc:6a:1b:27:b2:
d1:c4:cc:e6:78:d3:bd:f0:02:4c:6b:24:58:82:9b:57:7b:58:
76:2e:65:7d:39:8d:db:fd:07:8a:41:31:34:c4:c4:0f:de:9b:
9b:b9:06:97:b4:63:cc:b4:75:f4:54:e9:59:74:e5:f5:f9:42:
2d:e1:db:91:51:df:a6:3c:a9:42:60:6f:44:38:54:1a:ea:86:
a7:68:85:b2:dd:a4:a6:13:6d:6f:55:ab:bf:15:39:ff:c2:30:
e7:98:64:52:78:58:ce:0a:50:8f:17:5c:12:72:f1:a9:01:7f:
26:29:16:7b:4c:fb:87:e9:3d:30:4e:ac:f3:c2:72:fc:eb:64:
67:2a:6b:0b:97:c2:7b:b5:80:bc:4d:6e:2f:e8:2b:5b:d1:75:
b0:f8:a9:1d:7f:d9:bf:f6:0b:77:55:95:cd:af:8b:a2:13:d9:
db:74:85:ee:ca:9b:e7:11:63:53:71:62:5b:e3:bd:91:75:39:
73:ef:39:cb:b7:62:8a:52:b0:b7:30:7a:07:5f:b2:fe:92:71:
75:65:87:fe:a1:92:27:84:76:23:02:33:67:a8:69:fa:80:55:
68:1d:20:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBarlllCSliPnMlfZTTKpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjYwMjA5MDgwMDM5WhcNMjYwMjEwMDgwMDM5WjAzMTEwLwYDVQQD
EygwOWMzYmRlODdmYTdlZTk1MGQ5MzliMzcyMzI1YzRjMzljYjA2ODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2nLfIGKiqEvre0WXXBXKJJHBAHp
Eq8md45+Xtgd39K/od/EjLfvQrL84IypR1o/uPhCRttzcO9hJmtCsdEaZsMUb5SC
ruenEpHE+4di2JORopsbue9wD3dYr45iF/iSHm318S9aU0g+rMw7n3ie+H1mypjq
T7UrE5+J/e1afMiEI/qQ0Dt2nLSlwPrS4S078bwwl7KHVUP6HB/IH1w+tUobal+e
9XOz1ugUYlEIgNHBCobV40qrXEXfziEh8W69Dx1aJQAHfygVRF1tJ5XNbNz/wGiT
scf2vYuvYhUHGqp5e6vs1A2fGnpSAKp4vHccJv+pNop1yoJF0jloewGQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnDveh/p+6VDZObNyMlxMOcsGgXMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7RVX242
PrYuRCfGaBVAs561V/7QHYVxfXJ6zqV4jbxqGyey0cTM5njTvfACTGskWIKbV3tY
di5lfTmN2/0HikExNMTED96bm7kGl7RjzLR19FTpWXTl9flCLeHbkVHfpjypQmBv
RDhUGuqGp2iFst2kphNtb1WrvxU5/8Iw55hkUnhYzgpQjxdcEnLxqQF/JikWe0z7
h+k9ME6s88Jy/OtkZyprC5fCe7WAvE1uL+grW9F1sPipHX/Zv/YLd1WVza+LohPZ
23SF7sqb5xFjU3FiW+O9kXU5c+85y7diilKwtzB6B1+y/pJxdWWH/qGSJ4R2IwIz
Z6hp+oBVaB0gxg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:38 2026 by rpki-client