This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: gX6NtvG1VmwZPsn2A27mDKG+CP3tfNELK5haGcVu5cU=
Subject key identifier: 32:AA:F1:CE:25:E3:A1:E8:8F:E2:93:59:BD:CD:F1:DD:4F:17:67:A4
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019C4322E05540C45A3E6B1848A8BB8FD18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1389
Signing time: Mon 09 Feb 2026 16:01:24 +0000
Manifest this update: Mon 09 Feb 2026 16:01:24 +0000
Manifest next update: Tue 10 Feb 2026 16:01:24 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: 9lUTVk8cgq/Bvi82GKoQTfiZG1RohwGCQx19IomBeVo=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:e0:55:40:c4:5a:3e:6b:18:48:a8:bb:8f:d1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Feb 9 16:01:24 2026 GMT
Not After : Feb 10 16:01:24 2026 GMT
Subject: CN=32aaf1ce25e3a1e88fe29359bdcdf1dd4f1767a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:ea:fe:c1:ec:bc:2a:d3:59:23:5b:a7:94:
f4:10:9f:17:49:40:34:49:3e:39:01:cd:b9:1f:e3:
c4:5b:58:1b:e7:eb:b1:c5:0c:c8:47:da:70:da:fe:
22:37:56:3b:4a:69:df:7a:00:85:db:2e:ed:70:f0:
78:ac:69:f1:3d:85:3e:74:ec:30:f5:56:6c:4d:00:
8d:3b:de:ae:0a:8b:9f:d0:b3:d2:8b:4a:4d:63:dc:
0d:e7:19:c6:6d:99:f7:19:35:9a:96:cc:74:8e:34:
bd:13:cf:37:95:a2:db:cb:86:09:fa:7c:0e:76:14:
df:fd:c4:7b:bb:ec:bd:7a:1c:83:ef:de:2f:a2:e7:
7d:ac:04:3d:ce:11:df:32:1c:5d:e4:bb:44:ad:e4:
c4:0d:ad:a2:57:1d:3a:5b:45:75:eb:42:1a:36:33:
0c:72:71:12:ce:86:1a:61:02:3c:07:42:b2:cb:d3:
47:eb:30:9f:fa:a2:91:b4:23:35:48:d4:ad:f8:5f:
94:02:10:ee:1d:69:2d:25:35:80:dd:d6:21:8c:f0:
41:f9:c1:4c:28:b7:2c:e8:0a:6e:39:0a:33:e8:8b:
05:0f:76:2a:55:77:75:7a:e7:c0:38:63:e8:5b:e5:
07:f7:12:1a:fc:50:39:61:d5:85:3e:a1:f8:34:1e:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:F1:CE:25:E3:A1:E8:8F:E2:93:59:BD:CD:F1:DD:4F:17:67:A4
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:71:24:a1:30:d3:57:50:7b:91:71:c5:f6:d2:95:46:3e:
a4:e9:55:5b:a6:47:09:47:f8:3b:4e:f1:8f:c1:1d:68:bf:da:
e4:60:1b:d0:d1:9e:66:3b:58:2a:77:8c:aa:5c:00:2e:14:19:
7f:56:b0:fc:e7:fc:35:47:4f:53:24:6f:67:f5:b0:05:e9:53:
46:98:9f:c8:9b:65:4a:fd:8c:cb:b3:4c:1f:fe:4c:36:86:2d:
f5:d9:98:1e:77:c9:b7:99:a8:f1:ec:64:9c:99:59:d3:99:24:
e1:4d:ee:59:7b:f3:87:d5:ed:c5:61:cd:62:e7:30:e8:e8:a5:
b6:7e:8d:6c:bf:12:6d:96:b0:96:0a:d5:82:7e:1c:10:83:4b:
44:9d:c4:c9:0c:66:18:ae:54:cd:f0:4a:e6:41:f5:2e:9c:2b:
35:ba:f8:3a:fd:34:ea:1c:2d:bc:a6:08:38:99:cd:2a:75:77:
73:a5:e0:36:d9:77:1c:33:ee:15:55:e3:d9:63:e0:46:64:69:
6b:22:ec:07:de:37:91:bb:8c:4b:00:08:2a:fc:02:aa:d0:24:
4b:2a:23:a6:91:a0:61:34:b8:ad:60:48:8e:5c:d6:dc:86:73:
47:8b:06:78:56:a8:b1:36:bd:e6:81:48:65:04:d4:7a:c0:af:
0b:cf:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:11 2026 by rpki-client