This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: 7qA/2f6RqxFqRQI7g9RBZ7i4Bh8TS7ihkE+ZmOz1t1Q=
Subject key identifier: 6F:12:38:0B:4E:F7:8A:E6:14:0B:7D:3C:4F:7E:29:7F:B5:52:72:23
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019C427D4E33544D00AE53746F14476D8DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 14DE
Signing time: Mon 09 Feb 2026 13:00:34 +0000
Manifest this update: Mon 09 Feb 2026 13:00:34 +0000
Manifest next update: Tue 10 Feb 2026 13:00:34 +0000
Files and hashes: 1: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: oBat7NiUI/qzJPC48zRtR6+KE1SXRwXnS49bvyQnHhM=)
2: yuJsWVIKEkrfOiLC0rgtYrfv5ig.roa (hash: tNJ821CD2JFvwv/regbkNi6JuvYQZgMCd//DFX1D46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:4e:33:54:4d:00:ae:53:74:6f:14:47:6d:8d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Feb 9 13:00:34 2026 GMT
Not After : Feb 10 13:00:34 2026 GMT
Subject: CN=6f12380b4ef78ae6140b7d3c4f7e297fb5527223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:1b:e7:f8:8b:eb:53:9d:ae:fc:25:db:81:
b8:78:af:80:09:4c:e0:cb:f1:16:9f:90:7c:90:36:
de:04:08:54:0a:05:7d:1e:77:82:d8:10:00:65:74:
45:26:83:aa:d4:50:82:13:22:3a:98:39:41:c9:7f:
cf:00:3b:23:34:69:a1:7a:f8:3a:5f:e1:4f:b6:ca:
c3:a7:d2:46:fe:33:15:32:9b:4e:1a:e1:1e:22:2b:
14:18:de:50:fd:e0:60:77:90:cf:d0:df:e2:eb:e7:
cb:a7:c6:85:c3:68:51:13:d6:c4:17:30:48:ae:9a:
9f:30:a8:56:d4:e0:60:af:70:cf:1b:3e:f8:19:b7:
6e:81:d4:4a:fd:44:5f:9e:65:b9:77:cb:06:28:df:
b2:b1:6e:5e:6c:f2:67:6d:20:63:60:25:d7:e9:87:
94:c8:da:1c:d7:85:d8:ac:9c:34:69:61:8d:75:6f:
21:a4:2d:80:61:26:ca:84:56:a2:01:5b:d6:09:56:
84:bb:b4:06:53:dd:4c:c5:af:94:6d:d3:13:93:dd:
99:8e:f5:df:90:86:2c:ce:8a:d3:a5:56:e3:ea:d3:
9e:7b:c5:bc:a0:b7:49:e9:4e:3d:34:d1:57:51:cb:
7e:2f:7f:44:a4:93:9e:cd:63:5d:0b:87:1e:76:f8:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:38:0B:4E:F7:8A:E6:14:0B:7D:3C:4F:7E:29:7F:B5:52:72:23
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:00:23:99:db:ce:de:c3:bc:26:39:4e:67:93:25:bc:9f:59:
ce:c1:f4:b1:ea:85:4e:e9:64:fe:da:d3:60:9b:41:35:74:20:
2d:d5:a5:67:50:95:97:74:d9:b0:ee:ea:02:25:11:4b:bb:ca:
38:f4:c4:f2:d9:a7:19:52:db:77:1b:a5:bb:f7:96:52:41:f9:
5f:01:4b:e4:de:c2:24:af:33:2f:73:c5:1d:30:9e:1b:d4:f9:
d6:32:ed:d1:ae:ad:00:59:de:20:6d:f4:f5:15:44:17:82:31:
ab:f4:d9:21:05:75:9a:d6:59:1d:71:17:93:75:5e:b7:ba:5c:
29:5c:82:ab:41:c7:b5:dc:bc:87:9f:b3:ea:e5:92:f6:ee:a1:
b6:45:60:61:74:bd:26:9a:89:05:06:02:d7:af:0c:1d:8d:15:
61:81:8e:40:34:2e:9d:fe:03:88:43:d1:e1:6a:14:ae:e8:ce:
3e:8e:dc:6c:86:d9:fa:43:26:06:79:8f:e2:7c:23:27:26:de:
1c:08:15:67:a6:f9:43:54:c3:17:06:1d:82:52:b8:e0:d5:67:
37:24:a0:8e:fb:63:f2:31:b4:5a:55:f3:98:b4:3b:e9:ed:d2:
08:d1:1d:5f:d3:ac:f4:b9:bf:31:9f:dd:b7:22:f0:7b:05:5d:
31:00:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:22 2026 by rpki-client