This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier: OAP2Zub+5OMapSSxS6x+QVX0Z/bz0878CyDzTgQOMzU=
Subject key identifier: DB:86:70:11:0A:58:1B:28:4E:7D:15:1A:95:D4:09:01:AF:26:29:1F
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer: /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial: 77DAD60421CEEA87CB106CB1951D23E81781C2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number: 011E
Signing time: Mon 09 Feb 2026 19:32:43 +0000
Manifest this update: Mon 09 Feb 2026 19:27:43 +0000
Manifest next update: Tue 10 Feb 2026 21:33:43 +0000
Files and hashes: 1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: LcczwW4/4QpkNRC96fkxqYjuHPFjYbt+DPKsbgcZeuE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:da:d6:04:21:ce:ea:87:cb:10:6c:b1:95:1d:23:e8:17:81:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Validity
Not Before: Feb 9 19:27:43 2026 GMT
Not After : Feb 10 21:33:43 2026 GMT
Subject: CN=DB8670110A581B284E7D151A95D40901AF26291F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:7d:f5:4d:08:42:a6:2b:93:09:3b:ff:3b:
de:79:b1:8f:33:9b:2d:e6:40:87:f0:fb:ce:e9:4e:
aa:d4:c2:b7:d4:17:f7:27:9c:a5:f9:e7:af:34:8e:
ba:1a:cd:e1:cd:80:3d:ca:c0:26:30:00:77:8a:d7:
ba:cb:16:39:75:0f:77:b7:2f:80:8a:39:19:33:b9:
f9:8a:96:f2:12:4e:9a:ff:31:aa:ea:e1:ed:23:8e:
52:7d:82:8d:e9:5f:62:a8:7c:ca:c8:f1:27:bd:37:
9c:14:91:78:e5:db:28:fe:d0:f4:f9:f6:bf:d0:42:
bb:cd:44:f1:77:f2:8b:1b:06:45:2d:4d:20:72:d1:
52:0c:b4:32:ea:7e:68:2b:16:b2:45:4a:b5:74:3a:
62:0f:6c:83:92:a1:55:b0:a4:0c:77:b6:4c:aa:8e:
df:87:f5:95:d3:7a:70:33:6a:9e:fe:92:d0:0b:06:
15:59:c2:00:3e:22:bf:5a:a1:7b:0b:ef:ed:64:f1:
d7:5d:49:1e:05:f7:71:10:d5:08:7e:e9:89:37:ed:
f0:0e:69:f6:5f:8b:26:ed:50:92:9c:1f:c6:36:80:
60:6f:94:0b:f8:46:50:49:aa:b7:59:0d:4c:c7:13:
45:f9:24:a4:cd:15:8f:f1:03:5c:60:91:75:bb:ca:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:70:11:0A:58:1B:28:4E:7D:15:1A:95:D4:09:01:AF:26:29:1F
X509v3 Authority Key Identifier:
keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d1:5b:c1:10:5d:81:3f:41:1f:d1:2a:08:ee:bc:64:0d:3e:
1e:5a:3b:f0:78:8f:b0:1c:34:e9:97:e3:cb:51:4f:ff:66:c4:
73:d6:83:da:43:c1:f1:3e:dd:11:11:4a:33:06:bd:9e:12:a3:
12:ad:14:06:3f:f1:93:9e:bc:8b:66:17:8c:8f:02:ba:e9:b4:
40:84:0d:99:3c:f7:6c:1d:4e:a6:1d:02:54:e6:da:b2:08:1f:
7c:66:6a:55:24:1c:4f:75:d7:c0:ef:0e:f8:17:0c:c5:d1:41:
a2:69:fc:d8:5f:6f:e8:59:7a:85:de:cc:61:0b:de:66:e4:ef:
cb:22:9d:77:66:41:26:96:4f:2a:3a:53:87:dd:e1:e9:9e:ab:
27:8e:e4:3b:b3:25:bc:1d:70:36:87:61:65:bc:12:9a:ad:43:
f4:cc:97:b4:5d:28:67:34:67:75:86:ef:01:29:d4:ae:e2:51:
a7:cf:f1:d1:01:a3:cd:35:cd:19:42:75:81:83:77:fb:a1:94:
37:08:94:ad:e3:44:bc:75:97:a4:30:f7:73:dc:bd:80:1a:ca:
74:fc:62:bd:a4:05:e4:2a:cc:7b:c6:23:e4:83:69:be:d0:b7:
bf:00:35:8e:64:97:c2:6c:33:6d:b9:2e:90:68:9c:5d:cf:f7:
eb:f6:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:17 2026 by rpki-client