This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: UCPRWKaZk5E+Y/Rb+jqtNMR3OM5yWiwRrKGcKFhVswY=
Subject key identifier: 89:4E:20:0D:CF:89:22:A3:A9:33:87:7A:E6:42:AC:B5:B2:16:CE:05
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 1D080FE733E14E0C22CC1E96E9A16DEA54E1720E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 037E
Signing time: Mon 09 Feb 2026 08:20:02 +0000
Manifest this update: Mon 09 Feb 2026 08:15:02 +0000
Manifest next update: Tue 10 Feb 2026 10:20:02 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: aK9G5bsya6DoLxBXU8t0Vb4gWbN6Rp2zmPatdfwQvKE=)
2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:08:0f:e7:33:e1:4e:0c:22:cc:1e:96:e9:a1:6d:ea:54:e1:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Feb 9 08:15:02 2026 GMT
Not After : Feb 10 10:20:02 2026 GMT
Subject: CN=894E200DCF8922A3A933877AE642ACB5B216CE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:b7:06:90:ad:9d:88:8d:10:26:3d:be:14:
e1:58:fa:c5:a9:7d:b6:de:8e:15:2b:13:e1:02:e1:
44:02:da:26:ba:5f:b6:de:2b:aa:ed:83:6a:d7:21:
bd:6b:23:65:72:a5:d9:9d:21:b9:7f:23:c9:29:e6:
8a:14:d0:a4:72:66:9e:92:9d:b8:a0:fd:20:1e:d3:
e4:9b:fe:22:1f:91:3c:e5:e4:37:5a:78:1d:11:99:
99:7a:45:54:d7:02:26:f9:8e:8e:7e:69:10:61:7e:
f9:bb:0e:90:e5:0f:a4:c0:ec:ee:6b:33:0d:f5:e3:
5e:eb:f6:49:d2:3b:eb:d6:84:0d:d1:52:a7:a2:10:
1a:96:99:5a:f3:3c:e3:c4:c8:ec:c8:e9:12:b9:db:
33:05:66:83:4b:03:37:ce:b7:c0:de:61:d5:21:5c:
32:86:e4:63:0a:e2:f9:0f:b7:c2:2d:b0:91:70:d8:
db:24:cb:80:65:1a:d7:3d:65:83:64:9c:f6:62:e9:
e1:bb:98:a3:b4:0a:43:63:e7:81:1c:90:31:6c:2b:
4a:da:38:3d:9b:3b:62:fc:27:0d:09:53:ca:0d:d7:
2a:78:05:15:6a:1c:31:be:9d:e5:dc:f7:9f:69:2e:
0c:97:bb:4c:35:ed:a9:3c:28:09:98:a3:86:7d:c2:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4E:20:0D:CF:89:22:A3:A9:33:87:7A:E6:42:AC:B5:B2:16:CE:05
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:5f:c1:02:9e:75:73:91:15:f3:80:8c:b7:04:02:fa:a9:
c4:3b:3d:96:2e:69:bb:f3:ed:e2:95:59:d0:fe:b1:ea:7a:5e:
1a:01:de:3e:64:ab:0e:ac:78:8c:fd:a9:9f:51:b3:a8:d5:9b:
5b:d6:67:fc:4c:30:2f:69:df:08:3a:b3:33:c4:78:03:00:28:
86:4b:e9:e4:3f:71:b2:39:ee:ca:61:d1:da:61:d2:97:e6:be:
3e:01:d8:c5:33:45:a1:18:d7:b9:20:4b:6f:c3:f1:bb:90:e4:
69:58:2d:bc:40:c1:8c:90:e7:e4:cb:4a:72:4b:08:11:b7:8b:
24:32:f6:3f:bc:3b:12:9e:82:52:ee:ab:c7:a8:2d:d5:37:6e:
b1:0c:a9:88:c9:ad:15:a9:ec:ed:75:49:30:3c:8e:34:c2:10:
ac:62:37:b2:85:a4:b6:a8:15:dd:71:cd:14:89:05:e0:bb:63:
0b:1e:ae:72:9f:ac:1a:86:3d:19:e6:ef:ab:52:bf:97:d3:54:
3e:bc:4f:1e:4b:e9:89:af:fc:d8:69:78:bb:92:cc:c2:06:bf:
0c:2c:08:39:de:16:f9:69:6e:26:aa:21:72:54:23:01:35:33:
ef:de:6a:b1:fd:48:9a:86:64:75:28:27:09:5d:c0:8f:3c:3e:
06:43:00:22
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHQgP5zPhTgwizB6W6aFt6lThcg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjAyMDkwODE1MDJaFw0yNjAyMTAxMDIwMDJaMDMxMTAvBgNV
BAMTKDg5NEUyMDBEQ0Y4OTIyQTNBOTMzODc3QUU2NDJBQ0I1QjIxNkNFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7O7cGkK2diI0QJj2+FOFY+sWp
fbbejhUrE+EC4UQC2ia6X7beK6rtg2rXIb1rI2VypdmdIbl/I8kp5ooU0KRyZp6S
nbig/SAe0+Sb/iIfkTzl5DdaeB0RmZl6RVTXAib5jo5+aRBhfvm7DpDlD6TA7O5r
Mw31417r9knSO+vWhA3RUqeiEBqWmVrzPOPEyOzI6RK52zMFZoNLAzfOt8DeYdUh
XDKG5GMK4vkPt8ItsJFw2Nsky4BlGtc9ZYNknPZi6eG7mKO0CkNj54EckDFsK0ra
OD2bO2L8Jw0JU8oN1yp4BRVqHDG+neXc959pLgyXu0w17ak8KAmYo4Z9wpFJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUiU4gDc+JIqOpM4d65kKstbIWzgUwHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIVfwQKedXORFfOAjLcE
AvqpxDs9li5pu/Pt4pVZ0P6x6npeGgHePmSrDqx4jP2pn1GzqNWbW9Zn/EwwL2nf
CDqzM8R4AwAohkvp5D9xsjnuymHR2mHSl+a+PgHYxTNFoRjXuSBLb8Pxu5DkaVgt
vEDBjJDn5MtKcksIEbeLJDL2P7w7Ep6CUu6rx6gt1TdusQypiMmtFans7XVJMDyO
NMIQrGI3soWktqgV3XHNFIkF4LtjCx6ucp+sGoY9Gebvq1K/l9NUPrxPHkvpia/8
2Gl4u5LMwga/DCwIOd4W+WluJqohclQjATUz795qsf1ImoZkdSgnCV3Ajzw+BkMA
Ig==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:18 2026 by rpki-client