This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: gq5c+KL2rnKdO+TueYkZe8CA/2fUEFYS+cjPrnJ3PS4=
Subject key identifier: B6:3D:41:02:D4:E4:73:4D:9B:C8:E7:46:E9:9B:8E:69:54:F7:1F:7A
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 32533694252FCC31D22D07D74D79550F36E2C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 01A8
Signing time: Sun 01 Feb 2026 21:32:16 +0000
Manifest this update: Sun 01 Feb 2026 21:27:16 +0000
Manifest next update: Tue 03 Feb 2026 01:00:16 +0000
Files and hashes: 1: AS211695.asa (hash: 28JSq2d0bdBBVofVa06NM+Q3rZAfBJOiM+L29FXOPWg=)
2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: rYFkEQPuibRV2GsNAz9SuDhqSmzVIl6sSh10V6STAW0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:53:36:94:25:2f:cc:31:d2:2d:07:d7:4d:79:55:0f:36:e2:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Feb 1 21:27:16 2026 GMT
Not After : Feb 3 01:00:16 2026 GMT
Subject: CN=B63D4102D4E4734D9BC8E746E99B8E6954F71F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:22:03:fc:ad:b0:f7:2b:4f:e7:71:38:33:
10:0b:ff:54:5c:fc:c8:65:1f:25:70:80:45:4e:4c:
dd:e1:a7:41:91:b2:12:e8:99:31:a6:f7:e4:d0:c9:
c5:b4:55:aa:c8:c5:21:83:f9:7d:a1:bd:c0:a2:13:
96:8a:94:0a:8b:b9:a6:2f:5f:b2:c6:89:f0:83:4c:
fd:63:07:e5:ac:9c:51:95:2b:ec:f4:3b:c5:ae:b4:
c1:27:e3:c3:7a:ab:f4:f2:88:bf:0b:82:f6:6e:66:
f0:5f:32:ea:22:93:2d:04:e7:9b:82:24:21:e6:6c:
48:c1:56:77:88:34:47:c0:ff:30:ce:d2:3a:9e:6b:
5f:74:a1:0c:32:73:a1:f7:db:59:b4:ff:d8:e1:ea:
6d:10:cc:57:d0:7c:6b:f9:34:c0:0a:b7:7a:a4:b6:
9a:24:7e:79:7f:da:f1:91:c0:cc:4a:26:9d:c0:ed:
e9:46:70:13:b7:cf:05:dd:8c:ec:a8:bc:84:eb:28:
d4:99:01:fd:4c:3e:29:24:59:ec:f7:b9:77:93:18:
e0:e2:a2:5c:c5:3b:f6:a3:81:8c:3b:73:07:bd:b0:
6a:fd:0c:dd:9f:62:56:19:34:9f:d0:d6:00:b7:5c:
ec:52:e0:fd:d1:fa:fa:83:f6:d6:39:a5:80:dd:99:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:41:02:D4:E4:73:4D:9B:C8:E7:46:E9:9B:8E:69:54:F7:1F:7A
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ba:10:3e:5c:6c:7b:9d:f8:ce:86:08:0a:c5:33:d0:7d:4b:
23:3c:c1:7e:6f:d4:94:b8:0e:0a:60:f2:c8:54:72:cc:e5:00:
31:88:b1:60:97:60:f6:24:74:15:c0:9c:aa:95:dd:fb:6f:a8:
ab:4a:f9:72:a5:d1:9a:ad:1c:34:98:76:74:9b:6d:02:32:db:
98:38:c1:44:79:ce:ec:a5:01:60:c6:51:8e:a8:52:53:1b:92:
54:96:bd:df:56:15:68:81:87:94:48:b7:a3:dd:af:17:23:be:
e6:57:48:40:6c:d2:6b:16:1b:96:53:3c:ad:22:58:6e:48:b2:
6a:0b:dd:8d:cb:96:ff:4f:e7:ab:41:64:aa:47:32:1a:d1:6e:
8b:b0:96:26:fc:e7:7a:05:c3:b4:0b:95:18:ff:c2:2e:ab:fc:
d0:96:6b:42:23:0d:0f:db:d1:04:72:79:a8:60:84:b5:2a:c7:
ae:52:95:25:4c:f1:37:88:aa:0b:38:5e:27:d9:ff:33:ef:6e:
d3:7c:c1:c1:2b:34:82:92:44:37:e8:a0:f8:a7:e0:c6:d0:b8:
49:c5:a0:1a:d5:de:88:31:d8:c1:09:e7:72:f0:72:33:3e:6b:
32:34:52:1f:1b:b0:8a:dc:62:93:5c:33:ba:73:5f:ae:57:f7:
8b:6b:33:a7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMlM2lCUvzDHSLQfXTXlVDzbixJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGZiYWIxM2RiMTIzYzVkNjNkYmJjNTUwZDIxNGIzZTEw
YzA5MTk5ODAeFw0yNjAyMDEyMTI3MTZaFw0yNjAyMDMwMTAwMTZaMDMxMTAvBgNV
BAMTKEI2M0Q0MTAyRDRFNDczNEQ5QkM4RTc0NkU5OUI4RTY5NTRGNzFGN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi1SID/K2w9ytP53E4MxAL/1Rc
/MhlHyVwgEVOTN3hp0GRshLomTGm9+TQycW0VarIxSGD+X2hvcCiE5aKlAqLuaYv
X7LGifCDTP1jB+WsnFGVK+z0O8WutMEn48N6q/TyiL8LgvZuZvBfMuoiky0E55uC
JCHmbEjBVneINEfA/zDO0jqea190oQwyc6H321m0/9jh6m0QzFfQfGv5NMAKt3qk
tpokfnl/2vGRwMxKJp3A7elGcBO3zwXdjOyovITrKNSZAf1MPikkWez3uXeTGODi
olzFO/ajgYw7cwe9sGr9DN2fYlYZNJ/Q1gC3XOxS4P3R+vqD9tY5pYDdmU/NAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtj1BAtTkc02byOdG6ZuOaVT3H3owHwYDVR0j
BBgwFoAUj7qxPbEjxdY9u8VQ0hSz4QwJGZgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU0ZmQ3MzYtYmJjMC00ODgyLTg0ZTktNDRjYzg2Nzk1
ZGFkLzAvOEZCQUIxM0RCMTIzQzVENjNEQkJDNTUwRDIxNEIzRTEwQzA5MTk5OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2o3cXhQYkVqeGRZOXU4VlEwaFN6NFF3
SkdaZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNTRmZDczNi1i
YmMwLTQ4ODItODRlOS00NGNjODY3OTVkYWQvMC84RkJBQjEzREIxMjNDNUQ2M0RC
QkM1NTBEMjE0QjNFMTBDMDkxOTk4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7oQPlxse534zoYICsUz
0H1LIzzBfm/UlLgOCmDyyFRyzOUAMYixYJdg9iR0FcCcqpXd+2+oq0r5cqXRmq0c
NJh2dJttAjLbmDjBRHnO7KUBYMZRjqhSUxuSVJa931YVaIGHlEi3o92vFyO+5ldI
QGzSaxYbllM8rSJYbkiyagvdjcuW/0/nq0FkqkcyGtFui7CWJvznegXDtAuVGP/C
Lqv80JZrQiMND9vRBHJ5qGCEtSrHrlKVJUzxN4iqCzheJ9n/M+9u03zBwSs0gpJE
N+ig+KfgxtC4ScWgGtXeiDHYwQnncvByMz5rMjRSHxuwitxik1wzunNfrlf3i2sz
pw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:28 2026 by rpki-client