This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier: Jx0WwRuQkdee/6XiqcgSTs94RevOlnsFK4WvJZLGz3o=
Subject key identifier: F5:BF:CF:5F:99:5C:63:57:FB:A3:C5:FB:57:ED:09:61:8F:03:D6:76
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 019BF5E2FDF7739707DA1D6ED5D788885CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 16:00:52 +0000
Manifest this update: Sun 25 Jan 2026 16:00:52 +0000
Manifest next update: Mon 26 Jan 2026 16:00:52 +0000
Files and hashes: 1: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: esr2gviY5deICcaXtI3IrPZ3KDT9FOhK2d9V51AFcqI=)
2: 8hVawCDbKfLGVmy8uR3L6HSyhjY.roa (hash: YVD0bBTAjI7+lAMuKAykSFrhVddz0zyQETcTt1yWfGY=)
3: bo4jTmLbavInVB1_Xe56jT6duFc.roa (hash: DrLAswJfulupBgy+nF1dC9JnLY+ojBgEGF1LnkBTmLQ=)
4: l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa (hash: HVy6JnYfA7DiKZs/nj6ujUr8Qm/xOl9atbOQ23YdxGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e2:fd:f7:73:97:07:da:1d:6e:d5:d7:88:88:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 25 16:00:52 2026 GMT
Not After : Jan 26 16:00:52 2026 GMT
Subject: CN=f5bfcf5f995c6357fba3c5fb57ed09618f03d676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:4b:58:b6:da:ec:c0:57:ce:24:ed:c9:3c:
b3:4a:c4:fe:27:a3:7f:08:86:00:33:c1:92:ca:18:
e9:ad:90:c2:eb:27:26:dd:a3:4d:82:e6:7e:dc:c2:
a9:62:4f:7e:17:83:1c:ae:9d:4f:3a:ed:13:bb:9a:
a5:a1:aa:29:94:31:fe:44:fe:8a:69:21:b7:c7:60:
48:3e:56:aa:7a:46:2d:4f:e1:3f:4c:f5:22:68:94:
e0:fe:b1:36:b0:83:4a:e1:2c:5d:3a:f9:d0:a6:de:
a9:6f:c7:a4:e6:71:5b:a2:d8:5c:ad:20:9c:1b:7d:
e7:f5:55:f6:c2:cf:37:d9:12:81:f1:eb:1a:71:c0:
ee:6f:c2:9c:1d:d4:05:8a:5e:f3:d7:bf:85:a2:73:
e3:3d:de:a4:58:15:eb:b3:3b:f6:ba:9a:1d:17:78:
db:1b:40:38:ff:cb:33:9d:ce:f7:83:78:bd:84:80:
91:7d:b9:e3:d7:62:18:15:e8:ac:4a:90:3a:f7:09:
ea:12:74:31:78:9b:b2:31:61:60:fc:c0:88:c2:8b:
71:ec:04:0b:07:73:20:dd:f8:b3:a8:70:77:2a:45:
a3:59:bb:09:f7:6e:f8:8d:5c:a0:cb:da:a5:90:3f:
6a:88:1c:83:50:21:d4:01:29:76:75:f7:88:2f:cc:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:CF:5F:99:5C:63:57:FB:A3:C5:FB:57:ED:09:61:8F:03:D6:76
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:2d:be:07:92:40:11:47:58:a8:5e:52:67:e3:70:5d:3f:
87:8f:7d:b5:43:d7:b9:f0:4d:de:c5:00:82:9b:53:d3:3f:60:
bb:7e:5d:d0:86:23:ec:fd:cf:a8:8c:dd:73:3c:d6:65:94:e5:
67:55:88:9a:b6:dc:c1:5b:b1:a4:e5:6d:b9:6b:7d:45:13:40:
b8:ba:de:ac:51:7e:22:23:4e:b4:90:47:be:8f:99:df:53:7a:
2d:f8:89:9b:1f:21:aa:ab:6b:31:7f:40:c5:fc:51:f5:8b:a4:
83:eb:80:ba:2e:25:aa:5e:43:ff:ab:a5:03:db:89:c1:dc:f0:
1f:a9:e9:2e:c9:06:56:fb:bb:81:03:ee:9c:a2:b0:76:c8:20:
a0:33:26:03:ec:ac:05:fd:23:b7:78:59:4c:07:30:da:03:ec:
f5:75:9b:ac:a5:c1:95:60:5e:94:19:36:7c:92:41:72:12:e3:
e8:82:35:0a:ad:b6:d3:09:d5:b5:15:4c:11:3f:9f:1f:6f:92:
c9:78:02:ca:98:62:2e:b4:c9:fa:1d:22:bf:11:db:f8:38:e8:
d9:6b:5d:7f:64:35:27:c0:29:6e:74:43:d6:10:55:f4:04:99:
a1:8b:5a:85:1d:30:b1:69:d2:83:63:de:eb:91:46:70:78:2a:
60:c5:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:41 2026 by rpki-client