This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: mrjuQFA0ava8u0mXDwdheQi50kFkgRwsy6aK1Wzf6mQ=
Subject key identifier: 84:88:B4:C0:B6:BB:DD:F1:F4:3E:0D:18:CB:CA:9E:FE:42:A7:7C:3D
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019BF6BEFE89F981B74770FFC61D52115949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 13D4
Signing time: Sun 25 Jan 2026 20:01:10 +0000
Manifest this update: Sun 25 Jan 2026 20:01:10 +0000
Manifest next update: Mon 26 Jan 2026 20:01:10 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: Yi33TeeKPd0xUjHb73L6pB6DKHCl354FLg9RvC1+plY=)
2: BM26WSHmDXrBxfTRXw9OBN2bB5k.roa (hash: eTiUZXSOWwdAMhtFe/lHUOC73ALIZLmrUjbnWfXVaNc=)
3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
4: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
5: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
6: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
7: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
8: eeTRJICIDgN4JkjWbGf7_URm99g.roa (hash: mj84Q1Duee66N33HSly1ihLOIjdwFTJC4fdawSWCPqQ=)
9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:fe:89:f9:81:b7:47:70:ff:c6:1d:52:11:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 25 20:01:10 2026 GMT
Not After : Jan 26 20:01:10 2026 GMT
Subject: CN=8488b4c0b6bbddf1f43e0d18cbca9efe42a77c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:65:9f:34:16:46:23:3b:b8:e0:fd:6c:96:
5f:fd:2a:94:dc:8d:37:59:88:bb:40:50:f8:f3:2b:
22:69:bc:5c:60:ec:49:be:27:51:5f:99:49:bf:a9:
f2:3a:ef:02:80:6d:e2:8b:96:37:08:9a:ad:17:68:
d7:70:c7:d9:ea:df:08:e0:59:fc:e4:7a:97:97:55:
51:15:44:0c:58:20:37:ca:1c:1d:a0:92:7d:63:a9:
52:2d:f0:84:13:19:d2:a3:21:4e:80:26:c1:10:50:
15:31:ce:9f:dc:7b:dd:6c:ee:7c:7f:ee:df:8b:98:
cc:e6:32:2a:03:2f:e7:e8:e4:6b:d0:88:c9:1f:51:
34:85:46:1b:8d:67:ec:7c:6e:11:4f:c8:b9:3c:fa:
78:28:a2:63:7f:47:7d:67:fd:63:95:c7:f5:21:25:
1a:9f:d8:fb:30:54:5a:e4:1e:38:87:e5:1b:e2:c6:
07:f7:67:e2:47:ef:83:90:6c:d3:54:de:e1:f5:a9:
ae:70:44:6e:48:31:ca:21:ad:ff:7a:fb:e9:7d:d3:
21:cc:02:2f:00:e1:85:85:38:b5:d7:24:88:7c:e2:
8f:9c:02:7c:ca:3e:11:6f:a1:bf:80:3f:2a:9e:9d:
6c:7d:76:10:71:81:e2:4a:81:5e:c7:2c:dc:7e:52:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:B4:C0:B6:BB:DD:F1:F4:3E:0D:18:CB:CA:9E:FE:42:A7:7C:3D
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:62:82:2d:12:71:ec:44:04:a4:40:1d:e5:b6:07:f1:47:
49:cd:f9:a4:70:b2:25:3d:44:75:5c:78:e2:97:40:e2:a0:bb:
96:af:c0:3b:71:81:9c:6a:69:d8:e6:fb:f5:6c:e4:f0:aa:f6:
d8:bb:15:b3:9c:26:04:ae:e8:3c:c0:ea:1c:4e:80:80:99:7e:
c1:bf:d0:3c:74:de:69:36:31:cc:6d:54:f3:24:d4:2d:aa:1b:
68:e2:9d:ed:ff:92:62:32:17:1c:84:9e:90:3a:78:25:e1:bd:
e2:82:3b:19:58:56:47:53:b8:00:64:4f:58:bf:6a:fa:6e:5b:
b2:6a:44:11:a7:5d:49:14:45:c9:d8:66:c5:5f:94:56:6d:b0:
45:08:e5:6c:ff:11:91:2e:18:1d:91:49:0b:6e:fd:ca:0a:36:
75:96:8b:2c:10:19:0c:0d:d8:a0:72:46:0f:c6:8a:df:e6:ea:
a2:9d:cb:20:91:e2:ac:29:6f:39:ec:42:4c:4c:34:47:17:d1:
84:de:15:1f:7a:31:b8:a5:9f:2d:42:c2:9c:21:26:dd:09:ed:
5c:d0:7f:78:70:78:b0:32:92:ee:2a:65:80:6d:f5:3b:b9:61:
a8:d0:4b:7a:1f:9f:91:7e:47:74:59:68:b2:63:21:85:cf:29:
76:46:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:37 2026 by rpki-client