This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json) Hash identifier: NdoXNFQRpGo4v6fNsU2pYDzYHmJKsSlb87aQNwuWouA= Subject key identifier: B1:B2:43:36:D2:BE:8B:21:A3:E6:10:B1:77:B7:29:71:D3:8F:A6:DB Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Certificate serial: 019C446C4CAEF46C9762F8EF4EA490568D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft Manifest number: 0167 Signing time: Mon 09 Feb 2026 22:01:13 +0000 Manifest this update: Mon 09 Feb 2026 22:01:13 +0000 Manifest next update: Tue 10 Feb 2026 22:01:13 +0000 Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: +qG5YjQSYIjIsCKF2ohy15v0NjhkEICqQyHBSv/HwrQ=) 2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:4c:ae:f4:6c:97:62:f8:ef:4e:a4:90:56:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Validity Not Before: Feb 9 22:01:13 2026 GMT Not After : Feb 10 22:01:13 2026 GMT Subject: CN=b1b24336d2be8b21a3e610b177b72971d38fa6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:84:8c:cf:94:d0:61:93:12:11:f4:70:02: 5d:40:3a:85:e0:a0:f7:fd:4f:48:2e:25:0c:a1:7e: f3:89:32:18:59:7b:c1:a4:79:de:64:8c:be:24:a2: 68:ce:b9:72:0a:2e:c5:ce:4d:81:13:02:bd:aa:ea: 47:5e:26:11:75:87:3c:a2:30:4f:8c:19:cb:79:11: db:01:cc:90:4e:dc:7b:fb:c7:8c:3a:74:a6:68:de: 24:20:5a:11:a8:e7:aa:fc:60:7f:27:ae:d4:92:8d: 29:1a:f9:9f:f6:45:4b:b5:35:7c:d1:d4:73:71:9f: fa:da:36:bd:6b:13:08:7c:b0:ba:4e:60:79:fd:f8: 5f:6d:39:29:23:80:b7:32:6e:a1:e6:c4:31:93:9e: 93:0c:0d:f3:20:6d:9a:42:a3:54:6d:72:20:40:cb: 10:e8:8f:f6:0d:1f:dc:6d:a5:fc:04:d9:cc:60:3b: 3c:fb:a1:7a:2e:9c:4d:11:34:8f:70:2f:3a:2b:1e: 8b:ec:1e:ec:f5:e5:79:35:05:1e:51:ff:64:32:a0: f2:4e:6a:ba:6a:1d:57:3e:38:78:d1:fe:68:b9:86: 44:84:aa:e3:94:45:52:54:49:fe:c9:e3:aa:2b:4d: 2e:cc:17:4e:84:a9:dd:34:21:7b:77:3b:b1:fc:ad: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B2:43:36:D2:BE:8B:21:A3:E6:10:B1:77:B7:29:71:D3:8F:A6:DB X509v3 Authority Key Identifier: keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0f:f4:62:5f:4a:de:0a:25:4f:5f:c9:ba:8d:87:62:6e:d5: c5:f1:94:60:c1:12:50:a5:88:0e:51:96:a0:41:8f:9a:88:4f: 31:01:ae:ce:b7:c2:23:59:29:27:a2:a2:27:a6:ce:07:43:e7: 98:dc:3e:09:4a:ed:7f:44:62:11:eb:6f:46:69:a7:31:7d:a8: f0:3e:00:3e:84:28:2b:b2:62:ea:7a:3b:f3:08:3a:03:bb:b3: 28:87:80:5c:0f:d1:9c:48:02:30:98:ae:7e:9a:9c:11:4f:55: b2:71:3c:36:87:8f:b9:5b:b3:28:a4:d9:b8:70:c2:9b:e3:dc: ea:e7:01:94:bf:b1:20:66:c9:a9:f9:77:96:a4:80:2d:21:74: 1a:9e:8d:f4:e2:53:e0:ad:ef:83:cd:b1:73:17:68:f9:87:ff: c5:c4:be:3e:de:63:80:86:85:78:17:33:c9:3c:9c:82:f7:6b: 85:ca:61:a5:6c:60:2a:5b:a4:87:98:e5:5e:59:da:60:48:75: f8:bd:3f:e9:19:44:d6:cd:aa:79:66:86:9a:00:3c:c3:b5:e5: 33:ed:3f:92:6a:8f:f9:23:7e:a5:7a:0b:a0:85:c1:4d:8b:fe: 0c:a2:b6:2d:df:f5:53:57:84:2a:26:35:2c:ec:af:ea:36:88: d5:f1:10:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEyu9GyXYvjvTqSQVo2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2 ZWM2MzMwHhcNMjYwMjA5MjIwMTEzWhcNMjYwMjEwMjIwMTEzWjAzMTEwLwYDVQQD EyhiMWIyNDMzNmQyYmU4YjIxYTNlNjEwYjE3N2I3Mjk3MWQzOGZhNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5KEjM+U0GGTEhH0cAJdQDqF4KD3 /U9ILiUMoX7ziTIYWXvBpHneZIy+JKJozrlyCi7Fzk2BEwK9qupHXiYRdYc8ojBP jBnLeRHbAcyQTtx7+8eMOnSmaN4kIFoRqOeq/GB/J67Uko0pGvmf9kVLtTV80dRz cZ/62ja9axMIfLC6TmB5/fhfbTkpI4C3Mm6h5sQxk56TDA3zIG2aQqNUbXIgQMsQ 6I/2DR/cbaX8BNnMYDs8+6F6LpxNETSPcC86Kx6L7B7s9eV5NQUeUf9kMqDyTmq6 ah1XPjh40f5ouYZEhKrjlEVSVEn+yeOqK00uzBdOhKndNCF7dzux/K1TWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGyQzbSvosho+YQsXe3KXHTj6bbMB8GA1UdIwQY MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4 LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApg/0Yl9K 3golT1/Juo2HYm7VxfGUYMESUKWIDlGWoEGPmohPMQGuzrfCI1kpJ6KiJ6bOB0Pn mNw+CUrtf0RiEetvRmmnMX2o8D4APoQoK7Ji6no78wg6A7uzKIeAXA/RnEgCMJiu fpqcEU9VsnE8NoePuVuzKKTZuHDCm+Pc6ucBlL+xIGbJqfl3lqSALSF0Gp6N9OJT 4K3vg82xcxdo+Yf/xcS+Pt5jgIaFeBczyTycgvdrhcphpWxgKlukh5jlXlnaYEh1 +L0/6RlE1s2qeWaGmgA8w7XlM+0/kmqP+SN+pXoLoIXBTYv+DKK2Ld/1U1eEKiY1 LOyv6jaI1fEQ6g== -----END CERTIFICATE-----Generated at Tue Feb 10 07:33:37 2026 by rpki-client