This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json) Hash identifier: 7xjQntbv6uVnXlLqm8lz5nHRXOVcuS6m5AbOeFPskQU= Subject key identifier: 6B:11:22:82:3A:28:8E:95:F3:48:26:77:BC:C9:58:C0:30:E7:D9:C3 Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02 Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402 Certificate serial: 019C432243BBA04AE5FBEFCD21855C87CF16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft Manifest number: 154A Signing time: Mon 09 Feb 2026 16:00:44 +0000 Manifest this update: Mon 09 Feb 2026 16:00:44 +0000 Manifest next update: Tue 10 Feb 2026 16:00:44 +0000 Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: qB2s5lG010tNnwdEbBG0o0YPHzvBRRouEETJ1H6L4TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:43:bb:a0:4a:e5:fb:ef:cd:21:85:5c:87:cf:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402 Validity Not Before: Feb 9 16:00:44 2026 GMT Not After : Feb 10 16:00:44 2026 GMT Subject: CN=6b1122823a288e95f3482677bcc958c030e7d9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:dd:ea:87:bd:7e:ac:4c:fb:a0:5e:bf:e3: 99:ef:f8:9b:55:8e:d6:1d:25:93:14:1c:94:85:de: cc:b0:06:e0:7b:7f:5f:c3:85:32:d5:6b:2c:31:22: fe:df:06:0b:a0:c9:2a:3e:46:35:92:9b:60:81:2a: 5d:d1:ac:40:f2:a0:c3:58:db:6f:10:a0:66:56:40: b8:ae:a2:85:e3:25:af:c8:fc:26:a6:15:e4:94:99: 53:92:37:ab:91:83:75:71:45:bc:30:65:0f:67:88: 15:c9:a0:21:2d:67:fb:9e:b7:bb:4e:3c:28:a3:8b: c7:17:08:fa:c0:2b:c1:c4:c4:e9:00:9d:57:db:7f: 37:bf:6e:e9:25:44:a3:7a:6d:0c:1c:a2:6f:2f:6f: ed:0f:8a:fc:db:e0:be:8c:78:26:45:80:05:0c:08: d5:c3:74:99:06:8a:f9:94:54:4d:bb:c6:13:96:a3: fc:85:1f:de:27:33:c5:e5:fd:38:d1:e5:45:1b:95: 9d:01:26:ac:78:01:72:6a:a1:d3:46:93:37:1b:67: 62:6b:c2:34:30:25:57:ab:87:43:19:79:56:16:27: 4a:01:07:5b:83:df:ca:91:8b:28:f1:4f:c6:cb:06: 29:5c:e9:ba:bd:c8:f8:07:7f:e4:3c:30:32:f3:d5: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:22:82:3A:28:8E:95:F3:48:26:77:BC:C9:58:C0:30:E7:D9:C3 X509v3 Authority Key Identifier: keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ea:b6:7b:cd:4d:09:da:a5:75:0f:f6:be:ef:ae:d3:53:9e: 0a:1b:d4:c4:f9:f4:a1:7a:4d:88:54:39:55:00:94:7e:2a:95: a3:f3:7a:f4:94:e6:cd:d6:4a:d5:fa:e6:23:70:4a:2e:bd:5a: 53:84:0b:e2:c1:2c:4e:9c:d8:4b:7a:14:1d:75:5d:d9:47:6a: 02:e0:29:3c:d4:3a:b0:68:52:8e:b6:cf:77:32:e0:4b:bd:53: ed:27:00:2f:3b:e6:2a:78:ed:e3:75:a0:10:e4:6b:91:25:57: da:24:46:3c:39:48:e4:b3:24:db:9f:1d:4c:70:c1:1f:b1:ec: 28:65:3c:ca:02:cd:50:e2:07:b6:e7:31:89:f0:fe:ed:8d:f5: 77:49:b2:87:9a:77:fa:2b:40:f5:00:7d:4d:5d:d1:96:65:d0: dd:df:58:f4:3e:0b:86:ea:88:ae:e7:0b:c6:f2:72:c3:62:58: 8d:4e:51:d1:08:96:3f:91:d9:e4:4b:e5:8d:3b:d4:76:8b:2a: 8a:ae:5e:79:6f:ee:2a:c5:34:c0:4f:c8:a3:c2:a0:be:c0:3f: f8:1d:18:42:fd:98:0f:00:94:ff:ae:7d:bf:b0:86:1c:ec:13: e0:18:92:3f:f7:7b:17:31:81:6c:cb:14:3f:34:69:18:62:c1: c0:00:e2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkO7oErl++/NIYVch88WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2 OWE0MDIwHhcNMjYwMjA5MTYwMDQ0WhcNMjYwMjEwMTYwMDQ0WjAzMTEwLwYDVQQD Eyg2YjExMjI4MjNhMjg4ZTk1ZjM0ODI2NzdiY2M5NThjMDMwZTdkOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuazd6oe9fqxM+6Bev+OZ7/ibVY7W HSWTFByUhd7MsAbge39fw4Uy1WssMSL+3wYLoMkqPkY1kptggSpd0axA8qDDWNtv EKBmVkC4rqKF4yWvyPwmphXklJlTkjerkYN1cUW8MGUPZ4gVyaAhLWf7nre7Tjwo o4vHFwj6wCvBxMTpAJ1X2383v27pJUSjem0MHKJvL2/tD4r82+C+jHgmRYAFDAjV w3SZBor5lFRNu8YTlqP8hR/eJzPF5f040eVFG5WdASaseAFyaqHTRpM3G2dia8I0 MCVXq4dDGXlWFidKAQdbg9/KkYso8U/GywYpXOm6vcj4B3/kPDAy89WcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsRIoI6KI6V80gmd7zJWMAw59nDMB8GA1UdIwQY MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0 LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeq2e81N CdqldQ/2vu+u01OeChvUxPn0oXpNiFQ5VQCUfiqVo/N69JTmzdZK1frmI3BKLr1a U4QL4sEsTpzYS3oUHXVd2UdqAuApPNQ6sGhSjrbPdzLgS71T7ScALzvmKnjt43Wg EORrkSVX2iRGPDlI5LMk258dTHDBH7HsKGU8ygLNUOIHtucxifD+7Y31d0myh5p3 +itA9QB9TV3RlmXQ3d9Y9D4LhuqIrucLxvJyw2JYjU5R0QiWP5HZ5EvljTvUdosq iq5eeW/uKsU0wE/Io8KgvsA/+B0YQv2YDwCU/659v7CGHOwT4BiSP/d7FzGBbMsU PzRpGGLBwADiBw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:26 2026 by rpki-client