This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json) Hash identifier: JScT62g+x/T8Okbht2zZ2xjrJ9YXFypGiUmQsigZgnw= Subject key identifier: C6:51:6D:E0:66:92:29:9C:C9:11:04:19:01:7C:69:C8:B4:18:9F:ED Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e Certificate serial: 019C427D3BC60E0C5F1879274644668AE7FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft Manifest number: 1291 Signing time: Mon 09 Feb 2026 13:00:29 +0000 Manifest this update: Mon 09 Feb 2026 13:00:29 +0000 Manifest next update: Tue 10 Feb 2026 13:00:29 +0000 Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: VZrUIDGdCqgX4Jh6pMpvPkX7xDzf5ZEEs3E/t4I3v3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:3b:c6:0e:0c:5f:18:79:27:46:44:66:8a:e7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e Validity Not Before: Feb 9 13:00:29 2026 GMT Not After : Feb 10 13:00:29 2026 GMT Subject: CN=c6516de06692299cc9110419017c69c8b4189fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:e6:a7:c7:20:91:8d:a0:d8:13:53:db:a2: 1d:54:af:2b:e8:98:3f:c7:cb:c6:34:1b:6b:fd:09: a0:30:fb:78:71:05:b4:d4:88:43:c3:e4:12:6c:c5: df:c5:93:8d:5c:c1:0c:9a:f8:77:1c:55:2a:d0:66: 52:42:ec:1b:fb:9d:8e:04:9a:2c:7d:06:dc:4c:f3: bc:21:8a:03:e2:ce:62:27:44:c0:27:2a:53:da:79: 79:9e:ac:f2:15:ad:55:ea:be:21:2d:01:fe:80:e2: 80:23:98:c5:c4:83:d3:5a:73:d9:74:2d:46:06:89: b0:ea:99:3d:cf:8a:2f:59:a8:46:6a:ab:0d:ec:26: 11:24:4f:72:ca:27:63:0d:00:f9:17:85:40:8a:3b: c6:40:b7:4e:45:7e:bd:5e:d5:42:80:6a:0c:53:65: 9e:e5:0e:46:4c:9f:1d:b4:b1:3d:60:c5:31:b1:af: 20:6a:92:5b:f0:fb:88:1d:22:36:c3:3d:49:aa:2a: b5:28:d1:09:08:92:bc:3d:ee:06:3f:34:ca:ef:e0: b0:ea:89:e8:3a:b7:3b:7c:31:75:5a:43:7c:1b:41: c2:00:51:9d:3d:3d:c4:e5:e6:3a:99:22:ef:61:7f: 59:60:2c:f3:23:11:6d:40:bf:4b:41:e4:59:47:36: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:51:6D:E0:66:92:29:9C:C9:11:04:19:01:7C:69:C8:B4:18:9F:ED X509v3 Authority Key Identifier: keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:ba:48:63:62:32:09:23:19:f2:1b:bc:b8:12:73:1d:88: 1b:07:b1:6b:22:01:ff:e3:b2:e0:81:30:80:62:fd:af:39:9d: e7:44:98:ea:4e:c9:72:e0:44:87:4e:cf:db:50:a8:7c:32:f6: 5c:3f:bc:83:03:10:a0:7c:e0:c4:f1:5f:2c:79:68:29:d3:c6: 42:4a:a3:92:9f:f6:0e:7f:d3:d0:8f:94:b5:c5:16:b7:64:b8: 94:fe:5b:10:cb:6c:f4:cd:71:f7:46:f6:4b:87:ec:67:86:a3: a6:7e:bb:41:0d:75:59:85:59:a6:48:e3:2d:0c:f7:23:2b:42: 73:7f:60:02:32:46:3a:26:6a:23:19:91:33:57:f3:05:71:c6: f6:3a:45:3e:d5:8c:eb:eb:d5:28:f6:33:5c:0d:c3:41:ef:6c: 33:47:dc:94:d3:76:4c:83:6e:7c:dd:a1:62:50:d5:d9:8e:2d: a7:32:82:23:c8:8d:07:c9:20:47:f9:f1:3c:e6:8c:b1:c8:50: 79:01:dc:c2:70:f2:18:5d:c6:0d:e5:3a:ff:0a:38:6e:68:65: 64:69:28:c6:48:76:ff:2f:4a:2d:39:5f:95:63:bc:69:4c:f3: ca:d4:1b:d6:f3:6a:45:c8:b7:ac:2f:af:f0:b3:93:5a:32:06: 51:3b:ed:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTvGDgxfGHknRkRmiuf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTg1MTY3MDRmNTc0OTI4MzViOTRkMDA3MDI3MzI4YzIy ZmE0MGUwHhcNMjYwMjA5MTMwMDI5WhcNMjYwMjEwMTMwMDI5WjAzMTEwLwYDVQQD EyhjNjUxNmRlMDY2OTIyOTljYzkxMTA0MTkwMTdjNjljOGI0MTg5ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPfmp8cgkY2g2BNT26IdVK8r6Jg/ x8vGNBtr/QmgMPt4cQW01IhDw+QSbMXfxZONXMEMmvh3HFUq0GZSQuwb+52OBJos fQbcTPO8IYoD4s5iJ0TAJypT2nl5nqzyFa1V6r4hLQH+gOKAI5jFxIPTWnPZdC1G Bomw6pk9z4ovWahGaqsN7CYRJE9yyidjDQD5F4VAijvGQLdORX69XtVCgGoMU2We 5Q5GTJ8dtLE9YMUxsa8gapJb8PuIHSI2wz1Jqiq1KNEJCJK8Pe4GPzTK7+Cw6ono Orc7fDF1WkN8G0HCAFGdPT3E5eY6mSLvYX9ZYCzzIxFtQL9LQeRZRzbq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZRbeBmkimcyREEGQF8aci0GJ/tMB8GA1UdIwQY MBaAFPKoUWcE9XSSg1uU0AcCcyjCL6QOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODkt N2Q0ZDk0MWEzN2QxLzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODktN2Q0ZDk0MWEzN2Qx LzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErC6SGNi MgkjGfIbvLgScx2IGwexayIB/+Oy4IEwgGL9rzmd50SY6k7JcuBEh07P21CofDL2 XD+8gwMQoHzgxPFfLHloKdPGQkqjkp/2Dn/T0I+UtcUWt2S4lP5bEMts9M1x90b2 S4fsZ4ajpn67QQ11WYVZpkjjLQz3IytCc39gAjJGOiZqIxmRM1fzBXHG9jpFPtWM 6+vVKPYzXA3DQe9sM0fclNN2TINufN2hYlDV2Y4tpzKCI8iNB8kgR/nxPOaMschQ eQHcwnDyGF3GDeU6/wo4bmhlZGkoxkh2/y9KLTlflWO8aUzzytQb1vNqRci3rC+v 8LOTWjIGUTvt7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:04 2026 by rpki-client