This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json) Hash identifier: pxYZUCXeIRnazmkxRkdMVRFb65ZqyYqvihiOxalEyRU= Subject key identifier: 33:B1:92:0C:15:96:B5:6E:E0:EB:DF:12:A8:EB:5E:69:A2:B4:7E:20 Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Certificate serial: 019C42B404E3B3CF2F04F921F8FB79827FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft Manifest number: 11D0 Signing time: Mon 09 Feb 2026 14:00:19 +0000 Manifest this update: Mon 09 Feb 2026 14:00:19 +0000 Manifest next update: Tue 10 Feb 2026 14:00:19 +0000 Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: XAVLV7jrMl/UdR/NZUE/G7f9tCd/hNKoJxS3ZZP8Lbs=) 2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:04:e3:b3:cf:2f:04:f9:21:f8:fb:79:82:7f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Validity Not Before: Feb 9 14:00:19 2026 GMT Not After : Feb 10 14:00:19 2026 GMT Subject: CN=33b1920c1596b56ee0ebdf12a8eb5e69a2b47e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:16:47:8c:cb:97:78:37:c5:54:cb:a6:32: bc:f3:98:47:23:14:31:ea:5d:85:d0:93:f6:22:5d: 58:ee:8b:4c:dd:b5:8e:bd:8a:3a:0c:cb:d0:e9:4e: 94:3f:e4:5f:8e:12:69:ae:fa:e4:3d:09:0c:59:fc: 82:d6:19:16:fd:3b:70:e4:5d:75:da:75:98:65:7a: d9:9d:b6:ae:38:b4:fa:82:c4:29:bd:a1:55:65:98: 21:67:20:ea:b5:40:3b:2c:36:9d:a7:d1:9b:18:98: 82:d8:84:fb:75:6a:6a:1a:dd:13:59:13:25:fd:22: 7f:08:ef:c8:7e:ca:8b:c0:3c:7c:6f:dc:e3:aa:2a: 22:e7:71:89:d2:26:8f:16:c8:fc:19:28:c0:73:a8: 47:43:e3:8b:57:43:ac:70:60:ad:9d:df:42:12:a1: d4:0d:bf:0c:cd:38:6f:7c:9c:bf:ff:4f:76:32:e6: 90:c9:e7:72:c7:af:dd:0c:99:2d:ba:c5:ac:bc:60: f7:fe:c3:53:36:3a:7c:28:25:01:d8:c5:99:bb:f6: 87:32:ec:27:57:69:4a:a3:e8:1d:d9:29:da:d4:66: 8e:c4:86:2f:20:b4:85:1c:11:cf:3d:08:8f:88:35: 0f:cf:47:a8:75:90:56:61:6a:90:80:ef:ae:4c:c9: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B1:92:0C:15:96:B5:6E:E0:EB:DF:12:A8:EB:5E:69:A2:B4:7E:20 X509v3 Authority Key Identifier: keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ca:37:6f:34:72:64:c7:08:a4:03:71:1b:bc:cb:40:ee:1d: 6d:5f:71:63:41:0a:8d:4a:ce:14:3c:b8:0a:a3:a1:d1:2a:ce: 2b:99:8e:67:73:f7:35:97:2a:0b:cb:e4:65:05:df:ef:2b:5a: 4a:94:ae:e5:81:7d:a1:e2:86:94:50:24:00:3f:d1:4c:e1:d4: 1f:84:27:a0:df:4d:c9:b7:90:07:70:ad:9a:a6:1d:3f:db:6b: e8:e5:95:99:11:d4:df:46:e6:05:96:13:dc:90:ce:23:c8:7a: 5e:77:78:4c:0c:23:63:c9:9d:91:27:50:a0:ea:d4:3c:6a:a3: 97:96:fe:2e:7b:ad:2b:ef:55:f7:f1:db:f6:85:78:2c:c3:75: 96:dd:5b:df:cd:c2:a3:a3:22:a3:bd:24:09:fc:f9:2e:4c:f2: 2e:5d:1f:3c:87:fb:4c:7e:1e:03:85:48:d9:c0:35:e6:52:48: 60:d5:10:92:d9:f7:e0:23:a1:06:af:38:03:cd:47:63:cd:c2: b7:4f:d5:43:1e:00:77:5c:76:d3:75:a3:3d:eb:3d:d5:d3:8c: 10:c5:9c:de:52:8a:c5:eb:c7:49:35:65:8d:a9:97:78:72:28: fe:27:73:9b:67:ab:11:7a:c4:5a:a8:e3:72:54:24:70:af:b8: dd:f8:3a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtATjs88vBPkh+Pt5gn/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzhiMTBhMzhmODFjNjRlMjAxMjA3YmZjMzU0NGMyOTcy YWY1ZjMwHhcNMjYwMjA5MTQwMDE5WhcNMjYwMjEwMTQwMDE5WjAzMTEwLwYDVQQD EygzM2IxOTIwYzE1OTZiNTZlZTBlYmRmMTJhOGViNWU2OWEyYjQ3ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYwWR4zLl3g3xVTLpjK885hHIxQx 6l2F0JP2Il1Y7otM3bWOvYo6DMvQ6U6UP+RfjhJprvrkPQkMWfyC1hkW/Ttw5F11 2nWYZXrZnbauOLT6gsQpvaFVZZghZyDqtUA7LDadp9GbGJiC2IT7dWpqGt0TWRMl /SJ/CO/IfsqLwDx8b9zjqioi53GJ0iaPFsj8GSjAc6hHQ+OLV0OscGCtnd9CEqHU Db8MzThvfJy//092MuaQyedyx6/dDJktusWsvGD3/sNTNjp8KCUB2MWZu/aHMuwn V2lKo+gd2Sna1GaOxIYvILSFHBHPPQiPiDUPz0eodZBWYWqQgO+uTMkKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOxkgwVlrVu4OvfEqjrXmmitH4gMB8GA1UdIwQY MBaAFNPIsQo4+Bxk4gEge/w1RMKXKvXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEt MzdhYTM1ZTY5ZGMxLzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEtMzdhYTM1ZTY5ZGMx LzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJco3bzRy ZMcIpANxG7zLQO4dbV9xY0EKjUrOFDy4CqOh0SrOK5mOZ3P3NZcqC8vkZQXf7yta SpSu5YF9oeKGlFAkAD/RTOHUH4QnoN9NybeQB3CtmqYdP9tr6OWVmRHU30bmBZYT 3JDOI8h6Xnd4TAwjY8mdkSdQoOrUPGqjl5b+LnutK+9V9/Hb9oV4LMN1lt1b383C o6Mio70kCfz5LkzyLl0fPIf7TH4eA4VI2cA15lJIYNUQktn34COhBq84A81HY83C t0/VQx4Ad1x203WjPes91dOMEMWc3lKKxevHSTVljamXeHIo/idzm2erEXrEWqjj clQkcK+43fg64w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:20 2026 by rpki-client