This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json) Hash identifier: z4/fZxaC5vpfhWaLFnL2lhZkuuK97ebocWAhQ9Hd0SE= Subject key identifier: 8C:C1:3C:AB:96:72:29:B8:0E:F2:03:60:03:80:A9:69:38:A7:53:32 Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Certificate serial: 019C41D8B066F6B915F5A6298354B19EA29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 10:00:45 +0000 Manifest this update: Mon 09 Feb 2026 10:00:45 +0000 Manifest next update: Tue 10 Feb 2026 10:00:45 +0000 Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: WxKbJII63Rt1D/YkFNtLZWZfwLswpXtfK72SXQW+nNQ=) 2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b0:66:f6:b9:15:f5:a6:29:83:54:b1:9e:a2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Validity Not Before: Feb 9 10:00:45 2026 GMT Not After : Feb 10 10:00:45 2026 GMT Subject: CN=8cc13cab967229b80ef203600380a96938a75332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:a9:b5:3c:57:98:70:cf:6a:18:f5:92:06: 29:78:ce:68:0c:c0:d8:60:6b:36:91:65:ea:63:2a: c2:e8:09:88:c9:42:78:59:de:81:ad:41:4f:15:d4: 62:a2:4e:d1:7a:88:4a:ff:8d:5d:b3:8b:4c:1d:2e: f0:ac:fd:6f:d2:60:bf:7d:b8:1e:db:77:08:6c:6b: 02:c8:cb:0e:f1:04:f6:50:c6:e9:b9:6e:f9:d1:eb: 5f:77:a7:77:4d:5b:fb:23:f9:ae:92:e1:0e:70:a1: 66:c3:08:c4:11:47:a6:d9:ca:3f:90:04:db:67:ac: b4:2f:2a:c6:cf:7c:b0:e5:40:38:30:5c:6e:2e:08: e1:9b:29:f7:f6:55:81:82:d1:e3:c3:a6:3b:cc:7f: f0:a4:f2:65:16:8c:9f:20:0a:18:43:3d:f9:70:00: 48:50:49:82:b0:bb:32:e0:f9:47:72:2d:89:ac:da: e4:e6:9e:3b:cf:01:2a:1a:6f:ab:bc:3f:b6:bb:b7: 25:6e:11:da:73:59:80:13:e1:1a:d4:24:8a:8d:a1: 23:ec:b2:b8:a6:51:6a:83:9f:58:6b:2a:a2:7f:54: c7:2a:b8:04:91:bc:6e:ff:d4:02:56:33:d5:4f:6f: 5c:ab:19:49:35:39:95:37:b8:38:65:ac:c6:67:24: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:3C:AB:96:72:29:B8:0E:F2:03:60:03:80:A9:69:38:A7:53:32 X509v3 Authority Key Identifier: keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2d:5a:1e:6b:8e:d2:dd:79:6b:5f:f8:4f:b6:4e:a3:e0:e7: 79:d7:4e:bb:27:15:f7:2d:ed:f2:e6:bf:be:84:da:e8:8d:c3: 5b:74:64:0e:ab:ba:33:2d:fa:ae:c0:b5:8e:8c:83:06:2e:c1: e9:bf:c4:cf:19:c5:c2:f5:f4:6b:8c:9c:54:67:96:b9:fa:01: 29:4d:cf:50:a0:77:d1:1f:ed:55:df:f7:39:6c:c9:63:78:af: e9:0a:95:56:55:24:c7:8a:fe:ff:5b:55:07:54:12:c1:bc:aa: e9:70:0c:3e:63:52:31:f2:9a:0f:44:7d:ba:b7:c9:a3:f9:b5: 12:ae:8b:ed:a5:4c:d1:cc:41:ae:40:dd:10:9a:0d:6b:70:aa: 18:46:0e:95:9f:64:03:5d:17:be:6c:3c:da:8d:38:4c:33:30: f9:da:10:69:d0:fe:d1:e8:e3:0e:36:75:e4:27:c8:f2:2d:0d: f0:f9:4e:e8:0e:18:af:57:77:a0:68:e5:dd:4b:46:04:0c:52: 2f:72:0f:50:4a:d6:d0:66:56:b7:d3:1c:3d:6e:7e:70:05:15: a9:f9:ff:04:2a:7a:43:20:7d:fa:00:ff:8c:83:a3:8b:87:05: 86:8c:79:e0:3b:bc:4d:b8:26:bf:17:51:91:61:b2:ed:de:32: be:d3:f3:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LBm9rkV9aYpg1SxnqKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw OGUyZTIwHhcNMjYwMjA5MTAwMDQ1WhcNMjYwMjEwMTAwMDQ1WjAzMTEwLwYDVQQD Eyg4Y2MxM2NhYjk2NzIyOWI4MGVmMjAzNjAwMzgwYTk2OTM4YTc1MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ6ptTxXmHDPahj1kgYpeM5oDMDY YGs2kWXqYyrC6AmIyUJ4Wd6BrUFPFdRiok7ReohK/41ds4tMHS7wrP1v0mC/fbge 23cIbGsCyMsO8QT2UMbpuW750etfd6d3TVv7I/mukuEOcKFmwwjEEUem2co/kATb Z6y0LyrGz3yw5UA4MFxuLgjhmyn39lWBgtHjw6Y7zH/wpPJlFoyfIAoYQz35cABI UEmCsLsy4PlHci2JrNrk5p47zwEqGm+rvD+2u7clbhHac1mAE+Ea1CSKjaEj7LK4 plFqg59Yayqif1THKrgEkbxu/9QCVjPVT29cqxlJNTmVN7g4ZazGZyT9BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzBPKuWcim4DvIDYAOAqWk4p1MyMB8GA1UdIwQY MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4 LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZC1aHmuO 0t15a1/4T7ZOo+DneddOuycV9y3t8ua/voTa6I3DW3RkDqu6My36rsC1joyDBi7B 6b/EzxnFwvX0a4ycVGeWufoBKU3PUKB30R/tVd/3OWzJY3iv6QqVVlUkx4r+/1tV B1QSwbyq6XAMPmNSMfKaD0R9urfJo/m1Eq6L7aVM0cxBrkDdEJoNa3CqGEYOlZ9k A10Xvmw82o04TDMw+doQadD+0ejjDjZ15CfI8i0N8PlO6A4Yr1d3oGjl3UtGBAxS L3IPUErW0GZWt9McPW5+cAUVqfn/BCp6QyB9+gD/jIOji4cFhox54Du8TbgmvxdR kWGy7d4yvtPzUw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:27 2026 by rpki-client