This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json) Hash identifier: StxwLWp4AWAXf8duNGNXqlVtxLZ8GOnzQYkpxGTnYeI= Subject key identifier: B8:66:2B:26:E3:D3:57:83:92:E2:E7:D6:5D:5E:A6:FC:1D:F8:2B:1C Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85 Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085 Certificate serial: 019C420F952D4E210640568434AF389D890B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:00:43 +0000 Manifest this update: Mon 09 Feb 2026 11:00:43 +0000 Manifest next update: Tue 10 Feb 2026 11:00:43 +0000 Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: UHFh7RGL7i5EP52V4+nz3XMCZO4l+zS7MdoCk6SqKfM=) 2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:95:2d:4e:21:06:40:56:84:34:af:38:9d:89:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085 Validity Not Before: Feb 9 11:00:43 2026 GMT Not After : Feb 10 11:00:43 2026 GMT Subject: CN=b8662b26e3d3578392e2e7d65d5ea6fc1df82b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:ba:47:b7:a4:29:bd:d2:2e:c6:c5:0a:dd: 7c:7c:da:7d:09:55:e2:bf:e0:19:cb:a9:0b:52:8f: 6a:e5:0c:7a:8b:50:fd:72:54:64:1f:be:cf:c8:4e: d1:85:b3:85:2d:f7:cb:24:90:cb:80:fb:11:03:a2: 5f:c4:7d:dd:7e:8a:12:54:83:14:bc:17:b9:9d:5b: 12:56:ef:ce:55:ed:49:3d:f4:f7:b0:b6:22:23:e8: ec:b5:52:18:26:7b:de:14:03:eb:e1:7c:56:0c:ab: e4:20:b3:68:90:d4:ac:f0:8d:7d:c3:a3:63:95:5b: 85:f9:f6:5c:d3:eb:d2:64:21:33:b2:16:e2:65:0c: e9:a1:06:51:9d:18:cb:d6:f2:d7:62:0b:50:27:11: 52:3a:df:3b:f8:5f:bb:fa:e4:3c:5d:ca:47:3d:1c: 88:cb:f0:67:d0:f0:63:e0:d7:e6:bc:42:87:93:b5: 05:c6:da:9b:55:69:f7:d8:98:be:90:5d:28:76:f4: 9c:ce:4f:56:94:8b:8f:bd:c3:ca:a8:11:25:6a:21: 47:18:bb:00:96:71:15:74:42:b4:36:d1:d8:b5:65: 75:3b:91:cd:39:dc:42:c6:1b:b1:76:f3:76:28:4c: d0:52:9f:ac:13:38:e7:8e:db:eb:1e:30:4e:44:40: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:66:2B:26:E3:D3:57:83:92:E2:E7:D6:5D:5E:A6:FC:1D:F8:2B:1C X509v3 Authority Key Identifier: keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1b:d8:c9:1f:dd:f5:e6:b7:cd:ed:42:08:5b:27:70:f8:92: c3:f6:06:db:a4:38:e4:9f:6d:8b:05:cf:26:78:c5:c9:f9:92: 29:b1:32:b9:67:9d:cb:fd:de:4c:b7:bf:db:1a:c7:ae:08:c8: 14:02:c2:76:ea:83:7c:ba:c6:49:a3:2e:be:ca:d3:4b:fe:49: 3f:e9:f8:56:71:e2:ce:a7:64:c1:45:9b:f9:87:e1:df:fc:3f: d3:f9:fb:76:0a:95:85:76:d4:c5:bf:c5:59:7b:b8:50:bf:04: 47:f5:2b:15:9f:45:4e:bf:69:41:3c:97:79:8f:4f:e5:5e:a1: 87:3d:81:91:fe:ee:1e:38:3d:71:fe:c5:50:b9:b0:f5:04:71: 60:ee:f8:7a:d7:ff:7d:38:15:37:dc:3b:32:e8:e4:15:85:39: a3:06:46:0f:df:fa:77:82:3c:8e:64:fa:e3:de:5b:b0:a6:79: 7e:8f:da:e5:c6:7d:54:4c:54:81:39:ea:b3:e8:c7:97:15:b5: fa:6c:fc:21:36:22:e4:88:a6:00:b4:87:2d:d4:d0:c4:ae:23: 2e:dd:64:f5:bb:dc:71:dc:78:ee:59:c2:5e:d8:24:db:86:77: 30:6e:79:8e:32:8c:20:a9:56:17:bd:8b:17:5d:9c:71:bb:c2: dc:21:1f:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5UtTiEGQFaENK84nYkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy ZDEwODUwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD EyhiODY2MmIyNmUzZDM1NzgzOTJlMmU3ZDY1ZDVlYTZmYzFkZjgyYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitW6R7ekKb3SLsbFCt18fNp9CVXi v+AZy6kLUo9q5Qx6i1D9clRkH77PyE7RhbOFLffLJJDLgPsRA6JfxH3dfooSVIMU vBe5nVsSVu/OVe1JPfT3sLYiI+jstVIYJnveFAPr4XxWDKvkILNokNSs8I19w6Nj lVuF+fZc0+vSZCEzshbiZQzpoQZRnRjL1vLXYgtQJxFSOt87+F+7+uQ8XcpHPRyI y/Bn0PBj4NfmvEKHk7UFxtqbVWn32Ji+kF0odvSczk9WlIuPvcPKqBElaiFHGLsA lnEVdEK0NtHYtWV1O5HNOdxCxhuxdvN2KEzQUp+sEzjnjtvrHjBOREDRQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhmKybj01eDkuLn1l1epvwd+CscMB8GA1UdIwQY MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhvYyR/d 9ea3ze1CCFsncPiSw/YG26Q45J9tiwXPJnjFyfmSKbEyuWedy/3eTLe/2xrHrgjI FALCduqDfLrGSaMuvsrTS/5JP+n4VnHizqdkwUWb+Yfh3/w/0/n7dgqVhXbUxb/F WXu4UL8ER/UrFZ9FTr9pQTyXeY9P5V6hhz2Bkf7uHjg9cf7FULmw9QRxYO74etf/ fTgVN9w7MujkFYU5owZGD9/6d4I8jmT6495bsKZ5fo/a5cZ9VExUgTnqs+jHlxW1 +mz8ITYi5IimALSHLdTQxK4jLt1k9bvccdx47lnCXtgk24Z3MG55jjKMIKlWF72L F12ccbvC3CEfFA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:31 2026 by rpki-client