This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json) Hash identifier: V11fcmZctmxZu9d/i+uM/I1sPyF4d74x5rl5wIJtQzA= Subject key identifier: D4:40:56:2F:A3:20:14:DD:BF:03:67:0E:A0:18:45:E2:FC:16:1D:6D Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Certificate serial: 019C427DECCDD16EC427E89B1BE11399AB37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft Manifest number: 1710 Signing time: Mon 09 Feb 2026 13:01:14 +0000 Manifest this update: Mon 09 Feb 2026 13:01:14 +0000 Manifest next update: Tue 10 Feb 2026 13:01:14 +0000 Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: pmfwbP1praAFZRzSc1mmhTEfzfTcUAF04mkDdQlQRcc=) 2: mImUBsIy_K7hP2R4qNRN0dtJq4M.roa (hash: RhFRQt0PkCizfyNCWeuFtu6GmF01B1uaXSkERKXxJrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ec:cd:d1:6e:c4:27:e8:9b:1b:e1:13:99:ab:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Validity Not Before: Feb 9 13:01:14 2026 GMT Not After : Feb 10 13:01:14 2026 GMT Subject: CN=d440562fa32014ddbf03670ea01845e2fc161d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:d2:ea:17:eb:f7:69:4b:6a:7b:70:a2:d0: d3:a1:09:dd:eb:f0:19:28:87:54:88:6b:10:f3:ff: 18:fd:f9:0e:99:75:a3:19:6f:8f:6a:25:6f:cd:fc: 7b:6b:03:b9:85:97:c2:c0:4c:4c:a0:36:39:fd:e4: 15:5b:88:9c:1e:7b:58:d3:b6:54:ae:79:0f:95:4c: 09:f7:6e:c3:b7:32:5e:1c:85:a2:38:7a:10:f5:05: c4:6b:b0:82:c0:17:f1:0d:d1:d3:72:bc:ca:1a:6c: 52:42:68:a5:56:14:d0:17:ac:15:c4:40:9b:3e:0c: f7:2c:0d:b2:1f:da:b6:25:5a:89:47:9a:da:37:da: 23:cd:e1:2b:b2:9a:2e:14:ab:10:6e:e5:78:a1:ca: f4:b0:64:56:96:89:fd:9a:19:f0:e9:f5:b9:95:4a: ed:c7:6d:ed:b6:ca:07:2f:46:65:cd:b8:1d:c9:70: 81:5e:ad:52:38:89:4f:60:7e:e2:38:3d:59:8b:78: cc:6c:b2:60:a1:62:9d:e2:be:ef:08:0a:b0:fe:fa: c6:57:3c:79:ba:e7:8a:86:03:ed:b1:3b:8e:dd:2f: 58:32:99:7f:ab:e4:bd:c0:07:96:0e:9a:8c:ca:87: fb:eb:01:ee:dd:e5:25:95:89:28:4d:0b:0d:84:66: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:56:2F:A3:20:14:DD:BF:03:67:0E:A0:18:45:E2:FC:16:1D:6D X509v3 Authority Key Identifier: keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:49:5e:8b:fc:d8:98:e5:6d:c1:57:d5:33:aa:2d:0e:26:b9: 0c:25:04:86:29:d8:96:11:08:a7:84:64:9c:90:b0:37:c4:da: 7e:b7:9e:7c:00:ac:59:9c:cf:95:5a:f0:af:dc:f0:ea:7a:9d: 63:28:67:0b:f3:37:50:55:18:03:b4:39:15:90:46:98:1e:0e: 05:79:b1:e3:3e:41:3d:13:47:04:ea:9e:0f:20:3d:ac:e5:63: c7:79:14:42:48:18:2d:85:34:b8:7b:82:76:ea:57:d1:ec:fd: 27:34:3d:94:92:7e:e2:a5:06:b5:e0:8e:b1:65:d2:64:bf:68: ef:e8:cb:29:53:20:d3:cd:5a:71:54:37:d2:1e:bd:0b:d4:5f: 1b:e7:b6:9b:3f:c7:03:58:6b:62:9e:64:20:9f:94:cf:90:1d: f4:42:48:1a:a3:e0:92:d2:a9:c5:a3:3e:00:67:c7:7c:ac:4c: 44:5b:ee:20:23:a5:8f:3b:e4:bb:62:bc:dc:fc:d5:9d:e5:bc: 18:f1:99:fe:08:79:60:13:48:95:3d:77:bf:e8:85:e2:8d:8e: ec:5d:df:e6:8a:c0:a2:fd:41:1c:a3:18:da:4a:2e:3f:05:1f: d6:35:3f:1e:ed:8f:47:b3:72:0a:fa:4e:6f:44:1c:03:90:70: cb:41:d0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfezN0W7EJ+ibG+ETmas3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz MjFkMmMwHhcNMjYwMjA5MTMwMTE0WhcNMjYwMjEwMTMwMTE0WjAzMTEwLwYDVQQD EyhkNDQwNTYyZmEzMjAxNGRkYmYwMzY3MGVhMDE4NDVlMmZjMTYxZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1LS6hfr92lLantwotDToQnd6/AZ KIdUiGsQ8/8Y/fkOmXWjGW+PaiVvzfx7awO5hZfCwExMoDY5/eQVW4icHntY07ZU rnkPlUwJ927DtzJeHIWiOHoQ9QXEa7CCwBfxDdHTcrzKGmxSQmilVhTQF6wVxECb Pgz3LA2yH9q2JVqJR5raN9ojzeErspouFKsQbuV4ocr0sGRWlon9mhnw6fW5lUrt x23ttsoHL0ZlzbgdyXCBXq1SOIlPYH7iOD1Zi3jMbLJgoWKd4r7vCAqw/vrGVzx5 uueKhgPtsTuO3S9YMpl/q+S9wAeWDpqMyof76wHu3eUllYkoTQsNhGZLzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRAVi+jIBTdvwNnDqAYReL8Fh1tMB8GA1UdIwQY MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt NGViZWVjN2U4Mjc1LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1 LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUlei/zY mOVtwVfVM6otDia5DCUEhinYlhEIp4RknJCwN8TafreefACsWZzPlVrwr9zw6nqd YyhnC/M3UFUYA7Q5FZBGmB4OBXmx4z5BPRNHBOqeDyA9rOVjx3kUQkgYLYU0uHuC dupX0ez9JzQ9lJJ+4qUGteCOsWXSZL9o7+jLKVMg081acVQ30h69C9RfG+e2mz/H A1hrYp5kIJ+Uz5Ad9EJIGqPgktKpxaM+AGfHfKxMRFvuICOljzvku2K83PzVneW8 GPGZ/gh5YBNIlT13v+iF4o2O7F3f5orAov1BHKMY2kouPwUf1jU/Hu2PR7NyCvpO b0QcA5Bwy0HQ2A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:30 2026 by rpki-client