This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json) Hash identifier: AdKK/l80R9+4AEqbR/27v+R7L/ArrcD+o1WLzPOEVrk= Subject key identifier: 56:55:E1:57:0B:9A:E9:C5:D4:DB:63:EE:CC:86:DF:19:10:94:AC:34 Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59 Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259 Certificate serial: 019C41A221AF758C023B2301FA584479ECAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft Manifest number: 13C3 Signing time: Mon 09 Feb 2026 09:01:10 +0000 Manifest this update: Mon 09 Feb 2026 09:01:10 +0000 Manifest next update: Tue 10 Feb 2026 09:01:10 +0000 Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: tSLTE4C55o3r2aFRunF3/vjYDE+6MeaULWtTaDLkqns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:21:af:75:8c:02:3b:23:01:fa:58:44:79:ec:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259 Validity Not Before: Feb 9 09:01:10 2026 GMT Not After : Feb 10 09:01:10 2026 GMT Subject: CN=5655e1570b9ae9c5d4db63eecc86df191094ac34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:b8:ed:08:e8:c1:a4:83:ad:16:3f:ed:9b: f5:62:e5:89:d3:6c:39:1e:9c:9a:02:2e:ba:37:57: 12:e4:ca:7a:29:3e:d1:47:4f:a8:b4:d2:41:65:4b: 61:df:42:b3:11:2d:06:50:20:c7:f9:46:7a:c9:62: ba:53:dc:d9:62:60:cc:1a:60:f2:88:1a:3e:db:c0: 62:11:f7:e9:60:91:ff:c8:7a:e1:00:ed:81:84:4d: 79:08:c0:4a:bb:c4:a6:38:60:68:67:6d:1d:54:8c: af:0b:f3:1d:66:bc:93:2c:f8:e8:eb:4c:c3:b5:1c: db:e2:f0:22:34:73:63:4d:2d:42:04:aa:af:5a:5c: e5:d2:03:ce:46:9e:11:a9:7c:bc:fc:f0:2a:83:41: ae:dd:38:6b:52:9a:cd:dd:1b:d9:bc:fe:5c:4a:07: 66:95:ef:e7:80:51:26:6e:e2:62:93:57:60:a0:4e: 3d:45:bf:a4:b0:6d:e2:c2:ba:3c:7e:b6:8a:70:c9: 79:93:8a:57:43:20:7b:29:dc:96:a0:13:c4:0e:57: ad:93:1c:d8:50:a2:0e:91:e5:6e:ef:d0:41:35:ba: ca:51:c0:48:ee:fe:23:6b:4c:2a:dd:f1:eb:8a:6b: 7a:13:b8:50:1a:8e:f8:4a:cf:26:c4:16:d2:16:36: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:55:E1:57:0B:9A:E9:C5:D4:DB:63:EE:CC:86:DF:19:10:94:AC:34 X509v3 Authority Key Identifier: keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:18:61:e8:a0:6c:13:49:76:0c:c7:f3:9a:f8:8c:d1:40:e7: 86:96:c6:cb:2e:2b:79:43:8e:3f:51:7e:37:a1:57:d2:18:8e: 64:7a:eb:ce:fb:81:65:b3:48:d1:08:ea:09:63:b1:1e:1e:6b: 19:e9:0c:90:c0:68:1b:69:c5:c1:12:0d:e9:db:c2:c3:48:2d: b2:a5:5b:9f:a5:59:66:f5:c0:3c:e8:0a:be:a0:68:29:bd:e5: 4b:0f:70:4d:c6:bc:3b:eb:67:0a:2e:f4:75:b3:2f:3b:01:c8: f2:b6:22:a4:9c:ff:16:90:13:f8:14:99:98:52:88:35:2a:69: f6:1e:d5:ca:07:e0:c5:d8:21:25:35:00:9a:ba:38:83:f9:1c: 74:3d:40:40:8e:1a:8d:95:7b:74:9a:06:e8:98:26:4f:ee:ff: 12:6a:66:52:39:f9:81:fd:70:38:f5:45:43:a0:3c:43:45:66: df:59:f7:c2:98:fb:f4:a9:d1:e8:35:2c:1b:5a:82:2a:77:1d: 85:b6:2d:83:e6:f3:5d:33:37:9d:1b:b3:e5:6b:0c:c5:78:a7: 83:36:fb:68:c8:ac:64:cf:36:b4:69:e8:2a:fd:3f:a9:e7:2e: 22:28:1d:ea:c3:2f:69:ff:bb:e9:14:7a:f5:7d:68:ac:69:09: 65:dd:e1:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiGvdYwCOyMB+lhEeeyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDMxN2YyNGQ3MWE1MTZkNzUwNDNiZTkwZjVhYmUzZmEx YzkyNTkwHhcNMjYwMjA5MDkwMTEwWhcNMjYwMjEwMDkwMTEwWjAzMTEwLwYDVQQD Eyg1NjU1ZTE1NzBiOWFlOWM1ZDRkYjYzZWVjYzg2ZGYxOTEwOTRhYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN+47QjowaSDrRY/7Zv1YuWJ02w5 HpyaAi66N1cS5Mp6KT7RR0+otNJBZUth30KzES0GUCDH+UZ6yWK6U9zZYmDMGmDy iBo+28BiEffpYJH/yHrhAO2BhE15CMBKu8SmOGBoZ20dVIyvC/MdZryTLPjo60zD tRzb4vAiNHNjTS1CBKqvWlzl0gPORp4RqXy8/PAqg0Gu3ThrUprN3RvZvP5cSgdm le/ngFEmbuJik1dgoE49Rb+ksG3iwro8fraKcMl5k4pXQyB7KdyWoBPEDletkxzY UKIOkeVu79BBNbrKUcBI7v4ja0wq3fHrimt6E7hQGo74Ss8mxBbSFjbwZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZV4VcLmunF1Ntj7syG3xkQlKw0MB8GA1UdIwQY MBaAFPEDF/JNcaUW11BDvpD1q+P6HJJZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMt NjZkNDlkZjUzZWYxLzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMtNjZkNDlkZjUzZWYx LzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhhh6KBs E0l2DMfzmviM0UDnhpbGyy4reUOOP1F+N6FX0hiOZHrrzvuBZbNI0QjqCWOxHh5r GekMkMBoG2nFwRIN6dvCw0gtsqVbn6VZZvXAPOgKvqBoKb3lSw9wTca8O+tnCi70 dbMvOwHI8rYipJz/FpAT+BSZmFKINSpp9h7VygfgxdghJTUAmro4g/kcdD1AQI4a jZV7dJoG6JgmT+7/EmpmUjn5gf1wOPVFQ6A8Q0Vm31n3wpj79KnR6DUsG1qCKncd hbYtg+bzXTM3nRuz5WsMxXingzb7aMisZM82tGnoKv0/qecuIigd6sMvaf+76RR6 9X1orGkJZd3h1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:23 2026 by rpki-client