This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json) Hash identifier: Ax5jw7Iq17I1A7ky0+fZeAE2Uh0UXtDMpFG6+fCJul0= Subject key identifier: 66:9D:8B:ED:8C:E8:CE:1B:E5:0A:B3:EE:03:E8:8A:39:27:CB:D9:09 Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26 Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426 Certificate serial: 019C4322527D7867F9237C62E2B1F41FC6D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft Manifest number: 0321 Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: 5S7mfxyDNNLf4dAFj0tEa9w8Htxgi6tCO+mrovNI80g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:52:7d:78:67:f9:23:7c:62:e2:b1:f4:1f:c6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426 Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=669d8bed8ce8ce1be50ab3ee03e88a3927cbd909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:c1:5a:fb:55:c2:ea:4a:b3:b2:72:13:80: 05:4b:51:9d:7d:15:29:94:ac:2d:7a:84:71:b0:64: c7:bf:ea:0a:f3:a8:b6:cc:ac:c5:12:6c:e0:e7:d1: c3:82:e0:1a:f1:b6:57:fb:5c:70:63:5b:88:ef:2a: 77:a7:f9:5c:64:4e:0e:9a:ae:c1:9b:23:83:78:d9: 5f:7f:5f:43:07:cb:a6:34:54:8b:9f:90:57:41:40: 74:34:3f:51:5e:76:53:36:f7:1f:cb:08:5a:bb:b0: 73:92:82:88:a7:71:dd:86:4d:f9:46:30:92:e0:04: 92:25:b6:18:25:b3:70:6b:8a:f1:a0:09:65:09:0e: 7f:3c:85:d4:23:78:18:23:c4:bc:48:52:3e:2f:1f: c3:d9:a4:e4:02:32:33:0f:4f:77:16:56:39:ca:d2: 95:6a:ed:5b:9c:f4:8b:33:68:e9:2a:cc:10:94:08: 0d:a0:10:81:d0:1f:28:7a:42:3b:49:65:55:21:a2: 94:5e:35:80:1e:03:01:58:89:ac:aa:18:54:03:4e: 62:3f:d6:75:db:d2:e4:b8:9a:f7:1e:5e:21:9f:d1: 8f:6a:c7:3b:22:58:6e:fb:42:27:a8:25:c9:57:26: a3:46:6c:d2:7b:2e:a0:cd:3b:6f:aa:45:ec:41:62: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:8B:ED:8C:E8:CE:1B:E5:0A:B3:EE:03:E8:8A:39:27:CB:D9:09 X509v3 Authority Key Identifier: keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0a:73:cc:09:08:12:6c:6a:d1:7e:ed:a6:9b:eb:53:27:0f: 62:61:a0:98:c2:ac:7a:e1:d4:17:1e:59:eb:66:c1:8e:83:9a: 5a:52:69:c9:92:c3:2d:f1:3f:b6:4c:18:1d:8f:7f:dc:46:ff: fc:08:4c:01:c3:47:58:18:2a:9d:d6:9b:87:e6:56:2b:2d:1c: 5c:c8:2e:36:26:2f:e5:bc:b7:96:a2:ea:3e:ed:96:3b:5e:69: fd:17:b0:cc:19:10:e0:14:48:76:8f:5c:6d:52:09:9e:86:c7: ff:76:0f:7e:1d:06:53:dc:4d:1b:6c:b0:51:c2:ef:0d:76:f6: ea:24:4a:8e:ea:8c:01:c4:21:20:ce:52:e7:28:1d:3a:5e:40: df:43:d7:fe:d7:7e:1d:50:da:f2:45:15:65:5e:eb:85:0c:e6: 74:69:11:db:03:2f:b2:da:c1:ed:18:5c:a2:ce:d9:23:2e:8d: 47:7a:18:7d:94:87:a3:59:11:7b:27:93:8e:ca:23:10:96:4c: b4:3a:63:a4:5e:10:d6:4f:3a:a9:d5:b8:5b:09:bf:16:a4:fa: 23:cc:a8:75:e5:fd:4b:d5:cf:65:a0:c6:f5:55:d9:fb:1a:0d: 79:79:1d:4d:c4:f1:77:89:0c:0c:75:4b:47:ac:a0:c1:f4:62: 73:4f:cd:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlJ9eGf5I3xi4rH0H8bZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNTU1MWM3MDQ3YjNiZjkwMzE4MDhjMjFiODM3OWI5Yjg2 MGM0MjYwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD Eyg2NjlkOGJlZDhjZThjZTFiZTUwYWIzZWUwM2U4OGEzOTI3Y2JkOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj/BWvtVwupKs7JyE4AFS1GdfRUp lKwteoRxsGTHv+oK86i2zKzFEmzg59HDguAa8bZX+1xwY1uI7yp3p/lcZE4Omq7B myODeNlff19DB8umNFSLn5BXQUB0ND9RXnZTNvcfywhau7BzkoKIp3Hdhk35RjCS 4ASSJbYYJbNwa4rxoAllCQ5/PIXUI3gYI8S8SFI+Lx/D2aTkAjIzD093FlY5ytKV au1bnPSLM2jpKswQlAgNoBCB0B8oekI7SWVVIaKUXjWAHgMBWImsqhhUA05iP9Z1 29LkuJr3Hl4hn9GPasc7Ilhu+0InqCXJVyajRmzSey6gzTtvqkXsQWK30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGadi+2M6M4b5Qqz7gPoijkny9kJMB8GA1UdIwQY MBaAFPJVUccEezv5AxgIwhuDebm4YMQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxWUnh3UjdPX2tER0FqQ0c0TjV1YmhneENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNTI1ZTgtNDkyYi00ZWE0LTkyMTIt NzU1NTRkZDQ0YjZkLzEvOGxWUnh3UjdPX2tER0FqQ0c0TjV1YmhneENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNTI1ZTgtNDkyYi00ZWE0LTkyMTItNzU1NTRkZDQ0YjZk LzEvOGxWUnh3UjdPX2tER0FqQ0c0TjV1YmhneENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgpzzAkI Emxq0X7tppvrUycPYmGgmMKseuHUFx5Z62bBjoOaWlJpyZLDLfE/tkwYHY9/3Eb/ /AhMAcNHWBgqndabh+ZWKy0cXMguNiYv5by3lqLqPu2WO15p/RewzBkQ4BRIdo9c bVIJnobH/3YPfh0GU9xNG2ywUcLvDXb26iRKjuqMAcQhIM5S5ygdOl5A30PX/td+ HVDa8kUVZV7rhQzmdGkR2wMvstrB7Rhcos7ZIy6NR3oYfZSHo1kReyeTjsojEJZM tDpjpF4Q1k86qdW4Wwm/FqT6I8yodeX9S9XPZaDG9VXZ+xoNeXkdTcTxd4kMDHVL R6ygwfRic0/NDA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:45:59 2026 by rpki-client