This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json) Hash identifier: qWhbFRdTCV/ZpjWOBBsTqAxr4rr6kmY0iTKKfv58djI= Subject key identifier: 87:EF:BA:B0:BF:1A:CD:BC:AB:2A:2C:91:60:8D:4D:8A:D2:6C:6C:66 Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Certificate serial: 019C424678DD7F808FC4F98205A5A0565F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft Manifest number: 1200 Signing time: Mon 09 Feb 2026 12:00:40 +0000 Manifest this update: Mon 09 Feb 2026 12:00:40 +0000 Manifest next update: Tue 10 Feb 2026 12:00:40 +0000 Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: An6Q5XcNJ0kUEj5AzLyZH1VFNoMyFGwfUTkQsHwbQfk=) 2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:78:dd:7f:80:8f:c4:f9:82:05:a5:a0:56:5f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Validity Not Before: Feb 9 12:00:40 2026 GMT Not After : Feb 10 12:00:40 2026 GMT Subject: CN=87efbab0bf1acdbcab2a2c91608d4d8ad26c6c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:62:b5:0a:b6:3f:44:66:c6:8e:8c:c2:ff: 6b:fe:5a:21:da:3b:99:11:03:1b:86:30:05:4a:64: 11:57:d3:c9:32:fb:e8:82:98:98:ab:76:19:51:e7: df:bb:18:eb:26:51:72:6a:25:83:63:19:21:d6:c6: 31:30:bc:0a:fd:5b:cf:ab:2a:4f:da:aa:99:f1:70: 77:2a:95:3c:f8:52:39:c2:fa:db:a4:48:96:1f:94: 04:b2:dd:82:d6:45:f3:bf:63:1c:37:c2:43:a8:17: 6a:1f:b1:7a:c0:f6:89:e3:8f:1f:1b:e7:3d:51:9f: be:5a:f8:d8:6f:df:7c:22:f2:51:48:5b:9d:c0:19: 7c:5f:12:18:81:cd:65:34:a9:5a:01:6c:01:26:35: af:46:7d:a0:e5:69:50:1f:51:be:76:2d:d8:ea:18: 8b:89:4e:32:5c:6f:eb:58:ab:57:2d:83:30:cd:0e: cb:77:9f:b7:84:c5:84:eb:a1:51:7e:65:ae:b3:d6: c0:ce:e5:2e:a3:19:8a:95:2a:47:fe:52:fc:37:ce: 59:ab:d0:89:93:11:17:ad:58:41:d0:e5:ee:48:40: a6:73:ab:e2:8a:e5:03:6a:79:74:4f:91:99:b2:67: ed:db:ac:68:7e:62:48:58:6e:f3:a6:50:af:21:a6: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:BA:B0:BF:1A:CD:BC:AB:2A:2C:91:60:8D:4D:8A:D2:6C:6C:66 X509v3 Authority Key Identifier: keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:61:ad:0c:38:45:e3:38:a0:61:c0:3d:c1:18:dc:24:9b:67: f1:2c:26:0e:ab:33:a3:08:50:40:5d:c8:50:5f:03:ef:70:1c: 82:70:f6:36:07:87:47:f0:86:36:6d:36:4f:2a:45:d6:0c:1d: d9:47:ce:e8:c8:15:3c:4e:bd:9e:2d:60:72:87:fe:75:cc:b9: 9f:d5:ad:00:9d:1f:00:fb:10:27:47:36:fa:17:e6:e7:46:ed: 26:15:8b:a0:f2:12:49:f0:3b:26:e6:f1:e9:92:67:ff:ca:c7: e0:cb:bc:62:81:46:ca:1f:23:57:d4:f8:83:d0:1f:1b:81:2f: d4:a2:83:c2:3f:17:36:d1:1a:53:b5:3b:b4:49:d4:97:fc:a8: 2f:f0:fe:58:69:8e:fd:62:49:0d:ef:c9:1a:db:ca:be:15:82: 22:a8:08:c3:05:f9:68:ae:d0:90:64:8b:c9:6e:db:76:3d:a4: 96:92:2b:41:bb:e7:c9:fa:e6:d7:50:e8:df:22:bc:41:77:23: 3a:e6:24:b5:ea:2d:e6:58:0b:b3:38:ad:42:f7:ba:42:09:71: 6d:c8:28:e7:14:54:97:b5:10:e4:f2:b3:8a:02:2c:2a:64:25: 9f:36:e3:13:0b:16:94:79:39:25:01:60:db:a8:ef:ac:d6:a4: f5:02:4b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnjdf4CPxPmCBaWgVl+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi NzJiZTUwHhcNMjYwMjA5MTIwMDQwWhcNMjYwMjEwMTIwMDQwWjAzMTEwLwYDVQQD Eyg4N2VmYmFiMGJmMWFjZGJjYWIyYTJjOTE2MDhkNGQ4YWQyNmM2YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVBitQq2P0Rmxo6Mwv9r/loh2juZ EQMbhjAFSmQRV9PJMvvogpiYq3YZUeffuxjrJlFyaiWDYxkh1sYxMLwK/VvPqypP 2qqZ8XB3KpU8+FI5wvrbpEiWH5QEst2C1kXzv2McN8JDqBdqH7F6wPaJ448fG+c9 UZ++WvjYb998IvJRSFudwBl8XxIYgc1lNKlaAWwBJjWvRn2g5WlQH1G+di3Y6hiL iU4yXG/rWKtXLYMwzQ7Ld5+3hMWE66FRfmWus9bAzuUuoxmKlSpH/lL8N85Zq9CJ kxEXrVhB0OXuSECmc6viiuUDanl0T5GZsmft26xofmJIWG7zplCvIab1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfvurC/Gs28qyoskWCNTYrSbGxmMB8GA1UdIwQY MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmGtDDhF 4zigYcA9wRjcJJtn8SwmDqszowhQQF3IUF8D73AcgnD2NgeHR/CGNm02TypF1gwd 2UfO6MgVPE69ni1gcof+dcy5n9WtAJ0fAPsQJ0c2+hfm50btJhWLoPISSfA7Jubx 6ZJn/8rH4Mu8YoFGyh8jV9T4g9AfG4Ev1KKDwj8XNtEaU7U7tEnUl/yoL/D+WGmO /WJJDe/JGtvKvhWCIqgIwwX5aK7QkGSLyW7bdj2klpIrQbvnyfrm11Do3yK8QXcj OuYkteot5lgLszitQve6Qglxbcgo5xRUl7UQ5PKzigIsKmQlnzbjEwsWlHk5JQFg 26jvrNak9QJLlg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:32 2026 by rpki-client