This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json) Hash identifier: O1eQHB1C87J1s9yIdGJAoFNO1XPErpZFF+XsMNmaITg= Subject key identifier: CD:A2:81:E9:D9:59:AF:79:53:BE:15:D9:7F:DA:7E:41:D2:A2:6C:79 Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Certificate serial: 019C41D87460BD84A121F5ECE5459A0D152B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft Manifest number: 0C8F Signing time: Mon 09 Feb 2026 10:00:30 +0000 Manifest this update: Mon 09 Feb 2026 10:00:30 +0000 Manifest next update: Tue 10 Feb 2026 10:00:30 +0000 Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: YU43nyT5DjoHZbY4O4ZGXtZZkDnOUmC6vVQm3bMhDDU=) 2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:74:60:bd:84:a1:21:f5:ec:e5:45:9a:0d:15:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Validity Not Before: Feb 9 10:00:30 2026 GMT Not After : Feb 10 10:00:30 2026 GMT Subject: CN=cda281e9d959af7953be15d97fda7e41d2a26c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:96:b7:27:da:65:12:7f:76:67:85:c6:76: 2c:ad:c6:fb:21:43:b3:96:ff:d8:52:85:52:2f:24: b3:85:9f:c6:30:3c:f2:87:4f:1e:28:61:bf:e5:fd: f2:1a:cf:c9:4b:e0:1f:31:07:1e:c2:e3:51:52:3b: ba:9b:2e:34:ed:34:80:61:f7:5d:24:2e:f8:99:ce: 6b:77:b9:c8:47:77:cb:19:2f:38:78:b0:31:91:0b: 0f:58:49:e3:cf:e8:8d:22:8c:ee:73:f8:ef:e9:88: 32:81:18:95:e2:72:22:e1:4e:31:46:f4:e4:36:9a: 2e:2a:66:04:8e:59:49:56:09:0a:69:f0:b8:c7:2d: d6:81:d2:b3:de:9d:3c:68:16:2b:25:37:69:c8:5f: 1f:10:21:7e:14:a5:dd:f2:a2:17:b0:80:02:37:5f: e2:77:f9:73:a1:46:f8:b8:3b:a6:c7:2b:05:b3:3f: 21:ca:6d:c0:9c:41:84:fd:27:da:31:fb:33:84:c2: 63:be:ee:c8:5e:fb:90:ff:a4:98:cf:f7:1f:46:c6: 56:11:26:54:d4:d3:59:1d:7d:51:45:7a:ca:78:9e: 86:b7:b0:9c:3d:c1:8e:0c:3e:64:8c:53:18:db:72: b2:1d:64:49:2a:4a:fc:f3:de:7a:85:f1:b1:38:d9: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A2:81:E9:D9:59:AF:79:53:BE:15:D9:7F:DA:7E:41:D2:A2:6C:79 X509v3 Authority Key Identifier: keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:31:17:1e:81:44:e1:56:b4:4c:61:b0:44:56:fe:2b:e7:d0: e9:a1:a8:2a:9c:81:ff:94:93:41:76:dd:0f:a5:8e:5c:d4:bf: 08:f4:35:f8:ad:4c:9a:e0:de:39:ad:7e:56:43:39:78:89:79: 57:f4:df:df:ff:ba:d1:97:c7:bf:3d:79:13:f2:e9:04:40:5b: e7:9f:b7:29:f0:58:46:44:67:5b:ab:65:b7:fc:c2:12:f0:4f: 60:f2:db:f4:76:84:75:f9:5a:85:02:25:35:90:cc:c3:5f:e0: c7:0d:b2:23:b6:aa:13:cd:6e:3c:a5:08:db:a7:af:bd:51:0c: 05:ed:49:1c:64:17:50:eb:5f:b6:6b:50:28:ad:55:f2:07:45: 38:1a:12:0b:53:a7:20:08:d1:b0:b9:21:0b:5b:19:d7:57:ec: 2e:a5:5b:68:28:f5:b5:ad:c2:73:91:eb:27:e2:b8:27:ce:fa: 64:2c:2b:25:d9:5e:f3:ac:0c:5f:98:6f:8b:93:61:4d:4e:2a: 85:ad:e7:46:47:53:7f:a6:cd:c5:91:b7:7e:d9:59:77:0b:cf: 01:f9:68:2d:8f:12:f3:8a:ee:1d:e0:bd:fc:78:06:5e:99:6f: a4:60:02:03:b3:fe:cd:ce:ef:d4:31:70:0d:a3:ee:1e:9d:ba: 4e:83:7d:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HRgvYShIfXs5UWaDRUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz MDBkNmIwHhcNMjYwMjA5MTAwMDMwWhcNMjYwMjEwMTAwMDMwWjAzMTEwLwYDVQQD EyhjZGEyODFlOWQ5NTlhZjc5NTNiZTE1ZDk3ZmRhN2U0MWQyYTI2Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS6WtyfaZRJ/dmeFxnYsrcb7IUOz lv/YUoVSLySzhZ/GMDzyh08eKGG/5f3yGs/JS+AfMQcewuNRUju6my407TSAYfdd JC74mc5rd7nIR3fLGS84eLAxkQsPWEnjz+iNIozuc/jv6YgygRiV4nIi4U4xRvTk NpouKmYEjllJVgkKafC4xy3WgdKz3p08aBYrJTdpyF8fECF+FKXd8qIXsIACN1/i d/lzoUb4uDumxysFsz8hym3AnEGE/SfaMfszhMJjvu7IXvuQ/6SYz/cfRsZWESZU 1NNZHX1RRXrKeJ6Gt7CcPcGODD5kjFMY23KyHWRJKkr88956hfGxONn0UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2igenZWa95U74V2X/afkHSomx5MB8GA1UdIwQY MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0 LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjEXHoFE 4Va0TGGwRFb+K+fQ6aGoKpyB/5STQXbdD6WOXNS/CPQ1+K1MmuDeOa1+VkM5eIl5 V/Tf3/+60ZfHvz15E/LpBEBb55+3KfBYRkRnW6tlt/zCEvBPYPLb9HaEdflahQIl NZDMw1/gxw2yI7aqE81uPKUI26evvVEMBe1JHGQXUOtftmtQKK1V8gdFOBoSC1On IAjRsLkhC1sZ11fsLqVbaCj1ta3Cc5HrJ+K4J876ZCwrJdle86wMX5hvi5NhTU4q ha3nRkdTf6bNxZG3ftlZdwvPAfloLY8S84ruHeC9/HgGXplvpGACA7P+zc7v1DFw DaPuHp26ToN9cw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:24 2026 by rpki-client