This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft File: aL8cWiHDgluLhlFqGllxIbVLPMM.mft (raw, json) Hash identifier: O14ZVkn20pPzujwivmLtH9dWWG62JZ13uIiR8Nc5RPY= Subject key identifier: B6:64:E4:8C:70:41:68:A6:1D:0C:96:39:68:67:8D:2B:BD:1C:3E:8E Authority key identifier: 68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3 Certificate issuer: /CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3 Certificate serial: 019C43C6C9602C8E1E618229E621A3F8B4EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 19:00:26 +0000 Manifest this update: Mon 09 Feb 2026 19:00:26 +0000 Manifest next update: Tue 10 Feb 2026 19:00:26 +0000 Files and hashes: 1: aL8cWiHDgluLhlFqGllxIbVLPMM.crl (hash: cFfkJMBuElZ8IKO9d/1Vl88sZVmdmaMTZYjHiOnoij0=) 2: xMiDA7uuRCcWzBnQjMU1cUXcoLc.roa (hash: 5dmso3IrpYxSnMbNzob1ZQb189IzqVbbdnmbtENfrFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c9:60:2c:8e:1e:61:82:29:e6:21:a3:f8:b4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3 Validity Not Before: Feb 9 19:00:26 2026 GMT Not After : Feb 10 19:00:26 2026 GMT Subject: CN=b664e48c704168a61d0c963968678d2bbd1c3e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e4:dd:e4:ab:64:6c:5e:bd:14:ca:ae:e1:71: 30:d2:ad:ad:ec:e8:fb:1e:07:4c:1f:44:80:d1:10: 7a:63:95:dc:0f:5f:62:0b:bc:b0:6b:b6:33:7e:80: ca:52:d0:d4:7a:fe:16:0d:b8:0f:54:91:af:61:43: d5:96:70:e5:9a:07:b8:6f:0e:ec:6e:4c:99:dc:17: ea:07:34:09:ec:d9:95:f3:7d:f5:71:f0:9b:f6:25: dc:aa:9d:fd:60:15:62:5e:75:c7:f6:4c:41:39:0d: 62:ac:53:c8:2a:92:e3:6a:39:48:27:18:39:bb:34: fb:30:ff:32:24:72:f2:4e:b8:52:4a:60:e4:6b:f1: 0e:df:b9:0b:da:64:3f:99:cb:a8:1d:22:71:cc:87: 55:f0:bf:9f:69:a7:70:31:ec:4f:f6:54:a7:07:b8: 70:a1:97:59:2b:b1:3c:1b:df:31:c8:6e:b2:87:2a: b1:07:fc:70:f9:87:f6:37:5e:e9:85:93:d2:f7:ce: 4f:13:d1:e5:ff:8c:11:43:d6:86:3c:01:eb:4b:c8: c2:3d:ea:47:c2:79:5c:c7:5c:36:54:09:c0:78:cc: d8:dd:b6:0a:58:40:bc:ae:29:14:b5:51:e9:6c:bf: 56:6b:d3:34:46:e9:52:6c:df:85:39:58:ea:ea:aa: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:64:E4:8C:70:41:68:A6:1D:0C:96:39:68:67:8D:2B:BD:1C:3E:8E X509v3 Authority Key Identifier: keyid:68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:de:ed:43:5a:33:9d:c8:bc:5c:2c:ee:6f:20:a0:1e:05:60: ce:0b:f1:50:f5:3f:73:63:4d:3c:fc:f1:eb:71:8d:f5:05:0b: 34:2c:aa:08:09:40:a1:82:d3:19:0d:3a:e8:34:64:5f:5c:d2: a7:4a:63:4b:af:b8:73:b9:15:cf:32:15:2f:31:60:83:ff:77: 1a:7d:94:b6:ec:97:ff:9e:61:3f:e7:46:e2:a7:5e:4a:48:ca: 7d:b5:47:b0:95:67:8c:6d:8d:fd:79:cf:3f:f0:d7:00:b4:9e: 71:05:c7:86:e4:25:fa:87:c4:fa:32:af:17:67:7b:df:ac:d3: 5d:9c:f6:da:44:c7:e0:49:83:d1:73:41:15:6e:67:60:83:b9: 28:54:e3:e9:1c:8a:6a:ed:87:09:61:a1:64:51:ec:46:1e:a8: 1c:d0:61:00:93:5c:c7:03:e0:1e:9d:01:ef:a1:70:bf:ef:a4: 1b:3f:cb:0b:a1:30:66:96:95:9d:2c:44:79:05:af:fc:08:51: df:7a:fa:b1:6d:95:8e:0a:25:59:24:2f:65:4f:75:3b:8f:bd: 43:87:9e:cd:48:02:ef:97:97:60:af:ef:c1:49:d4:de:8b:8e: cc:52:31:8c:88:5f:f1:2f:de:00:43:18:84:31:c4:23:63:82: 81:4a:ef:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxslgLI4eYYIp5iGj+LTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmYxYzVhMjFjMzgyNWI4Yjg2NTE2YTFhNTk3MTIxYjU0 YjNjYzMwHhcNMjYwMjA5MTkwMDI2WhcNMjYwMjEwMTkwMDI2WjAzMTEwLwYDVQQD EyhiNjY0ZTQ4YzcwNDE2OGE2MWQwYzk2Mzk2ODY3OGQyYmJkMWMzZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeTd5KtkbF69FMqu4XEw0q2t7Oj7 HgdMH0SA0RB6Y5XcD19iC7ywa7YzfoDKUtDUev4WDbgPVJGvYUPVlnDlmge4bw7s bkyZ3BfqBzQJ7NmV8331cfCb9iXcqp39YBViXnXH9kxBOQ1irFPIKpLjajlIJxg5 uzT7MP8yJHLyTrhSSmDka/EO37kL2mQ/mcuoHSJxzIdV8L+faadwMexP9lSnB7hw oZdZK7E8G98xyG6yhyqxB/xw+Yf2N17phZPS985PE9Hl/4wRQ9aGPAHrS8jCPepH wnlcx1w2VAnAeMzY3bYKWEC8rikUtVHpbL9Wa9M0RulSbN+FOVjq6qroSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZk5IxwQWimHQyWOWhnjSu9HD6OMB8GA1UdIwQY MBaAFGi/HFohw4Jbi4ZRahpZcSG1SzzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUw4Y1dpSERnbHVMaGxGcUdsbHhJYlZMUE1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yZmNlNWUtYzkxNS00ZjAyLWFkM2Et NTVlYjViYjk5ZTQ1LzEvYUw4Y1dpSERnbHVMaGxGcUdsbHhJYlZMUE1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yZmNlNWUtYzkxNS00ZjAyLWFkM2EtNTVlYjViYjk5ZTQ1 LzEvYUw4Y1dpSERnbHVMaGxGcUdsbHhJYlZMUE1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1t7tQ1oz nci8XCzubyCgHgVgzgvxUPU/c2NNPPzx63GN9QULNCyqCAlAoYLTGQ066DRkX1zS p0pjS6+4c7kVzzIVLzFgg/93Gn2UtuyX/55hP+dG4qdeSkjKfbVHsJVnjG2N/XnP P/DXALSecQXHhuQl+ofE+jKvF2d736zTXZz22kTH4EmD0XNBFW5nYIO5KFTj6RyK au2HCWGhZFHsRh6oHNBhAJNcxwPgHp0B76Fwv++kGz/LC6EwZpaVnSxEeQWv/AhR 33r6sW2VjgolWSQvZU91O4+9Q4eezUgC75eXYK/vwUnU3ouOzFIxjIhf8S/eAEMY hDHEI2OCgUrv6A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:47 2026 by rpki-client