This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json) Hash identifier: fPIxLBkjMJdHC8JHywFXYtGzuhcXbHKLx+hwdBG10L4= Subject key identifier: 17:4E:5E:47:1E:CD:93:81:AD:CD:9F:2F:2B:99:E3:F1:3B:2F:8D:0A Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Certificate serial: 019C42468BB6CF7322E4B61B8836946706D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:45 +0000 Manifest this update: Mon 09 Feb 2026 12:00:45 +0000 Manifest next update: Tue 10 Feb 2026 12:00:45 +0000 Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: PUOKjMjsvdI4hXQvwDwSknQiG8wkPX8xOAj6Y32H9io=) 2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:8b:b6:cf:73:22:e4:b6:1b:88:36:94:67:06:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Validity Not Before: Feb 9 12:00:45 2026 GMT Not After : Feb 10 12:00:45 2026 GMT Subject: CN=174e5e471ecd9381adcd9f2f2b99e3f13b2f8d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:7a:3f:35:06:ba:63:d8:3c:cb:94:8c:10: fd:93:a1:a7:b1:71:46:4a:86:ca:b3:84:11:7e:a2: 0d:ab:c6:80:60:41:7d:a0:a4:ff:fb:ed:a6:11:e7: d3:78:19:ef:be:cd:a0:6f:6e:8a:84:96:40:3c:fe: 0d:dd:9b:ce:38:69:db:4d:d9:c2:9d:17:a0:7d:81: 45:ee:fb:f9:e2:d6:b2:f7:1b:3a:9f:cc:6f:56:8e: b9:01:bd:58:11:94:77:01:8c:7e:e0:31:7d:da:20: 37:f1:8b:7e:72:a2:a5:26:eb:f4:db:18:d9:1d:27: 71:32:6c:9b:3e:39:c8:d1:74:5d:bb:cb:17:fb:fc: c7:63:04:17:e6:a6:b9:0d:2b:a8:20:25:1c:f8:54: b3:ee:94:dc:89:b8:47:34:5a:5d:9f:e0:bd:15:0a: 83:a1:5b:a5:78:73:fe:bd:82:be:03:08:dd:38:0a: b9:86:36:3d:f5:c5:ba:ee:05:55:2b:e8:03:31:aa: 92:79:e2:9b:b3:c1:40:5e:0f:c7:0b:59:9c:ef:90: 86:fe:a6:e3:e1:0d:0a:c7:10:b9:d6:d1:79:ba:12: 84:f7:8d:40:5f:44:ab:26:63:19:fd:da:5b:f2:c9: 9a:9c:13:56:c1:49:c6:a5:0c:fe:fa:14:1f:6f:4b: e3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4E:5E:47:1E:CD:93:81:AD:CD:9F:2F:2B:99:E3:F1:3B:2F:8D:0A X509v3 Authority Key Identifier: keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:53:a0:fc:5a:fc:2d:3c:e9:af:4f:5c:27:0a:26:ef:b3:07: ad:3b:b1:87:44:c9:a0:64:a0:fa:97:9e:11:68:45:83:b0:64: aa:b8:b2:a2:88:91:2c:30:f3:8e:c3:cb:16:78:8c:2a:e1:6c: 4d:53:79:b9:a0:93:95:d8:95:6a:53:71:9e:0d:bf:a0:d1:72: 1a:d5:5c:84:2f:86:b2:ba:fa:f1:a3:94:40:a9:a2:14:ab:76: 58:4d:c6:a8:47:c4:77:37:15:b9:42:3b:38:1c:b0:fa:fd:b1: 89:50:36:72:b1:8a:2c:62:e0:4f:95:2f:4c:7a:90:37:71:78: 9a:18:f6:d6:00:37:63:25:ad:7c:e7:4b:de:ff:ac:0d:95:39: 3c:93:54:cf:97:08:20:1c:4a:7f:21:da:43:db:71:15:27:f8: 33:20:47:d1:1e:fb:c6:13:6d:b7:06:ba:11:66:c8:d5:76:c5: 7b:15:6e:40:30:81:26:f5:91:3d:07:80:66:df:55:48:fa:67: f2:6f:45:46:ea:90:19:0c:fa:32:49:e8:b2:a3:66:69:57:44: cd:c9:81:09:ea:0c:4a:ec:c8:ff:30:c1:55:fd:31:3f:a3:42: 5d:c9:7c:05:73:06:82:e5:7a:ef:00:5c:5f:a1:c9:9c:29:fa: f8:37:d8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRou2z3Mi5LYbiDaUZwbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi ZDZmNzYwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD EygxNzRlNWU0NzFlY2Q5MzgxYWRjZDlmMmYyYjk5ZTNmMTNiMmY4ZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE16PzUGumPYPMuUjBD9k6GnsXFG SobKs4QRfqINq8aAYEF9oKT/++2mEefTeBnvvs2gb26KhJZAPP4N3ZvOOGnbTdnC nRegfYFF7vv54tay9xs6n8xvVo65Ab1YEZR3AYx+4DF92iA38Yt+cqKlJuv02xjZ HSdxMmybPjnI0XRdu8sX+/zHYwQX5qa5DSuoICUc+FSz7pTcibhHNFpdn+C9FQqD oVuleHP+vYK+AwjdOAq5hjY99cW67gVVK+gDMaqSeeKbs8FAXg/HC1mc75CG/qbj 4Q0KxxC51tF5uhKE941AX0SrJmMZ/dpb8smanBNWwUnGpQz++hQfb0vjQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdOXkcezZOBrc2fLyuZ4/E7L40KMB8GA1UdIwQY MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFOg/Fr8 LTzpr09cJwom77MHrTuxh0TJoGSg+peeEWhFg7BkqriyooiRLDDzjsPLFniMKuFs TVN5uaCTldiValNxng2/oNFyGtVchC+Gsrr68aOUQKmiFKt2WE3GqEfEdzcVuUI7 OByw+v2xiVA2crGKLGLgT5UvTHqQN3F4mhj21gA3YyWtfOdL3v+sDZU5PJNUz5cI IBxKfyHaQ9txFSf4MyBH0R77xhNttwa6EWbI1XbFexVuQDCBJvWRPQeAZt9VSPpn 8m9FRuqQGQz6MknosqNmaVdEzcmBCeoMSuzI/zDBVf0xP6NCXcl8BXMGguV67wBc X6HJnCn6+DfYzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:27 2026 by rpki-client