This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json) Hash identifier: dCeenHyCp4P0SSn3HuyFQYPT9ez8byT49hRIv+gm6HQ= Subject key identifier: 99:2B:0B:29:E8:E4:1D:DD:ED:AF:6D:79:77:A6:1D:A6:BA:60:5B:FF Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Certificate serial: 019C41D857CE4FBBB8F1110347F58C9D88B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft Manifest number: 06F9 Signing time: Mon 09 Feb 2026 10:00:23 +0000 Manifest this update: Mon 09 Feb 2026 10:00:23 +0000 Manifest next update: Tue 10 Feb 2026 10:00:23 +0000 Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: 39I0G0EmMIuV3Um5wo7oygoqPP/KmalnggAopCy6Eaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:57:ce:4f:bb:b8:f1:11:03:47:f5:8c:9d:88:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Validity Not Before: Feb 9 10:00:23 2026 GMT Not After : Feb 10 10:00:23 2026 GMT Subject: CN=992b0b29e8e41dddedaf6d7977a61da6ba605bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:c0:10:b0:5f:48:56:de:5c:c4:a6:22:43: 46:1e:63:c1:e1:2c:1d:ec:8c:3a:b6:a0:ee:1d:c7: 3d:71:1a:47:cc:d6:a0:de:b5:6d:45:94:46:2d:bf: 4b:43:09:d4:c3:f2:d8:cb:fd:f6:24:3a:10:ff:00: 07:00:3f:80:53:12:34:00:6e:38:43:4b:aa:60:48: 92:11:4d:14:e2:43:ad:1d:9d:ad:4f:fb:34:72:3b: 31:42:0a:6a:82:bb:35:1a:8e:e2:05:9a:23:5e:9b: b3:56:57:ed:80:c2:d7:53:a0:60:b8:00:75:60:d9: e7:aa:78:52:fb:47:04:bb:ab:bd:54:0a:93:fc:a9: 37:dd:f2:45:68:eb:37:37:4b:5c:bd:7d:76:14:00: 26:74:b0:ad:3a:9c:2c:b8:b4:6e:43:fe:c1:c1:30: cc:61:c5:7a:6f:3d:db:f2:59:d8:ae:ba:d7:e8:51: 51:f9:2c:4a:24:31:03:4b:8e:83:d3:79:64:7f:5b: b3:72:df:82:63:3b:14:5b:f1:c6:6b:67:d3:6d:03: 29:37:07:ef:d0:6d:d6:45:b9:32:f4:4a:51:33:e8: ba:aa:2f:ac:01:ce:25:16:aa:8c:58:4b:e8:a6:d2: fe:a4:25:cc:af:41:7f:de:86:2e:8c:ef:87:17:e4: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:0B:29:E8:E4:1D:DD:ED:AF:6D:79:77:A6:1D:A6:BA:60:5B:FF X509v3 Authority Key Identifier: keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:79:5c:07:25:10:56:0e:68:16:ba:70:78:bb:a1:a3:9b:bf: b9:6a:75:d4:e5:7c:03:4d:84:40:6b:20:c6:8f:14:77:af:d0: ed:02:5e:b0:af:b5:45:39:b5:ad:98:26:f2:b5:12:7d:4f:a5: b8:8d:bd:34:93:2c:d3:55:a4:d4:4c:77:01:6d:d7:ad:b7:eb: 09:95:84:f2:f7:ae:5a:91:ce:aa:5e:03:9f:f8:53:cb:dc:19: 89:21:91:6a:9c:32:5f:57:78:9d:2e:72:be:1a:51:54:a7:2a: 47:86:08:62:b2:b3:a7:11:73:2a:ae:33:45:5c:e4:e9:fa:1a: 1d:78:b4:74:41:22:4d:bf:12:c8:a3:ac:17:99:b0:fb:f8:ae: e0:96:d0:27:5e:98:66:6b:51:67:9f:f9:d1:17:a8:ba:fb:b3: 5f:bc:ac:aa:81:98:2d:90:f9:27:bd:f1:75:9f:11:96:27:55: 99:f3:5c:97:3a:e7:5c:7e:d6:5d:36:f3:43:c1:7d:90:db:cd: 34:a3:ce:b9:ca:35:38:e6:fd:ab:ec:46:29:ab:89:17:b2:1a: ab:23:27:21:99:a9:dc:ac:28:c2:1d:72:f7:b4:49:25:ad:71: 30:8e:ed:db:95:63:68:c9:4d:7f:5e:d0:53:8b:45:54:49:73: 3a:9a:45:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FfOT7u48REDR/WMnYi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh N2ZjYjkwHhcNMjYwMjA5MTAwMDIzWhcNMjYwMjEwMTAwMDIzWjAzMTEwLwYDVQQD Eyg5OTJiMGIyOWU4ZTQxZGRkZWRhZjZkNzk3N2E2MWRhNmJhNjA1YmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD7AELBfSFbeXMSmIkNGHmPB4Swd 7Iw6tqDuHcc9cRpHzNag3rVtRZRGLb9LQwnUw/LYy/32JDoQ/wAHAD+AUxI0AG44 Q0uqYEiSEU0U4kOtHZ2tT/s0cjsxQgpqgrs1Go7iBZojXpuzVlftgMLXU6BguAB1 YNnnqnhS+0cEu6u9VAqT/Kk33fJFaOs3N0tcvX12FAAmdLCtOpwsuLRuQ/7BwTDM YcV6bz3b8lnYrrrX6FFR+SxKJDEDS46D03lkf1uzct+CYzsUW/HGa2fTbQMpNwfv 0G3WRbky9EpRM+i6qi+sAc4lFqqMWEvoptL+pCXMr0F/3oYujO+HF+RVkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkrCyno5B3d7a9teXemHaa6YFv/MB8GA1UdIwQY MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2 LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHlcByUQ Vg5oFrpweLuho5u/uWp11OV8A02EQGsgxo8Ud6/Q7QJesK+1RTm1rZgm8rUSfU+l uI29NJMs01Wk1Ex3AW3XrbfrCZWE8veuWpHOql4Dn/hTy9wZiSGRapwyX1d4nS5y vhpRVKcqR4YIYrKzpxFzKq4zRVzk6foaHXi0dEEiTb8SyKOsF5mw+/iu4JbQJ16Y ZmtRZ5/50ReouvuzX7ysqoGYLZD5J73xdZ8RlidVmfNclzrnXH7WXTbzQ8F9kNvN NKPOuco1OOb9q+xGKauJF7IaqyMnIZmp3Kwowh1y97RJJa1xMI7t25VjaMlNf17Q U4tFVElzOppFqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:49 2026 by rpki-client