This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json) Hash identifier: JZnOsKH8Bw+i7KnXS0fyHPU+dycjVc/LHDelHG1z54c= Subject key identifier: EE:71:6B:E4:E9:98:2B:06:4A:2C:FF:5D:69:1B:28:12:77:03:25:AC Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351 Certificate serial: 019C446C00EAD35AF5F164700BD491723F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft Manifest number: 0412 Signing time: Mon 09 Feb 2026 22:00:54 +0000 Manifest this update: Mon 09 Feb 2026 22:00:54 +0000 Manifest next update: Tue 10 Feb 2026 22:00:54 +0000 Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: X2/lpeq+kj1fKn+pVdEC8zkiiKCt8Tj3vSLla4CbOSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:00:ea:d3:5a:f5:f1:64:70:0b:d4:91:72:3f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351 Validity Not Before: Feb 9 22:00:54 2026 GMT Not After : Feb 10 22:00:54 2026 GMT Subject: CN=ee716be4e9982b064a2cff5d691b2812770325ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:0f:58:3f:c2:4a:d2:74:60:d2:3a:3d:d8: 79:b4:4e:e9:5c:99:03:d9:33:bb:1b:83:27:93:f0: f6:6c:3e:90:9c:3d:52:0b:1f:d2:21:58:33:87:0c: dc:f8:9d:83:7d:bd:1f:41:77:2f:74:b8:b9:53:12: 2e:24:3b:24:7b:19:ad:86:2a:f2:97:7e:53:32:9f: 3e:5d:3e:4b:43:28:67:a7:2e:9a:51:71:14:f0:89: 80:1f:9c:08:0b:16:ab:4e:a1:71:f7:44:00:47:25: 40:b0:89:4a:55:b2:48:9f:61:60:82:3a:cf:9c:5b: a8:74:99:1a:21:73:ea:b7:74:f0:3f:ea:90:d8:e0: af:6a:63:c8:d1:78:fc:cd:28:f6:0c:4a:a6:47:88: d3:6b:82:21:a8:ae:dd:7e:c8:8b:8c:98:a8:2f:e7: 4f:20:be:9b:83:6b:8a:aa:92:56:14:cc:ec:11:7f: e2:25:4a:a1:d7:9c:f2:e4:12:20:26:78:a4:32:08: af:43:32:f7:17:a9:2f:32:d2:0f:8a:6d:6b:7f:c2: 6c:41:1b:3c:51:10:39:f5:60:33:28:fb:65:08:8d: e9:6a:43:e4:4b:c9:86:2f:85:29:85:ff:26:84:a3: d5:ad:bf:90:d1:a5:ec:6e:eb:1c:e5:fc:07:30:63: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:6B:E4:E9:98:2B:06:4A:2C:FF:5D:69:1B:28:12:77:03:25:AC X509v3 Authority Key Identifier: keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:f1:33:5f:f3:84:76:6b:b5:44:8b:a2:2c:3c:4b:61:43: 5d:53:12:d9:8a:80:97:26:28:44:91:e6:98:f5:d2:35:7b:83: 87:aa:27:2b:55:4c:9f:79:2c:df:c9:7f:be:30:bc:65:88:2d: 95:3b:e0:be:c3:f3:da:01:b6:fc:6d:68:ba:06:2f:f3:63:db: dc:5b:4b:e9:11:26:a9:6d:fd:71:6d:3b:35:da:77:a1:14:7b: 4c:c5:ae:fb:60:2a:81:77:a1:6a:aa:96:b4:09:f2:93:83:e6: 80:25:8b:2b:48:48:09:68:4f:9b:d2:37:3f:fc:30:45:a4:5b: 42:71:50:4f:35:03:0b:60:ba:f2:7d:d0:6e:6a:31:f5:36:89: b4:7f:b1:60:07:00:64:c8:ff:99:51:8a:a7:e5:61:c2:33:81: 6d:97:15:9a:52:c0:48:72:87:02:2f:77:39:52:1a:cf:5d:16: 26:42:0e:4e:39:7a:40:0e:db:97:21:99:13:ac:ba:38:c5:b6: 7a:e8:d1:f0:5c:8d:ad:3a:bc:2c:e2:07:88:a2:2f:af:da:32: e6:78:fc:d9:f9:d8:36:56:18:df:4a:38:fa:dd:da:ab:87:b2: 05:69:b9:e1:a7:f4:9e:a9:41:ea:03:0c:22:f3:22:bc:f6:d2: d8:0e:5c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbADq01r18WRwC9SRcj8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2YxYjEzOWRmMjRhMDVjMmU1MjU2MDUyYjAyMTI1MTdl NDczNTEwHhcNMjYwMjA5MjIwMDU0WhcNMjYwMjEwMjIwMDU0WjAzMTEwLwYDVQQD EyhlZTcxNmJlNGU5OTgyYjA2NGEyY2ZmNWQ2OTFiMjgxMjc3MDMyNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj18PWD/CStJ0YNI6Pdh5tE7pXJkD 2TO7G4Mnk/D2bD6QnD1SCx/SIVgzhwzc+J2Dfb0fQXcvdLi5UxIuJDskexmthiry l35TMp8+XT5LQyhnpy6aUXEU8ImAH5wICxarTqFx90QARyVAsIlKVbJIn2FggjrP nFuodJkaIXPqt3TwP+qQ2OCvamPI0Xj8zSj2DEqmR4jTa4IhqK7dfsiLjJioL+dP IL6bg2uKqpJWFMzsEX/iJUqh15zy5BIgJnikMgivQzL3F6kvMtIPim1rf8JsQRs8 URA59WAzKPtlCI3pakPkS8mGL4Uphf8mhKPVrb+Q0aXsbusc5fwHMGNLKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5xa+TpmCsGSiz/XWkbKBJ3AyWsMB8GA1UdIwQY MBaAFJg/GxOd8koFwuUlYFKwISUX5HNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAt ZWY5NjQ0MzEyZGRiLzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAtZWY5NjQ0MzEyZGRi LzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGjxM1/z hHZrtUSLoiw8S2FDXVMS2YqAlyYoRJHmmPXSNXuDh6onK1VMn3ks38l/vjC8ZYgt lTvgvsPz2gG2/G1ougYv82Pb3FtL6REmqW39cW07Ndp3oRR7TMWu+2AqgXehaqqW tAnyk4PmgCWLK0hICWhPm9I3P/wwRaRbQnFQTzUDC2C68n3Qbmox9TaJtH+xYAcA ZMj/mVGKp+VhwjOBbZcVmlLASHKHAi93OVIaz10WJkIOTjl6QA7blyGZE6y6OMW2 eujR8FyNrTq8LOIHiKIvr9oy5nj82fnYNlYY30o4+t3aq4eyBWm54af0nqlB6gMM IvMivPbS2A5c7A== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:58 2026 by rpki-client