This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json) Hash identifier: NCRKePoP6EJWuxejahE62HL/godYf6lRtLe5iubTkSY= Subject key identifier: BF:B4:C7:EF:B6:D1:2F:37:D8:B4:A2:18:7D:CD:4A:11:73:77:BE:35 Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48 Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848 Certificate serial: 019C41D8E5703FC9B22245852EADD2DF47AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft Manifest number: 048E Signing time: Mon 09 Feb 2026 10:00:59 +0000 Manifest this update: Mon 09 Feb 2026 10:00:59 +0000 Manifest next update: Tue 10 Feb 2026 10:00:59 +0000 Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: AOdpocAlc3aGkcSfD/r1UPEnFV2bu8D7LmDmq1roeh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e5:70:3f:c9:b2:22:45:85:2e:ad:d2:df:47:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848 Validity Not Before: Feb 9 10:00:59 2026 GMT Not After : Feb 10 10:00:59 2026 GMT Subject: CN=bfb4c7efb6d12f37d8b4a2187dcd4a117377be35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3b:75:de:e3:40:85:a7:c0:ea:cd:c3:47:17: 02:49:ab:dd:63:48:dd:d4:63:b7:60:5d:3a:c0:ec: d0:60:e9:2b:ca:47:18:68:87:69:59:f7:7f:13:06: 32:16:b1:08:d9:75:c3:b9:c9:61:3d:62:b9:77:5c: 67:1b:70:8d:51:54:b9:06:b2:d2:41:b2:32:14:fd: 66:37:1e:4f:2a:fc:59:aa:6d:c3:27:f2:ef:57:17: e9:74:bf:e4:e1:1d:05:e6:2e:94:fe:f2:2e:3a:6b: c6:97:c5:86:83:46:d6:b9:d4:c9:62:f6:aa:d9:e9: ed:87:ec:97:7b:8b:4b:db:e7:73:aa:03:33:9d:6e: 5c:25:ee:fc:23:7f:2d:e3:81:0f:af:16:53:3d:10: 88:b9:ec:8f:29:f1:58:a9:e9:68:e3:a0:f3:c0:34: 26:b3:cb:54:68:46:e2:7d:ea:14:64:1b:ac:e0:f8: 7f:0b:bf:e6:0e:36:f3:9a:e1:a4:33:1f:47:aa:de: a2:19:8f:ff:48:ca:88:49:73:ea:b8:bb:40:58:17: a2:b4:dd:28:fb:3f:98:ff:4a:0a:61:8c:5e:3a:69: 5f:6c:3e:af:a6:20:88:ad:dd:40:ec:73:e8:76:b1: 38:ee:97:7e:3d:9e:59:1a:31:20:ae:58:a1:85:5b: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:C7:EF:B6:D1:2F:37:D8:B4:A2:18:7D:CD:4A:11:73:77:BE:35 X509v3 Authority Key Identifier: keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:11:b6:bc:78:db:4e:5f:dc:3a:7c:ea:67:62:8c:eb:4e:b2: d5:b9:35:17:39:41:15:bb:2d:ec:3a:e0:a7:76:2b:ab:c4:e6: d7:5b:f7:aa:c6:27:e9:00:4d:08:fd:6b:d0:b3:0f:13:fa:7c: b6:d7:28:12:c8:f0:98:40:3a:94:48:b0:e2:d7:95:55:34:fd: 83:3f:42:33:ed:02:21:d7:bc:bc:e2:c8:20:94:ef:e7:81:de: 4a:62:cb:36:ea:84:d4:53:d2:61:8b:86:5d:de:c2:d1:d5:39: 54:94:94:99:4d:29:22:25:c3:e7:97:a3:00:ad:16:9f:5a:98: 91:a9:a1:a8:4a:b5:21:a5:e5:f9:88:11:a1:9a:42:35:c8:fc: 72:53:1c:70:92:b8:fa:f8:ab:70:62:e3:e2:43:fc:e4:85:0f: ed:56:c5:0b:1b:34:d7:b5:c4:80:61:3d:28:3a:68:7c:96:6e: 78:55:63:ac:39:61:8c:a0:30:31:0e:e7:21:39:02:51:32:70: 1b:21:10:28:33:d5:93:f3:67:49:53:a1:05:9f:fb:05:82:ca: cb:d6:f2:63:e6:7f:78:a1:cd:3b:fd:e8:79:94:af:f6:b5:f5: ee:10:9d:cf:b4:0f:37:8c:c2:63:1c:48:72:bf:17:1f:07:3c: 63:12:b2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OVwP8myIkWFLq3S30erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGRjYjFjYTFkNDY4YmMwNDQ3MGYxZGI0YTQ2ZWNmNWI4 Mjc4NDgwHhcNMjYwMjA5MTAwMDU5WhcNMjYwMjEwMTAwMDU5WjAzMTEwLwYDVQQD EyhiZmI0YzdlZmI2ZDEyZjM3ZDhiNGEyMTg3ZGNkNGExMTczNzdiZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Tt13uNAhafA6s3DRxcCSavdY0jd 1GO3YF06wOzQYOkrykcYaIdpWfd/EwYyFrEI2XXDuclhPWK5d1xnG3CNUVS5BrLS QbIyFP1mNx5PKvxZqm3DJ/LvVxfpdL/k4R0F5i6U/vIuOmvGl8WGg0bWudTJYvaq 2enth+yXe4tL2+dzqgMznW5cJe78I38t44EPrxZTPRCIueyPKfFYqelo46DzwDQm s8tUaEbifeoUZBus4Ph/C7/mDjbzmuGkMx9Hqt6iGY//SMqISXPquLtAWBeitN0o +z+Y/0oKYYxeOmlfbD6vpiCIrd1A7HPodrE47pd+PZ5ZGjEgrlihhVtd9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+0x++20S832LSiGH3NShFzd741MB8GA1UdIwQY MBaAFPBNyxyh1Gi8BEcPHbSkbs9bgnhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEt ZGI1MTYwZWU3NGU3LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEtZGI1MTYwZWU3NGU3 LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchG2vHjb Tl/cOnzqZ2KM606y1bk1FzlBFbst7Drgp3Yrq8Tm11v3qsYn6QBNCP1r0LMPE/p8 ttcoEsjwmEA6lEiw4teVVTT9gz9CM+0CIde8vOLIIJTv54HeSmLLNuqE1FPSYYuG Xd7C0dU5VJSUmU0pIiXD55ejAK0Wn1qYkamhqEq1IaXl+YgRoZpCNcj8clMccJK4 +vircGLj4kP85IUP7VbFCxs017XEgGE9KDpofJZueFVjrDlhjKAwMQ7nITkCUTJw GyEQKDPVk/NnSVOhBZ/7BYLKy9byY+Z/eKHNO/3oeZSv9rX17hCdz7QPN4zCYxxI cr8XHwc8YxKyKw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:00 2026 by rpki-client