This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json) Hash identifier: 4WnAA8zeDeRb+e/7e1qF4kgcxB7qwyyPWAE/uzFLe60= Subject key identifier: F2:47:0F:16:80:3E:16:7A:5E:E1:89:05:BA:57:32:19:ED:35:05:8E Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Certificate serial: 019C41A162F6DC55F79418228DC6E21DEF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft Manifest number: 0772 Signing time: Mon 09 Feb 2026 09:00:21 +0000 Manifest this update: Mon 09 Feb 2026 09:00:21 +0000 Manifest next update: Tue 10 Feb 2026 09:00:21 +0000 Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: e5SA6jgflB8AN11y0NiTAW3QFO4+vwJl3MAyYTG+mtk=) 2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:62:f6:dc:55:f7:94:18:22:8d:c6:e2:1d:ef:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Validity Not Before: Feb 9 09:00:21 2026 GMT Not After : Feb 10 09:00:21 2026 GMT Subject: CN=f2470f16803e167a5ee18905ba573219ed35058e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:d1:28:54:13:93:41:d8:58:b6:48:1e:36: 74:59:24:8e:da:e4:13:f0:3f:69:5b:39:e5:9b:e3: ed:0a:57:59:82:17:4e:ca:70:1e:0e:c6:03:36:f2: f6:52:02:fb:53:0f:7a:72:36:ab:2f:61:1d:88:10: 0e:6c:5b:82:c2:c4:dc:f9:26:52:bc:18:22:20:84: 03:b4:87:2e:92:06:b0:a9:8b:4a:81:c0:d4:21:2c: b2:8f:71:3a:95:10:b8:03:89:1d:43:2e:ab:e1:16: 6a:7a:a4:40:b5:c2:98:9a:ed:3a:69:b8:82:db:ef: 4f:46:f1:7c:e0:84:6c:79:e4:fb:01:82:64:da:e8: d8:34:0d:5d:a5:81:1e:34:85:54:95:06:cd:81:b4: 42:62:9b:ee:76:53:c4:41:9d:e0:ce:22:76:f3:50: af:8f:19:64:dc:40:a9:c6:46:98:8a:e2:16:ac:83: 24:f5:16:f0:77:36:5b:95:33:88:d9:16:34:7b:55: d0:96:6f:f8:fa:3a:7d:65:0b:e3:ad:3d:25:4e:91: 97:af:4c:22:ef:6d:bd:c5:13:15:a3:45:f3:98:fb: 90:8e:ef:f2:7f:1f:c3:5f:e6:ca:19:7c:b0:f6:4e: 3a:31:5e:fd:55:14:9e:ed:7d:44:fa:de:db:82:76: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:0F:16:80:3E:16:7A:5E:E1:89:05:BA:57:32:19:ED:35:05:8E X509v3 Authority Key Identifier: keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:95:09:25:b0:f4:a3:86:b0:32:62:96:0d:09:ad:47:22:1d: 7f:f7:21:02:2c:46:3d:a2:a0:ac:5f:98:a3:e1:17:d8:b1:1b: 6f:9d:40:63:cc:4e:72:24:1b:7b:a9:e2:69:e9:dc:69:a3:7b: 38:73:52:a3:77:04:63:95:df:b0:a6:66:1b:d7:36:10:33:79: d3:cf:f8:f1:15:27:a4:95:dc:f5:84:ec:f1:b7:1f:13:3d:10: b4:21:93:4b:64:2f:39:6e:3c:c0:a4:9d:e3:3f:53:cb:0e:5c: d3:23:6a:68:77:f6:ff:f8:48:aa:ef:0e:05:dd:86:c3:ba:ee: d0:d7:08:b7:a6:07:b4:33:36:e0:14:e2:8a:2c:13:00:e5:ee: 85:58:de:04:1b:4e:07:cb:02:ea:c0:62:25:e2:ab:e1:68:18: 7a:f4:9b:73:5d:2e:4c:22:5b:5f:bf:4c:63:70:cd:a0:e2:30: aa:c0:c1:d4:e1:34:60:b9:78:58:53:51:bb:24:8c:ea:17:09: fe:e1:96:04:fb:1f:09:3e:d3:5c:6b:85:12:af:0f:ed:9d:44: 94:ae:50:6c:12:c0:72:8f:71:ce:14:a3:2f:02:f9:f9:3e:f7: ca:d0:33:dd:c7:e8:76:90:0c:fd:ae:68:89:52:e1:b2:23:25: 2c:88:66:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWL23FX3lBgijcbiHe+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh OTk0NGIwHhcNMjYwMjA5MDkwMDIxWhcNMjYwMjEwMDkwMDIxWjAzMTEwLwYDVQQD EyhmMjQ3MGYxNjgwM2UxNjdhNWVlMTg5MDViYTU3MzIxOWVkMzUwNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxazRKFQTk0HYWLZIHjZ0WSSO2uQT 8D9pWznlm+PtCldZghdOynAeDsYDNvL2UgL7Uw96cjarL2EdiBAObFuCwsTc+SZS vBgiIIQDtIcukgawqYtKgcDUISyyj3E6lRC4A4kdQy6r4RZqeqRAtcKYmu06abiC 2+9PRvF84IRseeT7AYJk2ujYNA1dpYEeNIVUlQbNgbRCYpvudlPEQZ3gziJ281Cv jxlk3ECpxkaYiuIWrIMk9RbwdzZblTOI2RY0e1XQlm/4+jp9ZQvjrT0lTpGXr0wi 7229xRMVo0XzmPuQju/yfx/DX+bKGXyw9k46MV79VRSe7X1E+t7bgnZh2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJHDxaAPhZ6XuGJBbpXMhntNQWOMB8GA1UdIwQY MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpUJJbD0 o4awMmKWDQmtRyIdf/chAixGPaKgrF+Yo+EX2LEbb51AY8xOciQbe6niaencaaN7 OHNSo3cEY5XfsKZmG9c2EDN508/48RUnpJXc9YTs8bcfEz0QtCGTS2QvOW48wKSd 4z9Tyw5c0yNqaHf2//hIqu8OBd2Gw7ru0NcIt6YHtDM24BTiiiwTAOXuhVjeBBtO B8sC6sBiJeKr4WgYevSbc10uTCJbX79MY3DNoOIwqsDB1OE0YLl4WFNRuySM6hcJ /uGWBPsfCT7TXGuFEq8P7Z1ElK5QbBLAco9xzhSjLwL5+T73ytAz3cfodpAM/a5o iVLhsiMlLIhmtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:29 2026 by rpki-client