This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json) Hash identifier: usMnZ1azmOfcYLza5mc/rk2qVAuZm+duvIDRJiLiGpo= Subject key identifier: E4:CB:6D:48:23:64:F0:BC:19:A3:F0:1E:9D:5B:05:AE:B7:D3:48:50 Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05 Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05 Certificate serial: 019C43C723D9536C967DC7D39177EE0EFEB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 19:00:50 +0000 Manifest this update: Mon 09 Feb 2026 19:00:50 +0000 Manifest next update: Tue 10 Feb 2026 19:00:50 +0000 Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: wT3epJR02QTzooyeXd6Cw+BYIOv7GrGtqN7SqS26wFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:23:d9:53:6c:96:7d:c7:d3:91:77:ee:0e:fe:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05 Validity Not Before: Feb 9 19:00:50 2026 GMT Not After : Feb 10 19:00:50 2026 GMT Subject: CN=e4cb6d482364f0bc19a3f01e9d5b05aeb7d34850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:7b:0e:c6:b4:4f:6c:e6:00:e4:e3:1d:57: 2a:a1:0a:11:80:3b:5d:39:89:15:66:60:11:12:b6: 05:57:59:7b:c1:03:a3:98:32:47:7c:f4:35:74:4e: 2f:fc:dd:3e:8f:25:fd:18:e8:f7:26:a2:2d:72:e2: 42:ce:e5:86:64:3e:30:75:3b:d2:04:b8:e3:fa:84: b7:8e:77:aa:e0:88:e8:a1:ac:f5:16:d9:88:b2:d3: b4:3f:a0:33:21:ee:8c:1e:70:ed:7d:c2:fd:45:bd: 23:0c:25:08:29:af:d3:79:62:3a:3c:74:22:23:b7: c2:de:83:7d:18:89:02:76:b5:73:07:d5:65:5d:ee: 1c:68:63:42:ac:ba:64:4e:2c:ee:00:56:4f:c9:df: fc:5a:e6:59:88:8a:63:ae:c1:d6:c7:57:9b:b3:94: 93:89:f8:8d:58:0f:e5:02:d1:73:f2:4c:47:a2:21: 97:2e:d2:33:12:3d:ed:d8:fc:e0:20:01:8d:dd:cd: 1b:87:38:b5:73:b5:51:f4:97:36:a7:bb:f9:d1:1d: 3e:73:89:05:3b:31:c5:2a:ac:87:87:38:cb:fb:de: ef:cd:8b:f6:6c:46:4d:68:92:2b:1b:c4:fc:b8:b8: 7b:d8:05:af:c7:67:c0:03:c7:08:3e:bb:1d:95:c1: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:6D:48:23:64:F0:BC:19:A3:F0:1E:9D:5B:05:AE:B7:D3:48:50 X509v3 Authority Key Identifier: keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:85:50:dc:32:db:d1:09:a1:6b:1b:79:cd:cc:a7:73:ab: 6c:05:5f:fc:16:25:8f:5d:56:b3:04:3f:d0:bd:23:15:81:05: 25:14:bd:4f:b3:03:de:c2:3d:aa:20:88:61:b1:18:33:ae:4f: 1a:b8:ae:91:0c:1a:04:f1:35:74:9d:8d:d0:31:78:9a:f1:c6: 95:63:52:ae:68:15:ba:56:05:dc:34:1d:4f:d4:2a:09:9b:24: c4:5b:54:ae:d2:74:cf:74:66:0b:1d:f8:df:47:be:7d:ee:3f: d6:76:cf:dd:77:a7:8c:d2:61:82:57:d2:99:f2:33:c7:b3:e2: 64:e4:25:2e:1f:65:3b:c8:4d:f8:c9:ec:73:86:2f:46:09:26: 1a:08:de:c8:28:99:3e:e4:eb:90:d0:13:58:a1:61:81:99:03: 91:9b:dd:73:42:75:ef:38:77:a4:13:6f:ef:e5:7f:d0:3b:ba: fd:81:f0:ac:d1:2a:62:7a:25:6d:27:45:4e:b9:15:2b:48:a6: da:44:47:29:af:09:e5:70:82:26:11:8a:a1:dd:fd:eb:07:62: d0:3d:3b:bf:1a:96:67:95:d6:ae:d6:39:cc:28:6a:6e:19:89: 3e:46:3a:70:da:cd:8f:26:e9:e3:97:eb:91:91:3f:70:c4:ab: 53:66:91:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyPZU2yWfcfTkXfuDv63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzU0NTU5MTkzZmU4MDNkMjg3NGQ2OThmMzQyOTI4Zjc2 MzJhMDUwHhcNMjYwMjA5MTkwMDUwWhcNMjYwMjEwMTkwMDUwWjAzMTEwLwYDVQQD EyhlNGNiNmQ0ODIzNjRmMGJjMTlhM2YwMWU5ZDViMDVhZWI3ZDM0ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzV7Dsa0T2zmAOTjHVcqoQoRgDtd OYkVZmARErYFV1l7wQOjmDJHfPQ1dE4v/N0+jyX9GOj3JqItcuJCzuWGZD4wdTvS BLjj+oS3jneq4Ijooaz1FtmIstO0P6AzIe6MHnDtfcL9Rb0jDCUIKa/TeWI6PHQi I7fC3oN9GIkCdrVzB9VlXe4caGNCrLpkTizuAFZPyd/8WuZZiIpjrsHWx1ebs5ST ifiNWA/lAtFz8kxHoiGXLtIzEj3t2PzgIAGN3c0bhzi1c7VR9Jc2p7v50R0+c4kF OzHFKqyHhzjL+97vzYv2bEZNaJIrG8T8uLh72AWvx2fAA8cIPrsdlcGYVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTLbUgjZPC8GaPwHp1bBa6300hQMB8GA1UdIwQY MBaAFC/FRVkZP+gD0odNaY80KSj3YyoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhWRldSa182QVBTaDAxcGp6UXBLUGRqS2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wODQyZTMtOTA4ZC00MTFhLTliNjkt ZjIwY2M3OThjYjFkLzEvTDhWRldSa182QVBTaDAxcGp6UXBLUGRqS2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wODQyZTMtOTA4ZC00MTFhLTliNjktZjIwY2M3OThjYjFk LzEvTDhWRldSa182QVBTaDAxcGp6UXBLUGRqS2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj2FUNwy 29EJoWsbec3Mp3OrbAVf/BYlj11WswQ/0L0jFYEFJRS9T7MD3sI9qiCIYbEYM65P GriukQwaBPE1dJ2N0DF4mvHGlWNSrmgVulYF3DQdT9QqCZskxFtUrtJ0z3RmCx34 30e+fe4/1nbP3XenjNJhglfSmfIzx7PiZOQlLh9lO8hN+Mnsc4YvRgkmGgjeyCiZ PuTrkNATWKFhgZkDkZvdc0J17zh3pBNv7+V/0Du6/YHwrNEqYnolbSdFTrkVK0im 2kRHKa8J5XCCJhGKod396wdi0D07vxqWZ5XWrtY5zChqbhmJPkY6cNrNjybp45fr kZE/cMSrU2aRtw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:25 2026 by rpki-client