This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft File: d8ggit5qFhm9IAB1mRSyXGKbDJk.mft (raw, json) Hash identifier: 0RXvuukXUZM0cs6U+QmwiMq5HkxhLgu+rkaEeU4g5NI= Subject key identifier: 2D:60:0B:9F:2A:84:46:1C:3A:EE:86:35:30:4B:4E:70:BE:57:3C:A1 Authority key identifier: 77:C8:20:8A:DE:6A:16:19:BD:20:00:75:99:14:B2:5C:62:9B:0C:99 Certificate issuer: /CN=77c8208ade6a1619bd2000759914b25c629b0c99 Certificate serial: 019C43903931C802586D69FDAD58F73B29BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft Manifest number: 64 Signing time: Mon 09 Feb 2026 18:00:51 +0000 Manifest this update: Mon 09 Feb 2026 18:00:51 +0000 Manifest next update: Tue 10 Feb 2026 18:00:51 +0000 Files and hashes: 1: _lGkvkdm9SeHy9gEQ7Iw5DdyD8k.roa (hash: 9GwKeaFt0nYG97+rXWl0xJdoSrCjCcg4111rrC+L+94=) 2: d8ggit5qFhm9IAB1mRSyXGKbDJk.crl (hash: LIXSLKrqiorkfSZmlzslosp8eOeQbSYTpjSaEBixDR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:39:31:c8:02:58:6d:69:fd:ad:58:f7:3b:29:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c8208ade6a1619bd2000759914b25c629b0c99 Validity Not Before: Feb 9 18:00:51 2026 GMT Not After : Feb 10 18:00:51 2026 GMT Subject: CN=2d600b9f2a84461c3aee8635304b4e70be573ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:fc:1f:03:a4:00:7f:9c:3c:37:13:17:d2: 81:ee:d3:48:31:63:84:7a:5f:64:97:6a:2a:1d:85: cd:54:4d:77:95:d0:b2:3e:e5:e7:f6:75:ef:ec:e8: 04:e2:34:50:e8:fb:48:4c:2b:14:f9:b2:d9:8f:c6: ae:fd:71:0c:c6:ce:98:eb:38:b1:44:a3:c6:4f:b4: fb:3d:ee:37:65:e7:56:c5:f3:80:d5:dd:07:ad:8c: e4:ff:61:a8:f2:2f:1f:c1:f0:90:48:4e:5c:19:ee: f5:51:c5:26:65:20:b2:c6:b2:aa:44:96:fb:9f:f5: 1f:36:3c:ea:31:db:17:24:6f:65:79:65:e9:f1:18: 30:8d:53:7e:5d:6a:e7:36:89:ea:75:36:9c:6d:a2: 3a:b9:2d:9e:b9:f6:0e:72:dc:14:b5:0c:7f:c0:7d: 86:09:24:2e:40:62:74:ae:12:73:50:de:41:89:67: 14:d1:f1:5d:22:83:20:d7:ed:2d:e4:83:f6:f8:ba: ad:43:f8:d8:c6:97:b2:6f:f6:40:d2:58:02:a5:85: dc:a1:c5:4c:ec:eb:f4:1a:58:c0:9f:36:d9:97:ef: c8:08:24:2f:37:b5:bd:41:04:64:f3:ce:6b:10:e1: fd:01:d1:48:08:40:c4:d7:62:ff:65:c1:05:9b:c4: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:0B:9F:2A:84:46:1C:3A:EE:86:35:30:4B:4E:70:BE:57:3C:A1 X509v3 Authority Key Identifier: keyid:77:C8:20:8A:DE:6A:16:19:BD:20:00:75:99:14:B2:5C:62:9B:0C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bb:cf:12:7c:c1:1b:50:78:cd:3d:e3:30:0c:82:4a:f9:ab: 15:2c:70:9a:c6:00:21:88:58:af:89:6d:52:94:74:ed:5d:1b: 50:5d:04:49:9d:2f:1d:0e:2d:a1:d6:2d:12:29:1c:16:66:4d: b4:2a:3d:b0:1a:ef:db:09:8f:9a:47:94:29:87:6b:9b:d2:ed: 4f:49:df:22:20:80:1e:2b:68:5a:e6:be:7c:17:88:63:e7:3d: 70:94:93:d3:bc:0b:37:55:ee:a9:a6:6b:f3:32:ae:fa:0c:83: 4d:34:91:de:f9:8e:0c:82:57:23:77:67:ce:35:51:dc:ef:58: af:74:8a:90:94:1f:40:b9:e4:3e:7a:cf:57:a6:cb:62:ef:e3: 92:02:03:ae:11:94:28:19:7b:43:82:0f:76:13:d0:a8:e4:0b: 78:1c:c3:af:b1:35:76:fe:5b:55:b6:28:a8:7c:d5:54:01:f0: 42:98:90:83:26:64:91:e0:6f:c1:14:88:fa:84:31:b3:c1:af: c5:83:1a:78:80:12:a0:c2:6d:c3:25:1e:4b:ea:e9:5a:07:cd: 29:ba:dc:fd:22:82:63:25:15:4f:3a:68:81:a6:55:b6:bd:2c: 0b:5d:de:83:ff:16:b4:d8:6f:fe:ea:5f:ef:22:7f:e7:a5:b6: 4a:cf:40:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDkxyAJYbWn9rVj3Oym+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzgyMDhhZGU2YTE2MTliZDIwMDA3NTk5MTRiMjVjNjI5 YjBjOTkwHhcNMjYwMjA5MTgwMDUxWhcNMjYwMjEwMTgwMDUxWjAzMTEwLwYDVQQD EygyZDYwMGI5ZjJhODQ0NjFjM2FlZTg2MzUzMDRiNGU3MGJlNTczY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPn8HwOkAH+cPDcTF9KB7tNIMWOE el9kl2oqHYXNVE13ldCyPuXn9nXv7OgE4jRQ6PtITCsU+bLZj8au/XEMxs6Y6zix RKPGT7T7Pe43ZedWxfOA1d0HrYzk/2Go8i8fwfCQSE5cGe71UcUmZSCyxrKqRJb7 n/UfNjzqMdsXJG9leWXp8RgwjVN+XWrnNonqdTacbaI6uS2eufYOctwUtQx/wH2G CSQuQGJ0rhJzUN5BiWcU0fFdIoMg1+0t5IP2+LqtQ/jYxpeyb/ZA0lgCpYXcocVM 7Ov0GljAnzbZl+/ICCQvN7W9QQRk885rEOH9AdFICEDE12L/ZcEFm8QVvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1gC58qhEYcOu6GNTBLTnC+VzyhMB8GA1UdIwQY MBaAFHfIIIreahYZvSAAdZkUslximwyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhnZ2l0NXFGaG05SUFCMW1SU3lYR0tiREprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iODE3NTYtM2M1Ny00OTM3LWExZmUt NDQ1YTJjMmFiMmNhLzEvZDhnZ2l0NXFGaG05SUFCMW1SU3lYR0tiREprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9iODE3NTYtM2M1Ny00OTM3LWExZmUtNDQ1YTJjMmFiMmNh LzEvZDhnZ2l0NXFGaG05SUFCMW1SU3lYR0tiREprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7vPEnzB G1B4zT3jMAyCSvmrFSxwmsYAIYhYr4ltUpR07V0bUF0ESZ0vHQ4todYtEikcFmZN tCo9sBrv2wmPmkeUKYdrm9LtT0nfIiCAHitoWua+fBeIY+c9cJST07wLN1XuqaZr 8zKu+gyDTTSR3vmODIJXI3dnzjVR3O9Yr3SKkJQfQLnkPnrPV6bLYu/jkgIDrhGU KBl7Q4IPdhPQqOQLeBzDr7E1dv5bVbYoqHzVVAHwQpiQgyZkkeBvwRSI+oQxs8Gv xYMaeIASoMJtwyUeS+rpWgfNKbrc/SKCYyUVTzpogaZVtr0sC13eg/8WtNhv/upf 7yJ/56W2Ss9ALA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:50 2026 by rpki-client