This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json) Hash identifier: VXk/HREWeAMuHxrxTjpEK7Cs8zajuW0FIXLBxZUT3zM= Subject key identifier: F7:C9:7F:C8:08:04:25:A2:8D:09:30:5F:18:4D:21:0C:DC:87:C7:ED Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b Certificate serial: 019C4321F27359688987A816DDAEDB6CA6E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: guxFiu50kroSCBRuFtdSAX4xiuqLWcBtwmByqm8Chn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f2:73:59:68:89:87:a8:16:dd:ae:db:6c:a6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=f7c97fc8080425a28d09305f184d210cdc87c7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:9a:03:12:bb:53:d9:9a:b3:b8:1b:27:79: fb:f8:52:d6:29:4e:b1:3f:1c:02:ad:46:38:8c:c3: a4:d7:1d:ba:27:2c:39:b7:eb:4c:17:76:a7:4f:98: e1:60:34:ec:06:3d:90:b5:c4:ce:04:d7:b3:11:b3: 2b:bd:99:7e:67:34:85:a4:97:e8:0b:91:a9:cf:a8: a4:eb:8e:2c:50:4c:ac:a2:0e:37:5e:f0:3e:42:ad: 96:cb:69:de:e1:88:ad:90:2b:d7:28:e3:34:3f:8a: b1:3c:1b:ba:df:e9:56:a5:18:51:cc:32:1a:7d:87: 8a:d9:65:00:f1:ca:cb:52:8e:ef:0d:4b:d4:72:74: aa:98:74:b4:de:37:e0:ac:c5:4b:e8:40:6a:c5:52: 16:e0:f0:be:be:8a:73:2e:cc:50:a1:48:7c:9f:22: 8b:e5:d6:c0:b5:80:69:2d:f3:6c:36:d1:6b:da:47: d6:9f:57:ce:a3:d9:84:7b:c1:ee:34:e9:64:4c:b6: d1:03:bc:b0:05:5e:83:4a:dd:8a:6a:f1:93:6b:08: 40:a9:8c:6d:41:19:8a:bf:2f:8f:97:bf:1e:ac:cd: 44:d5:85:99:f5:cb:4a:e0:7e:56:71:d0:8e:5a:12: d9:c2:61:40:02:e6:a6:90:56:6b:dd:1f:5b:bf:d3: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C9:7F:C8:08:04:25:A2:8D:09:30:5F:18:4D:21:0C:DC:87:C7:ED X509v3 Authority Key Identifier: keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fb:2c:1e:fe:03:72:ed:02:46:4b:98:07:10:55:fa:ce:5e: 15:32:da:cb:8f:84:be:08:08:d8:1a:ee:7f:f3:d4:e6:84:cb: aa:25:cf:e9:77:d0:0a:e6:35:3d:83:9e:67:d5:e0:c5:5a:e3: a1:45:e7:e7:fe:d0:54:1d:c9:87:8b:67:c1:26:9e:e3:9b:ef: 62:01:de:86:b7:5d:34:41:2d:b0:3b:f3:1c:aa:c9:ab:03:7e: 87:9c:0d:e7:05:4c:69:c2:3c:d4:7d:b5:f0:32:00:26:e2:28: 90:54:25:77:ac:8d:21:09:99:58:f4:09:31:7c:d7:e4:16:b1: 00:25:db:9d:42:84:fa:2a:5c:62:6e:cc:b3:c8:c4:6c:dd:65: 88:bc:31:10:81:0f:8b:1e:e2:75:2b:ee:bc:6d:20:9f:f4:61: 87:96:e3:b7:3a:c8:de:66:34:49:f3:e0:b8:da:c4:0f:6c:e8: 43:5b:ec:4a:df:90:c3:86:28:93:03:77:53:62:e6:2c:78:0c: 3c:4d:90:77:dd:fe:14:59:7d:5a:13:77:80:10:2a:6f:37:f7: 5a:6a:2d:e1:72:df:97:81:e6:81:09:8e:a4:cc:90:a2:08:61: 2b:3d:d0:34:f0:95:cc:e6:6d:1f:f3:00:a2:72:b3:fd:c9:20: e6:60:60:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfJzWWiJh6gW3a7bbKboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzgwODUxOWYyYjA4MDQ1YzdmYjQxYTYxZmRhNGUwOWU1 MTg5MWIwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD EyhmN2M5N2ZjODA4MDQyNWEyOGQwOTMwNWYxODRkMjEwY2RjODdjN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7GaAxK7U9mas7gbJ3n7+FLWKU6x PxwCrUY4jMOk1x26Jyw5t+tMF3anT5jhYDTsBj2QtcTOBNezEbMrvZl+ZzSFpJfo C5Gpz6ik644sUEysog43XvA+Qq2Wy2ne4YitkCvXKOM0P4qxPBu63+lWpRhRzDIa fYeK2WUA8crLUo7vDUvUcnSqmHS03jfgrMVL6EBqxVIW4PC+vopzLsxQoUh8nyKL 5dbAtYBpLfNsNtFr2kfWn1fOo9mEe8HuNOlkTLbRA7ywBV6DSt2KavGTawhAqYxt QRmKvy+Pl78erM1E1YWZ9ctK4H5WcdCOWhLZwmFAAuamkFZr3R9bv9MHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfJf8gIBCWijQkwXxhNIQzch8ftMB8GA1UdIwQY MBaAFPJ4CFGfKwgEXH+0GmH9pOCeUYkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjct NTg1NWMxZDE0YzliLzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjctNTg1NWMxZDE0Yzli LzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPssHv4D cu0CRkuYBxBV+s5eFTLay4+EvggI2Bruf/PU5oTLqiXP6XfQCuY1PYOeZ9XgxVrj oUXn5/7QVB3Jh4tnwSae45vvYgHehrddNEEtsDvzHKrJqwN+h5wN5wVMacI81H21 8DIAJuIokFQld6yNIQmZWPQJMXzX5BaxACXbnUKE+ipcYm7Ms8jEbN1liLwxEIEP ix7idSvuvG0gn/Rhh5bjtzrI3mY0SfPguNrED2zoQ1vsSt+Qw4YokwN3U2LmLHgM PE2Qd93+FFl9WhN3gBAqbzf3Wmot4XLfl4HmgQmOpMyQoghhKz3QNPCVzOZtH/MA onKz/ckg5mBgbA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:56 2026 by rpki-client