This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json) Hash identifier: S45Z7kDcgCYeUyiyXwxeYoXytGIFrmwm4vq65UX9RlY= Subject key identifier: 9F:62:6E:6F:E0:30:69:46:99:44:A8:39:D1:F0:A6:5C:B7:C1:1A:F8 Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d Certificate serial: 019C41A23E5417883805BEDA8460870B067F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft Manifest number: 1508 Signing time: Mon 09 Feb 2026 09:01:17 +0000 Manifest this update: Mon 09 Feb 2026 09:01:17 +0000 Manifest next update: Tue 10 Feb 2026 09:01:17 +0000 Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: GNMkRgoqOmibd+lYlUMY4uZY664Bn/FaA+xIpASKRyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:3e:54:17:88:38:05:be:da:84:60:87:0b:06:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d Validity Not Before: Feb 9 09:01:17 2026 GMT Not After : Feb 10 09:01:17 2026 GMT Subject: CN=9f626e6fe03069469944a839d1f0a65cb7c11af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:dd:e7:78:b9:a7:69:20:a4:dd:31:c5:81: 58:07:23:75:12:43:93:32:75:47:2e:4e:5a:55:0e: 4f:c0:3c:49:31:97:d0:0f:97:e7:a6:58:a3:7c:ba: ef:bc:64:10:be:02:64:10:35:c2:5d:ba:55:88:bc: 2f:e5:b6:94:89:7c:2f:c7:d8:88:06:aa:63:c2:17: 51:de:ca:dc:be:4f:4e:a2:58:15:ab:07:57:c4:c2: ab:dc:b0:ed:c4:4d:56:0f:9a:66:b2:59:15:c5:95: a3:76:14:2b:a0:cc:e3:de:a2:90:42:7a:0c:30:f2: 46:cc:22:77:e4:f3:19:5c:41:0a:eb:5a:6f:cf:71: 9f:2f:fc:95:94:b5:07:65:16:a4:26:14:b8:61:a8: 11:4d:f1:5c:1d:3b:b2:12:df:99:d2:e0:d0:9f:05: f5:db:0b:06:cc:ac:f8:c5:2e:19:dc:62:b9:78:92: 2b:b2:2e:55:c4:ce:ee:14:bf:8d:d2:f6:71:9b:df: 49:5f:60:77:df:f5:15:c8:47:8c:33:31:bc:07:50: 19:17:6c:71:0c:0d:47:33:14:57:c3:b1:69:51:84: a2:43:66:0f:8f:54:0c:cc:7a:7d:4e:56:c4:fc:c3: 22:04:47:ea:a9:2c:4d:7c:1e:0a:58:9f:3f:8e:b3: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:6E:6F:E0:30:69:46:99:44:A8:39:D1:F0:A6:5C:B7:C1:1A:F8 X509v3 Authority Key Identifier: keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:82:65:76:74:1e:b9:85:27:f3:72:ae:19:c0:f7:70:b8:a5: 93:d4:03:c4:cc:8a:3e:ca:f0:08:f0:01:6d:7d:12:9b:5a:b6: 1f:e3:88:d5:44:09:00:45:d5:49:46:8e:d2:0e:29:5c:85:1f: 3e:f6:90:83:a8:37:72:3b:c6:03:b0:1f:0f:81:22:7e:d6:1c: 45:06:7a:80:9c:33:dd:94:cf:4d:6b:f1:f7:e2:ee:75:21:e8: a4:da:40:5c:7b:d9:39:66:f6:f2:9d:1a:7c:28:60:a4:fa:0f: 94:62:43:a2:a1:a9:39:2b:50:7d:6e:ba:4a:9f:2f:83:fe:c4: 99:a7:05:3a:87:4f:bf:a6:da:97:78:22:a0:51:c7:5f:4b:68: 0c:2c:5a:c9:7a:22:fb:a3:6a:88:8c:31:84:e6:65:92:cc:10: 39:ad:07:dc:b6:2a:4d:35:b7:24:d5:88:27:2d:a3:1f:33:f4: ba:05:51:4a:5f:4d:68:e0:ba:8e:12:ab:97:18:7b:bc:fd:a3: 50:40:d4:a1:86:9c:2e:bb:ef:08:f9:ad:dd:ee:9b:5f:c1:df: cf:bb:92:7c:19:99:b2:d5:9c:3a:31:91:39:8e:d1:55:d4:5e: e1:61:03:96:ed:68:c0:86:3a:06:83:27:35:39:06:28:55:f1: 8d:de:63:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoj5UF4g4Bb7ahGCHCwZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGU2ZThhNjE4ODNmNjgwMTY1YjVmNDE1NDg1ZjhmMGQ0 ZjVhOGQwHhcNMjYwMjA5MDkwMTE3WhcNMjYwMjEwMDkwMTE3WjAzMTEwLwYDVQQD Eyg5ZjYyNmU2ZmUwMzA2OTQ2OTk0NGE4MzlkMWYwYTY1Y2I3YzExYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvnd53i5p2kgpN0xxYFYByN1EkOT MnVHLk5aVQ5PwDxJMZfQD5fnplijfLrvvGQQvgJkEDXCXbpViLwv5baUiXwvx9iI BqpjwhdR3srcvk9OolgVqwdXxMKr3LDtxE1WD5pmslkVxZWjdhQroMzj3qKQQnoM MPJGzCJ35PMZXEEK61pvz3GfL/yVlLUHZRakJhS4YagRTfFcHTuyEt+Z0uDQnwX1 2wsGzKz4xS4Z3GK5eJIrsi5VxM7uFL+N0vZxm99JX2B33/UVyEeMMzG8B1AZF2xx DA1HMxRXw7FpUYSiQ2YPj1QMzHp9TlbE/MMiBEfqqSxNfB4KWJ8/jrMy0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9ibm/gMGlGmUSoOdHwply3wRr4MB8GA1UdIwQY MBaAFPAObophiD9oAWW19BVIX48NT1qNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEE1dWltR0lQMmdCWmJYMEZVaGZqdzFQV28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84NDI4MTUtMTM4YS00M2RhLTg3MmMt M2NmZjE0ODI4ZGZkLzEvOEE1dWltR0lQMmdCWmJYMEZVaGZqdzFQV28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84NDI4MTUtMTM4YS00M2RhLTg3MmMtM2NmZjE0ODI4ZGZk LzEvOEE1dWltR0lQMmdCWmJYMEZVaGZqdzFQV28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoJldnQe uYUn83KuGcD3cLilk9QDxMyKPsrwCPABbX0Sm1q2H+OI1UQJAEXVSUaO0g4pXIUf PvaQg6g3cjvGA7AfD4EiftYcRQZ6gJwz3ZTPTWvx9+LudSHopNpAXHvZOWb28p0a fChgpPoPlGJDoqGpOStQfW66Sp8vg/7EmacFOodPv6bal3gioFHHX0toDCxayXoi +6NqiIwxhOZlkswQOa0H3LYqTTW3JNWIJy2jHzP0ugVRSl9NaOC6jhKrlxh7vP2j UEDUoYacLrvvCPmt3e6bX8Hfz7uSfBmZstWcOjGROY7RVdRe4WEDlu1owIY6BoMn NTkGKFXxjd5jHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:29 2026 by rpki-client