This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json) Hash identifier: Uisl7leOV/037CZLGsDWS5zUMx4nnGqXffU3Nq22++o= Subject key identifier: DA:51:6A:CF:61:17:0B:29:08:0A:7A:49:D4:4B:AC:05:79:BD:20:C2 Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Certificate serial: 019C41A25175EB92D15503147A185805D6A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft Manifest number: 0AC8 Signing time: Mon 09 Feb 2026 09:01:22 +0000 Manifest this update: Mon 09 Feb 2026 09:01:22 +0000 Manifest next update: Tue 10 Feb 2026 09:01:22 +0000 Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=) 2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: TJnpnGmNR1WCPnpDqa6cmwTtrgOzvy9aAv8SVcLrINI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:51:75:eb:92:d1:55:03:14:7a:18:58:05:d6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Validity Not Before: Feb 9 09:01:22 2026 GMT Not After : Feb 10 09:01:22 2026 GMT Subject: CN=da516acf61170b29080a7a49d44bac0579bd20c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:45:df:de:0c:8d:a3:25:aa:2b:b7:73:9f: d6:53:16:33:04:dc:de:2f:0f:75:c3:29:3a:c7:bd: 39:df:15:26:d4:2b:8a:08:19:bc:c7:ae:69:ba:e3: e7:79:8e:fe:40:b5:02:46:92:ba:10:53:45:45:73: a7:8b:3c:0f:f6:e3:58:df:33:41:98:0b:94:19:29: e2:a8:87:ca:0a:e4:55:79:21:55:43:2e:51:5a:a2: 82:17:45:b1:8b:2e:10:45:ec:d3:a7:bd:ed:59:ed: e9:da:8f:c3:98:4b:b4:a0:ed:a0:f2:98:23:b7:cb: 88:2a:81:66:8a:58:32:75:1a:26:41:7d:64:1a:51: de:45:4b:60:b5:61:9f:5a:3a:49:5d:bc:ec:af:f9: 38:3a:69:39:77:29:08:f7:94:72:ab:cb:9c:d8:41: cd:c5:ec:4f:74:78:95:ed:08:6a:ae:72:f5:dd:bf: 6f:83:61:4c:e6:8a:08:ef:ee:27:a7:a5:e0:a2:bb: 49:b9:4d:e6:07:51:37:6d:b8:ec:db:9f:25:a4:8e: 6c:4a:06:6a:0e:22:db:04:e7:59:df:80:a1:63:de: db:f8:90:78:34:5c:79:11:58:84:8e:2b:13:67:f4: 65:6d:54:de:f2:8a:1f:87:7b:6d:16:d2:07:5d:b9: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:51:6A:CF:61:17:0B:29:08:0A:7A:49:D4:4B:AC:05:79:BD:20:C2 X509v3 Authority Key Identifier: keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3e:0b:cb:08:27:8e:2e:f3:fc:c6:1f:02:e1:6e:49:3d:fe: 37:da:be:ab:6a:63:92:67:ce:63:c4:4e:bd:32:24:05:4c:c7: ed:53:f1:3d:3b:58:b6:39:4b:76:eb:90:da:48:63:b0:4e:37: 9d:ab:11:cf:62:ce:36:51:89:04:d6:9e:7e:0d:7d:8f:7a:72: a4:90:65:e3:48:04:21:06:b6:d5:11:65:3e:1c:bf:23:d5:8c: 3a:8d:6c:cf:c8:de:9d:a4:87:99:80:19:22:d3:18:5d:30:f3: 81:94:98:ce:3b:24:39:3f:b2:df:db:18:41:ff:7b:f9:6a:c0: df:cb:5e:99:44:78:2b:b2:b4:03:a0:3e:92:97:3a:68:e9:ca: 08:bd:08:df:25:fc:25:d8:19:c8:79:8a:f1:4c:98:dd:8e:a7: 7e:e1:b5:e3:05:48:b7:10:f1:a4:5f:92:af:88:1c:89:5a:e9: d6:c8:12:d9:7b:18:ea:33:93:5b:f9:5a:cd:15:d2:28:68:07: 8b:4d:23:e2:ce:11:d5:2e:1e:2f:22:83:56:fd:5d:60:3d:73: b8:d1:9f:24:a4:45:8b:9b:20:1e:eb:75:eb:3a:99:5b:7a:39: 26:20:10:22:c7:9c:b6:8d:b6:4e:2e:56:d6:67:e5:27:da:08: e5:ba:2f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBolF165LRVQMUehhYBdakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy MmUyNzgwHhcNMjYwMjA5MDkwMTIyWhcNMjYwMjEwMDkwMTIyWjAzMTEwLwYDVQQD EyhkYTUxNmFjZjYxMTcwYjI5MDgwYTdhNDlkNDRiYWMwNTc5YmQyMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0VF394MjaMlqiu3c5/WUxYzBNze Lw91wyk6x7053xUm1CuKCBm8x65puuPneY7+QLUCRpK6EFNFRXOnizwP9uNY3zNB mAuUGSniqIfKCuRVeSFVQy5RWqKCF0Wxiy4QRezTp73tWe3p2o/DmEu0oO2g8pgj t8uIKoFmilgydRomQX1kGlHeRUtgtWGfWjpJXbzsr/k4Omk5dykI95Ryq8uc2EHN xexPdHiV7QhqrnL13b9vg2FM5ooI7+4np6XgortJuU3mB1E3bbjs258lpI5sSgZq DiLbBOdZ34ChY97b+JB4NFx5EViEjisTZ/RlbVTe8oofh3ttFtIHXbkgtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpRas9hFwspCAp6SdRLrAV5vSDCMB8GA1UdIwQY MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2 LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj4Lywgn ji7z/MYfAuFuST3+N9q+q2pjkmfOY8ROvTIkBUzH7VPxPTtYtjlLduuQ2khjsE43 nasRz2LONlGJBNaefg19j3pypJBl40gEIQa21RFlPhy/I9WMOo1sz8jenaSHmYAZ ItMYXTDzgZSYzjskOT+y39sYQf97+WrA38temUR4K7K0A6A+kpc6aOnKCL0I3yX8 JdgZyHmK8UyY3Y6nfuG14wVItxDxpF+Sr4gciVrp1sgS2XsY6jOTW/lazRXSKGgH i00j4s4R1S4eLyKDVv1dYD1zuNGfJKRFi5sgHut16zqZW3o5JiAQIsecto22Ti5W 1mflJ9oI5bov1w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:29 2026 by rpki-client