This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json) Hash identifier: XBUUJoSQwDzTYaUqWtEcaJ3b8QC1OkwJiUO8Iy9RDmE= Subject key identifier: 2F:72:3F:BE:6F:1C:2D:09:DE:DB:8C:E1:19:7C:C0:31:07:A8:BC:B8 Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1 Certificate serial: 019C4321F409B1EE6F684AAB01A1C2D08B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft Manifest number: 116B Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=) 2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: o05+TWPQkOyKhsNCeUIKZien6QYB8hQK8MTgdn0xVH8=) 3: UfBREIbpw0HouYObEC1LRUOZq_w.roa (hash: f4bMUJiYsD0+ToNj+lpzpSNMBInPraZjyj4OiPgA3CY=) 4: sq6m1FOXK52o6uTxOqe6Hm1SOOY.roa (hash: VWjwuEuO3NTNcpVAcvUXrXMeZI6YpyY7QfPuhsD8Kas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f4:09:b1:ee:6f:68:4a:ab:01:a1:c2:d0:8b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1 Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=2f723fbe6f1c2d09dedb8ce1197cc03107a8bcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:6c:7f:79:40:5c:10:e7:02:df:c4:04:0b: dd:ea:b6:73:12:80:2a:11:95:bf:d2:07:49:dc:26: 07:9c:99:34:fc:41:46:97:09:95:2e:2c:08:82:0c: b8:fd:72:3c:02:b7:62:ce:3a:8d:48:57:0b:f1:b9: d0:04:33:94:ac:54:01:ad:c1:fb:8f:1d:cb:2d:f1: 19:4a:27:4e:1a:fc:3c:d5:2e:38:49:de:4a:6d:0f: 35:d9:b2:0a:be:bf:6d:9f:b0:4f:97:57:36:65:e7: 28:fa:da:d6:f2:8b:5e:32:12:45:70:f8:d9:b4:d2: 13:28:b6:0b:0f:f1:7c:a0:7e:ee:de:15:85:d1:3a: 83:3f:80:95:98:f1:c4:70:62:53:bc:60:e2:3d:52: 57:b9:9f:61:56:cf:73:d6:80:74:91:70:a5:86:99: 91:5b:10:d6:55:8b:11:02:b5:ca:d1:ad:05:73:a8: 1b:00:5b:26:d2:98:68:0a:3d:4e:a3:f5:f9:6e:47: 20:c7:99:77:81:af:e4:16:ed:0c:ce:11:a3:89:2b: 3a:79:a4:0a:df:62:72:e6:83:a4:97:c7:52:c3:75: 75:dc:b1:39:f5:9b:74:2e:b0:d6:d6:14:71:f3:18: fa:f5:f5:1f:f6:9f:83:71:a2:0d:88:37:b6:c2:61: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:72:3F:BE:6F:1C:2D:09:DE:DB:8C:E1:19:7C:C0:31:07:A8:BC:B8 X509v3 Authority Key Identifier: keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:12:ff:20:19:94:64:92:d5:2f:59:17:c5:43:0f:0b:02:37: 8d:cc:8a:dd:f9:55:b5:e3:be:a5:9f:5b:ba:c5:e5:4e:43:17: 15:79:47:cd:4c:c6:a4:cf:e6:d9:68:10:3e:17:9b:d7:8b:68: 9f:c7:05:ed:e0:b0:36:7f:fa:82:44:d2:d4:6b:ae:22:0b:b8: 9e:f9:81:d3:cb:77:0b:18:e6:37:06:97:b2:0d:1e:f6:3b:bf: 20:4a:bf:a5:89:f5:43:9e:ee:58:36:97:c6:45:71:8c:6c:64: 25:0d:30:ec:ea:cb:f6:18:2e:7f:aa:0c:c9:2b:ec:06:32:f0: da:da:cb:d2:95:52:af:14:b3:62:66:eb:74:16:01:ad:e2:14: bf:f9:54:81:fa:cc:fe:36:2d:10:b0:89:fb:fe:44:17:78:bc: 31:ed:71:3b:6a:27:45:4c:92:ca:d1:85:e7:9f:d3:9b:dc:b5: 9c:c4:4d:53:28:f6:74:1d:24:2f:e8:ac:9b:01:33:9c:71:e1: 2a:3b:7a:7f:a6:96:49:57:e4:66:9f:ac:58:ff:94:7a:bb:9c: d8:a0:2e:15:5e:77:9a:26:6d:ee:9d:06:f2:63:a5:e2:43:ff: da:05:54:69:b0:d1:77:7c:aa:d5:b7:da:c5:b2:20:c8:cb:49: f8:95:d8:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfQJse5vaEqrAaHC0IsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw NDYyZDEwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD EygyZjcyM2ZiZTZmMWMyZDA5ZGVkYjhjZTExOTdjYzAzMTA3YThiY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqthsf3lAXBDnAt/EBAvd6rZzEoAq EZW/0gdJ3CYHnJk0/EFGlwmVLiwIggy4/XI8ArdizjqNSFcL8bnQBDOUrFQBrcH7 jx3LLfEZSidOGvw81S44Sd5KbQ812bIKvr9tn7BPl1c2Zeco+trW8oteMhJFcPjZ tNITKLYLD/F8oH7u3hWF0TqDP4CVmPHEcGJTvGDiPVJXuZ9hVs9z1oB0kXClhpmR WxDWVYsRArXK0a0Fc6gbAFsm0phoCj1Oo/X5bkcgx5l3ga/kFu0MzhGjiSs6eaQK 32Jy5oOkl8dSw3V13LE59Zt0LrDW1hRx8xj69fUf9p+DcaINiDe2wmHjUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9yP75vHC0J3tuM4Rl8wDEHqLy4MB8GA1UdIwQY MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRL/IBmU ZJLVL1kXxUMPCwI3jcyK3flVteO+pZ9busXlTkMXFXlHzUzGpM/m2WgQPheb14to n8cF7eCwNn/6gkTS1GuuIgu4nvmB08t3CxjmNwaXsg0e9ju/IEq/pYn1Q57uWDaX xkVxjGxkJQ0w7OrL9hguf6oMySvsBjLw2trL0pVSrxSzYmbrdBYBreIUv/lUgfrM /jYtELCJ+/5EF3i8Me1xO2onRUySytGF55/Tm9y1nMRNUyj2dB0kL+ismwEznHHh Kjt6f6aWSVfkZp+sWP+Ueruc2KAuFV53miZt7p0G8mOl4kP/2gVUabDRd3yq1bfa xbIgyMtJ+JXYPA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:09 2026 by rpki-client