This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json) Hash identifier: fON0kpHzKTmMud97lL1U4THw8kJH64gcHUQj1ZMMLBc= Subject key identifier: 32:83:DA:4E:4C:C1:38:EC:7F:6D:DB:55:CA:3E:65:C7:0B:27:EE:88 Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019C4246637CD3E8C6C7C1177648E73D9D77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft Manifest number: 1220 Signing time: Mon 09 Feb 2026 12:00:34 +0000 Manifest this update: Mon 09 Feb 2026 12:00:34 +0000 Manifest next update: Tue 10 Feb 2026 12:00:34 +0000 Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: 7i+7Lt49bln2UtLDi2obxQJEM2XhAC6U2iAEeb38QN0=) 2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:63:7c:d3:e8:c6:c7:c1:17:76:48:e7:3d:9d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Feb 9 12:00:34 2026 GMT Not After : Feb 10 12:00:34 2026 GMT Subject: CN=3283da4e4cc138ec7f6ddb55ca3e65c70b27ee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:e8:27:09:85:96:76:fc:28:55:3f:c6:02: bb:8b:21:83:b6:c6:91:c6:3d:82:56:3b:c3:e6:3b: 24:db:04:f1:70:74:b6:42:32:a0:0f:5f:01:f3:30: 23:47:3d:f7:9a:5b:18:da:76:e6:05:d6:57:ac:a8: c2:55:98:02:48:fa:bb:4a:17:96:f2:29:e5:04:3e: e5:1c:50:95:04:13:7f:55:b3:c4:f6:08:26:84:65: 76:8c:1e:c4:c0:24:60:af:f2:5c:e2:2a:05:50:50: 13:0a:a2:2a:dd:b7:55:41:c8:eb:f0:52:31:3d:d8: e1:60:04:f1:b1:4a:68:ef:d8:d6:9e:35:a3:c8:55: 53:ee:0f:d2:bc:3a:71:2a:04:aa:bb:04:b4:4b:0d: 00:b8:5f:aa:cc:4e:5c:86:9d:5a:da:d9:27:bd:8c: 01:43:63:5a:43:36:18:49:c6:48:74:4b:67:1f:63: 5f:0a:38:4a:00:c0:f1:0b:ee:49:ee:9f:0c:4e:f4: 9c:db:46:f1:ef:61:17:b2:e9:5d:f0:d6:d3:d1:a0: 04:44:19:ee:70:92:ef:cc:7b:be:fa:8d:46:4f:26: 35:fd:74:50:69:16:09:a7:ac:11:b4:d3:df:a4:9d: 1d:74:bc:35:5a:ce:22:62:83:e4:d1:43:1a:1d:f6: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:83:DA:4E:4C:C1:38:EC:7F:6D:DB:55:CA:3E:65:C7:0B:27:EE:88 X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:14:86:1f:1c:ae:9e:0f:50:4d:a7:54:bf:4a:3a:e4:f8:3c: e7:d0:83:21:b5:6b:39:67:75:8a:d5:b3:bd:e6:52:31:81:1a: 7c:14:83:2c:c6:63:1e:db:e9:67:b2:83:96:38:31:d3:68:14: 04:99:d3:bc:02:92:de:bf:cc:9d:7c:90:cb:bf:bb:04:85:0c: f9:a8:99:e9:f2:75:7f:80:31:20:ef:06:e8:a2:7e:ae:17:7b: 5c:34:8a:30:db:d3:fe:3d:2f:82:fc:a0:fd:5a:cb:d7:b4:d4: f5:54:7b:fe:be:a1:3d:9c:64:10:dc:d0:0c:db:3f:8d:3e:5f: 94:61:ce:24:ac:41:29:3c:d3:9f:79:26:66:4d:b2:d9:0a:f8: 5d:6d:04:82:de:2e:de:15:58:49:bd:91:8b:2f:db:a7:b7:68: 33:a5:41:f4:4c:17:a0:93:8c:8b:fa:59:4f:8b:50:57:1b:47: 1a:b0:a1:8f:c3:6d:cf:18:e7:55:f1:9a:34:9f:e3:7a:bc:90: e6:72:f2:4e:c2:a0:75:74:ed:33:5b:fa:ca:17:ae:b1:88:2a: c3:ea:12:3c:eb:7c:c5:fa:87:eb:c7:c3:1c:67:de:07:69:6a: a7:72:9e:65:7d:cb:e1:95:3b:89:f1:ea:6d:04:7b:6d:1e:a0: 05:03:cb:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmN80+jGx8EXdkjnPZ13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjYwMjA5MTIwMDM0WhcNMjYwMjEwMTIwMDM0WjAzMTEwLwYDVQQD EygzMjgzZGE0ZTRjYzEzOGVjN2Y2ZGRiNTVjYTNlNjVjNzBiMjdlZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs3oJwmFlnb8KFU/xgK7iyGDtsaR xj2CVjvD5jsk2wTxcHS2QjKgD18B8zAjRz33mlsY2nbmBdZXrKjCVZgCSPq7SheW 8inlBD7lHFCVBBN/VbPE9ggmhGV2jB7EwCRgr/Jc4ioFUFATCqIq3bdVQcjr8FIx PdjhYATxsUpo79jWnjWjyFVT7g/SvDpxKgSquwS0Sw0AuF+qzE5chp1a2tknvYwB Q2NaQzYYScZIdEtnH2NfCjhKAMDxC+5J7p8MTvSc20bx72EXsuld8NbT0aAERBnu cJLvzHu++o1GTyY1/XRQaRYJp6wRtNPfpJ0ddLw1Ws4iYoPk0UMaHfYtBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKD2k5MwTjsf23bVco+ZccLJ+6IMB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzRSGHxyu ng9QTadUv0o65Pg859CDIbVrOWd1itWzveZSMYEafBSDLMZjHtvpZ7KDljgx02gU BJnTvAKS3r/MnXyQy7+7BIUM+aiZ6fJ1f4AxIO8G6KJ+rhd7XDSKMNvT/j0vgvyg /VrL17TU9VR7/r6hPZxkENzQDNs/jT5flGHOJKxBKTzTn3kmZk2y2Qr4XW0Egt4u 3hVYSb2Riy/bp7doM6VB9EwXoJOMi/pZT4tQVxtHGrChj8NtzxjnVfGaNJ/jeryQ 5nLyTsKgdXTtM1v6yheusYgqw+oSPOt8xfqH68fDHGfeB2lqp3KeZX3L4ZU7ifHq bQR7bR6gBQPLlA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:13 2026 by rpki-client