This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json) Hash identifier: URE8VdDYW9ZB74Qey+2GFz9m5ly3MdrcZPLcHL++drY= Subject key identifier: DD:ED:DA:C4:63:E6:56:99:E1:D4:51:02:F3:48:B6:7C:F3:97:BD:32 Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5 Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5 Certificate serial: 019C4322A0E23C63CCA5E048E39A209F162C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft Manifest number: 0BD3 Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: jESkAZp2wzL2TSRloN1QVMUjA1zQN/Ch64sZLBMwlXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a0:e2:3c:63:cc:a5:e0:48:e3:9a:20:9f:16:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5 Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=ddeddac463e65699e1d45102f348b67cf397bd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:2c:bc:32:92:a4:32:f2:5b:bd:b2:29:6a: b7:2e:5c:3d:e9:b1:30:68:8d:1f:dc:a7:08:1a:bd: 6b:2b:e6:04:97:c9:e6:58:5f:61:8b:58:92:e4:97: 53:d4:e7:d3:94:b9:94:6e:e2:19:c6:20:9e:b1:9f: 53:e1:28:c7:e1:9b:6f:39:a0:a3:75:07:07:c4:c6: 73:10:c8:70:35:14:1d:9e:bf:5c:ba:ca:cd:9f:f0: 9c:55:ef:ff:ab:51:2e:df:6d:50:47:97:35:05:0d: b8:c0:fb:17:19:31:87:59:68:d0:e5:51:a9:4f:43: d7:92:d0:fe:bc:41:ea:4f:64:7b:98:89:2d:a5:95: fd:87:d9:4c:a4:4c:34:f2:3f:bc:93:df:c1:7f:11: 0d:26:22:fe:d0:f8:80:2a:f3:04:29:37:10:85:a4: 20:7b:7f:64:93:55:ca:25:f1:f5:d9:64:75:6a:7b: dd:7a:a3:14:40:0f:8f:40:52:ea:dc:83:34:b6:d4: cc:aa:1d:75:92:6d:62:43:5f:8b:a8:b5:a9:03:15: 40:de:74:8a:ee:49:9f:53:35:39:59:36:4c:8a:12: 13:05:32:5b:50:dc:f6:91:62:15:a8:00:2d:6c:88: 1b:2b:80:d5:de:d5:fc:49:9c:a6:8b:91:6d:4e:97: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:DA:C4:63:E6:56:99:E1:D4:51:02:F3:48:B6:7C:F3:97:BD:32 X509v3 Authority Key Identifier: keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bc:f9:a3:ec:53:b1:a8:dd:f3:ba:5f:9e:a6:50:31:bb:83: 0e:df:58:e9:e9:77:70:7b:1a:11:8c:7f:48:47:54:b7:15:52: f0:c7:fb:fd:dc:26:f5:7f:35:64:af:87:3b:22:c9:5d:73:af: 59:5a:ab:c8:b7:c4:79:7f:cb:0f:dd:5d:d3:29:35:2d:0e:6b: fb:39:29:9b:8b:21:32:69:a7:e4:13:63:d9:b8:00:da:f9:12: ec:39:c0:3e:33:ab:74:92:9d:7e:f5:59:71:55:9d:87:e5:c3: c9:11:66:14:7a:da:c8:2d:2a:e9:2a:8a:ba:3e:1f:0a:e4:25: d5:be:bc:f9:8d:43:86:ea:47:12:73:ac:87:65:3e:10:5e:a3: 31:58:19:eb:5d:e9:e2:f7:69:69:8d:96:91:f4:5c:83:aa:c6: 52:b2:b7:02:4a:bf:37:06:0a:05:f5:1c:e4:3c:b5:60:39:5f: 0d:c1:de:c6:a7:b1:78:67:c1:bb:3a:f7:0c:65:14:c2:86:b2: 89:f5:bf:c4:61:63:93:ad:23:af:46:77:f3:fc:f4:61:9c:59: cd:92:04:99:58:45:62:2c:1d:4d:0a:53:d1:07:a7:f4:d1:90: ab:1b:23:d5:04:36:1a:48:0b:84:df:bb:80:f0:72:44:54:1f: 34:15:be:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqDiPGPMpeBI45ognxYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2E5MTM3NzRkYmM5ZTYwNWRjMTdhYjIzYTA1YTE2ODAz OThkZTUwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD EyhkZGVkZGFjNDYzZTY1Njk5ZTFkNDUxMDJmMzQ4YjY3Y2YzOTdiZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0osvDKSpDLyW72yKWq3Llw96bEw aI0f3KcIGr1rK+YEl8nmWF9hi1iS5JdT1OfTlLmUbuIZxiCesZ9T4SjH4ZtvOaCj dQcHxMZzEMhwNRQdnr9cusrNn/CcVe//q1Eu321QR5c1BQ24wPsXGTGHWWjQ5VGp T0PXktD+vEHqT2R7mIktpZX9h9lMpEw08j+8k9/BfxENJiL+0PiAKvMEKTcQhaQg e39kk1XKJfH12WR1anvdeqMUQA+PQFLq3IM0ttTMqh11km1iQ1+LqLWpAxVA3nSK 7kmfUzU5WTZMihITBTJbUNz2kWIVqAAtbIgbK4DV3tX8SZymi5FtTpc8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3t2sRj5laZ4dRRAvNItnzzl70yMB8GA1UdIwQY MBaAFPA6kTd028nmBdwXqyOgWhaAOY3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTkt ZTAwNjMyNjllNDY5LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTktZTAwNjMyNjllNDY5 LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbz5o+xT sajd87pfnqZQMbuDDt9Y6el3cHsaEYx/SEdUtxVS8Mf7/dwm9X81ZK+HOyLJXXOv WVqryLfEeX/LD91d0yk1LQ5r+zkpm4shMmmn5BNj2bgA2vkS7DnAPjOrdJKdfvVZ cVWdh+XDyRFmFHrayC0q6SqKuj4fCuQl1b68+Y1DhupHEnOsh2U+EF6jMVgZ613p 4vdpaY2WkfRcg6rGUrK3Akq/NwYKBfUc5Dy1YDlfDcHexqexeGfBuzr3DGUUwoay ifW/xGFjk60jr0Z38/z0YZxZzZIEmVhFYiwdTQpT0Qen9NGQqxsj1QQ2GkgLhN+7 gPByRFQfNBW+mQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:50 2026 by rpki-client