This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json) Hash identifier: qqd6kDnSbva/O6zCrHwGdp8OIAPMdlXUsgaIQ+9dUIE= Subject key identifier: 31:0C:56:FD:D5:E6:82:AF:E1:69:0A:7A:52:89:78:99:F1:D9:A6:98 Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Certificate serial: 019C4358D18AC72B3F39F994833ABD5B5FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft Manifest number: 030C Signing time: Mon 09 Feb 2026 17:00:20 +0000 Manifest this update: Mon 09 Feb 2026 17:00:20 +0000 Manifest next update: Tue 10 Feb 2026 17:00:20 +0000 Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: ZJxqnvje5qVDvDC6NJjAovwAOMmxerndzIiuENCMhfw=) 2: w_cDoBQm48qO3UJDie6dGD-GT6A.roa (hash: 4d0oLWhWZ7o8XZ0xXiTGwVR/Fkht5a6EInFhOOT/M94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d1:8a:c7:2b:3f:39:f9:94:83:3a:bd:5b:5f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Validity Not Before: Feb 9 17:00:20 2026 GMT Not After : Feb 10 17:00:20 2026 GMT Subject: CN=310c56fdd5e682afe1690a7a52897899f1d9a698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:c3:a1:70:cd:e9:90:34:55:46:1c:80:96: e4:01:72:e7:97:12:b9:d0:45:dc:21:b5:01:e8:e5: c8:ba:89:ba:7d:46:66:bd:da:9f:eb:b8:a5:6b:28: 9a:2e:f3:16:0a:b6:07:04:94:cc:47:1d:79:56:04: 74:18:8e:c9:86:cd:52:4b:ed:72:f9:3b:e7:23:df: da:13:bb:9d:72:27:c2:e8:2e:80:e4:ef:e6:f8:88: a7:cf:bd:55:72:67:a0:9a:93:69:43:13:20:5a:bf: b1:a9:43:8f:3e:63:46:fe:59:a0:7e:fa:35:1c:05: 6f:07:5b:e4:7e:fd:a7:57:3b:47:92:ce:91:25:2e: d2:db:0d:94:b2:fa:5b:54:c5:26:b2:60:3e:3d:59: db:65:ea:53:2f:14:d0:00:f0:b5:49:1f:ba:7c:ca: fb:8e:b4:ef:bb:1e:74:cf:64:50:9b:7b:ef:33:cc: 11:02:7e:73:97:70:8f:4d:e3:15:c2:3b:48:1f:36: a4:df:d6:85:61:76:cd:ad:c8:f5:58:de:8e:d8:b4: 2f:59:b4:51:ab:b6:49:fd:bf:32:d3:60:b0:dc:a7: 98:49:50:52:09:1a:f9:fc:95:fe:6d:fc:08:c4:dd: ae:bf:a8:ba:64:e1:8d:3f:3c:a3:bf:a9:38:9f:ea: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0C:56:FD:D5:E6:82:AF:E1:69:0A:7A:52:89:78:99:F1:D9:A6:98 X509v3 Authority Key Identifier: keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a4:f4:c5:1e:af:13:af:a7:58:57:1c:08:4e:95:c9:21:15: fb:c5:f8:9b:f6:91:84:e5:6e:98:b4:b5:2f:1d:09:31:28:50: f8:58:55:10:f6:61:49:6e:09:1e:a6:13:c9:19:de:73:42:03: 9f:6b:85:46:6c:02:4e:2c:66:18:38:28:ab:0a:c5:63:a8:a3: d2:fc:15:8f:c9:f8:53:e6:db:9e:c7:14:d1:5e:87:d0:63:e1: f4:72:3f:d1:30:3b:5a:91:30:83:b8:aa:91:f2:47:35:d6:f8: 9f:d3:2d:22:1d:c6:1f:48:9f:27:1b:96:cc:c1:0b:08:66:f3: be:a0:c2:ad:fd:ba:42:6f:5f:94:1c:cc:be:c6:aa:76:b9:2b: 45:01:44:4d:f9:73:8a:da:50:4d:b6:55:42:37:59:ae:ba:a7: 22:54:d5:b9:96:4c:c9:9a:49:8d:cb:0f:0f:6b:d0:e2:d2:f2: 15:35:94:44:4c:e4:56:10:f8:dd:4e:28:51:97:46:50:2d:fa: 15:dd:d1:0b:58:ff:e3:03:7c:e5:23:9b:89:50:13:b7:37:4c: 17:e0:81:d7:6a:23:e3:ee:56:77:3c:b1:7e:1c:81:90:b1:b1: 97:52:68:c2:18:0c:38:81:a0:aa:ca:5f:53:71:d3:85:80:01: 29:eb:2d:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNGKxys/OfmUgzq9W1/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi NGE5ZTYwHhcNMjYwMjA5MTcwMDIwWhcNMjYwMjEwMTcwMDIwWjAzMTEwLwYDVQQD EygzMTBjNTZmZGQ1ZTY4MmFmZTE2OTBhN2E1Mjg5Nzg5OWYxZDlhNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbDoXDN6ZA0VUYcgJbkAXLnlxK5 0EXcIbUB6OXIuom6fUZmvdqf67ilayiaLvMWCrYHBJTMRx15VgR0GI7Jhs1SS+1y +TvnI9/aE7udcifC6C6A5O/m+Iinz71VcmegmpNpQxMgWr+xqUOPPmNG/lmgfvo1 HAVvB1vkfv2nVztHks6RJS7S2w2UsvpbVMUmsmA+PVnbZepTLxTQAPC1SR+6fMr7 jrTvux50z2RQm3vvM8wRAn5zl3CPTeMVwjtIHzak39aFYXbNrcj1WN6O2LQvWbRR q7ZJ/b8y02Cw3KeYSVBSCRr5/JX+bfwIxN2uv6i6ZOGNPzyjv6k4n+q3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEMVv3V5oKv4WkKelKJeJnx2aaYMB8GA1UdIwQY MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3 LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKT0xR6v E6+nWFccCE6VySEV+8X4m/aRhOVumLS1Lx0JMShQ+FhVEPZhSW4JHqYTyRnec0ID n2uFRmwCTixmGDgoqwrFY6ij0vwVj8n4U+bbnscU0V6H0GPh9HI/0TA7WpEwg7iq kfJHNdb4n9MtIh3GH0ifJxuWzMELCGbzvqDCrf26Qm9flBzMvsaqdrkrRQFETflz itpQTbZVQjdZrrqnIlTVuZZMyZpJjcsPD2vQ4tLyFTWUREzkVhD43U4oUZdGUC36 Fd3RC1j/4wN85SObiVATtzdMF+CB12oj4+5WdzyxfhyBkLGxl1JowhgMOIGgqspf U3HThYABKestoA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:20 2026 by rpki-client