This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json) Hash identifier: yFFKaPsV8HbVRKa2gRG2OUJvBwaSE9s/lnbMUwKb4/8= Subject key identifier: 8F:89:D8:9E:80:CC:93:BF:EA:DC:FA:8E:F0:27:D7:FB:3E:EB:88:0B Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02 Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02 Certificate serial: 019C420FDB1DE82DB8D1E3883DC9E617C5F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft Manifest number: 0496 Signing time: Mon 09 Feb 2026 11:01:01 +0000 Manifest this update: Mon 09 Feb 2026 11:01:01 +0000 Manifest next update: Tue 10 Feb 2026 11:01:01 +0000 Files and hashes: 1: 4EQFHPchKGJRSlfAMbJURA8f5Vw.roa (hash: r/Hza9cO99krJK0iZfoHSiR1NTC0AWSrrarH8tZXu0g=) 2: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: JDv5Ch22kITdNOonJDnY/QdHODZVjPFy0fg/YxiIEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:db:1d:e8:2d:b8:d1:e3:88:3d:c9:e6:17:c5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02 Validity Not Before: Feb 9 11:01:01 2026 GMT Not After : Feb 10 11:01:01 2026 GMT Subject: CN=8f89d89e80cc93bfeadcfa8ef027d7fb3eeb880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:b5:c3:84:91:cd:b8:23:e8:a7:c7:da:32: 8f:e7:46:8f:00:5d:d7:0b:fc:6d:a2:2a:ea:d5:bf: ee:83:1d:a4:ac:6c:cf:65:cf:76:86:12:c3:37:45: 41:ce:b3:f1:f9:d2:b5:75:85:b6:85:21:d6:0d:08: 69:c1:89:e1:ed:2e:00:01:26:02:40:31:6a:be:d8: 2a:45:a2:61:a5:77:b3:ec:ae:e6:58:06:8c:d8:3e: 61:b1:40:26:65:5e:e4:83:a1:71:fd:28:23:9a:31: ad:1c:97:48:e1:b8:14:f8:07:65:8c:38:0a:ab:26: 84:c1:5b:1c:a2:a8:7d:cc:95:18:d0:a8:4b:a5:9f: 79:25:0b:43:3d:42:77:54:0a:79:d6:1c:19:6a:ef: 15:32:db:0d:a1:e3:c6:95:e3:0c:f8:1e:bf:44:38: 7c:19:fb:15:8a:5c:07:7c:c5:0c:3e:5a:08:59:81: 68:9d:77:f9:fc:31:08:c7:4e:1b:d4:c3:c0:24:c0: 20:d8:c0:7e:61:96:b8:39:c0:a3:99:84:6e:71:8e: e9:9f:4a:75:ed:dd:bb:28:c7:15:bd:f3:38:bf:97: b5:ff:2b:c1:1f:64:6a:26:91:f0:1c:15:a3:cb:aa: 9c:a4:a5:61:19:c3:29:17:9d:9f:b0:f2:42:cc:64: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:89:D8:9E:80:CC:93:BF:EA:DC:FA:8E:F0:27:D7:FB:3E:EB:88:0B X509v3 Authority Key Identifier: keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6f:b2:ef:bd:71:05:3d:9b:cb:af:a3:c2:bd:79:fc:06:31: 20:44:11:ad:a7:a4:f8:c9:30:48:38:13:8d:ec:db:ff:53:9c: f1:50:ac:37:61:ac:4c:ec:88:fe:f0:02:a3:18:32:17:a2:de: bb:10:c6:e3:7c:85:08:74:db:89:61:d8:b9:e9:d7:8e:b0:d6: 54:7d:6d:61:5d:01:c7:38:f4:2d:89:25:71:9f:9f:3b:7f:73: d0:f5:9d:d2:04:24:2a:71:a2:de:ab:26:7d:2c:db:03:fc:7f: 26:27:5c:83:ab:a6:2b:a7:01:64:45:62:92:fc:cb:08:16:d8: ec:87:42:8c:2c:3a:9f:a2:76:30:47:38:5a:e5:b7:71:6f:d0: dc:d9:09:a4:9c:db:e1:c9:2e:bf:8e:29:1c:91:bb:4b:ae:7d: e0:5f:89:90:53:ef:bb:c7:de:29:6d:cd:aa:d1:cb:0c:01:d6: bc:ed:03:3f:b3:dd:ad:d6:1b:40:36:ce:e0:ac:20:e2:c7:cf: fc:e7:6c:5a:05:b2:9b:fe:93:cc:f6:27:86:1d:e3:b4:fd:ee: 50:f1:b3:2c:b9:e6:18:21:7a:2c:6b:2e:1c:fe:d7:33:51:59: e8:40:5d:c2:86:8d:b8:8a:11:bb:c9:74:be:70:ed:55:c6:1f: 90:cd:f2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9sd6C240eOIPcnmF8X5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzVjNDczZjliN2IwMWU5YzI0ODVjNDZiZjU2OWNjZTA4 MTZmMDIwHhcNMjYwMjA5MTEwMTAxWhcNMjYwMjEwMTEwMTAxWjAzMTEwLwYDVQQD Eyg4Zjg5ZDg5ZTgwY2M5M2JmZWFkY2ZhOGVmMDI3ZDdmYjNlZWI4ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8y1w4SRzbgj6KfH2jKP50aPAF3X C/xtoirq1b/ugx2krGzPZc92hhLDN0VBzrPx+dK1dYW2hSHWDQhpwYnh7S4AASYC QDFqvtgqRaJhpXez7K7mWAaM2D5hsUAmZV7kg6Fx/SgjmjGtHJdI4bgU+AdljDgK qyaEwVscoqh9zJUY0KhLpZ95JQtDPUJ3VAp51hwZau8VMtsNoePGleMM+B6/RDh8 GfsVilwHfMUMPloIWYFonXf5/DEIx04b1MPAJMAg2MB+YZa4OcCjmYRucY7pn0p1 7d27KMcVvfM4v5e1/yvBH2RqJpHwHBWjy6qcpKVhGcMpF52fsPJCzGS59wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+J2J6AzJO/6tz6jvAn1/s+64gLMB8GA1UdIwQY MBaAFG/FxHP5t7AenCSFxGv1aczggW8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTIt OWNmMDQwNTc0NzY1LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTItOWNmMDQwNTc0NzY1 LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2+y771x BT2by6+jwr15/AYxIEQRraek+MkwSDgTjezb/1Oc8VCsN2GsTOyI/vACoxgyF6Le uxDG43yFCHTbiWHYuenXjrDWVH1tYV0Bxzj0LYklcZ+fO39z0PWd0gQkKnGi3qsm fSzbA/x/Jidcg6umK6cBZEVikvzLCBbY7IdCjCw6n6J2MEc4WuW3cW/Q3NkJpJzb 4ckuv44pHJG7S6594F+JkFPvu8feKW3NqtHLDAHWvO0DP7PdrdYbQDbO4Kwg4sfP /OdsWgWym/6TzPYnhh3jtP3uUPGzLLnmGCF6LGsuHP7XM1FZ6EBdwoaNuIoRu8l0 vnDtVcYfkM3yNA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:43 2026 by rpki-client