This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json) Hash identifier: rotdtmDzBNybdTiEMDADNfWfHJsehtcg0DGq1iSJ0xs= Subject key identifier: 20:86:A5:00:E6:A3:A3:F4:88:80:79:5E:22:1D:25:B2:71:CE:49:C2 Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8 Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8 Certificate serial: 019C41D84068DFA6D89BCA9DD55E700D41E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft Manifest number: 1085 Signing time: Mon 09 Feb 2026 10:00:17 +0000 Manifest this update: Mon 09 Feb 2026 10:00:17 +0000 Manifest next update: Tue 10 Feb 2026 10:00:17 +0000 Files and hashes: 1: 6NYtEiibF-yousCSi6VFoyS3y1I.roa (hash: xGA3dOW6Az0OSEvmbCfoTjPs27cGbDj/TXvCGvlcPXg=) 2: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: w5FLSKckQY04U9OCI7+LNgFh3Ip51C5RJ32BHA6KQ3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:40:68:df:a6:d8:9b:ca:9d:d5:5e:70:0d:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8 Validity Not Before: Feb 9 10:00:17 2026 GMT Not After : Feb 10 10:00:17 2026 GMT Subject: CN=2086a500e6a3a3f48880795e221d25b271ce49c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:57:79:5e:65:9e:f2:08:50:c6:66:a5:3e: 60:5c:0c:97:69:94:6f:cc:30:c4:57:62:bd:82:04: 69:6c:78:fe:ec:fe:c7:3e:c0:32:72:42:30:25:ba: 81:40:c1:7c:a3:43:a7:28:4b:19:e3:98:48:8e:5a: eb:ad:79:ee:9e:fb:1c:bc:f9:51:35:07:e7:92:67: a2:c1:f9:a1:b6:0c:81:ae:72:33:38:34:2d:7f:dc: da:e1:a5:c3:f5:fd:7a:d0:99:99:ec:95:61:57:3d: 35:bd:8c:91:f0:f7:92:62:f5:1d:26:c1:44:98:ef: 4e:d9:d8:56:53:e3:54:4f:39:46:d6:42:04:da:33: 35:1e:39:26:df:68:a0:e3:f0:37:82:49:77:b8:83: 87:9e:c5:85:41:6d:a3:75:bf:e5:f6:aa:12:fa:bb: ff:3a:61:e1:fc:ba:23:cf:87:81:99:19:93:7d:47: 05:ee:ae:80:fc:bd:cb:d6:3c:5c:44:aa:aa:13:c4: a5:81:fe:7a:97:07:f9:f6:ae:cd:97:71:f4:c8:dd: 94:64:dd:d9:9a:94:3b:55:0e:db:85:18:56:c4:e6: 95:c8:98:6e:f3:79:ca:b0:e7:a0:21:94:c1:f4:b5: c5:66:db:05:df:1e:02:88:c2:8f:94:60:cd:da:22: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:86:A5:00:E6:A3:A3:F4:88:80:79:5E:22:1D:25:B2:71:CE:49:C2 X509v3 Authority Key Identifier: keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9b:bf:f1:20:a6:b8:ec:02:5c:1e:dd:8a:73:28:29:da:67: 71:86:a0:bd:ef:38:ad:27:35:7c:55:36:1b:d9:a2:77:57:70: 3b:8d:b3:37:31:78:d5:58:5a:aa:04:57:51:f9:3b:c6:54:71: cb:91:63:1a:61:c1:9f:34:81:93:e0:d2:30:22:dc:8d:95:d6: bd:c5:a6:b1:32:48:d2:ee:72:23:ee:02:ff:d4:80:41:40:64: d6:f4:7f:b7:c3:28:56:f3:e7:3b:42:93:55:d5:a3:93:b7:e6: 62:44:fa:bf:e4:ab:a7:26:e7:cc:cc:84:d4:c4:3e:54:2b:32: 35:b1:5c:90:53:90:0d:b9:e0:1c:ae:1d:bb:89:ad:f0:db:64: 42:85:6c:6e:ce:f6:75:20:f1:9d:9a:53:2b:2f:3d:bb:56:fc: ad:20:73:8b:8c:17:9e:8d:b9:77:98:7d:5d:d2:58:ca:e4:45: 85:8e:78:64:64:c7:4f:45:b9:64:b4:d9:c7:01:4b:54:a8:f6: d0:6a:05:c7:4c:a2:3d:30:b4:03:78:1c:ba:55:4c:33:e5:9e: 5c:a9:1c:84:79:ac:25:cb:a6:ad:c5:56:57:c7:04:ce:dc:f3: 98:9d:e4:61:c9:d2:51:8b:53:ee:40:b5:2e:3b:d7:c2:d8:51: b9:fe:04:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EBo36bYm8qd1V5wDUHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzMzYTY3NTRjMDA4ZWRiYmFjNWYzMmViZDAxOWVhNjQ3 M2FlYTgwHhcNMjYwMjA5MTAwMDE3WhcNMjYwMjEwMTAwMDE3WjAzMTEwLwYDVQQD EygyMDg2YTUwMGU2YTNhM2Y0ODg4MDc5NWUyMjFkMjViMjcxY2U0OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9VXeV5lnvIIUMZmpT5gXAyXaZRv zDDEV2K9ggRpbHj+7P7HPsAyckIwJbqBQMF8o0OnKEsZ45hIjlrrrXnunvscvPlR NQfnkmeiwfmhtgyBrnIzODQtf9za4aXD9f160JmZ7JVhVz01vYyR8PeSYvUdJsFE mO9O2dhWU+NUTzlG1kIE2jM1Hjkm32ig4/A3gkl3uIOHnsWFQW2jdb/l9qoS+rv/ OmHh/Lojz4eBmRmTfUcF7q6A/L3L1jxcRKqqE8Slgf56lwf59q7Nl3H0yN2UZN3Z mpQ7VQ7bhRhWxOaVyJhu83nKsOegIZTB9LXFZtsF3x4CiMKPlGDN2iJ66QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCGpQDmo6P0iIB5XiIdJbJxzknCMB8GA1UdIwQY MBaAFPEzOmdUwAjtu6xfMuvQGepkc66oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYt ZjA1OTY3MGRhZjNkLzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYtZjA1OTY3MGRhZjNk LzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5u/8SCm uOwCXB7dinMoKdpncYagve84rSc1fFU2G9mid1dwO42zNzF41VhaqgRXUfk7xlRx y5FjGmHBnzSBk+DSMCLcjZXWvcWmsTJI0u5yI+4C/9SAQUBk1vR/t8MoVvPnO0KT VdWjk7fmYkT6v+SrpybnzMyE1MQ+VCsyNbFckFOQDbngHK4du4mt8NtkQoVsbs72 dSDxnZpTKy89u1b8rSBzi4wXno25d5h9XdJYyuRFhY54ZGTHT0W5ZLTZxwFLVKj2 0GoFx0yiPTC0A3gculVMM+WeXKkchHmsJcumrcVWV8cEztzzmJ3kYcnSUYtT7kC1 LjvXwthRuf4EAg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:47 2026 by rpki-client