This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json) Hash identifier: QvBeIGkrb7N3iSo9HifYUceTHRQ3CmN2KcYvcy28G3c= Subject key identifier: 46:DE:D4:98:68:31:84:A0:00:03:04:49:EC:11:2A:51:98:3E:FA:5E Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98 Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98 Certificate serial: 019C4321F9A9F2D8A01B8AF5FD78877B5CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft Manifest number: 10F5 Signing time: Mon 09 Feb 2026 16:00:25 +0000 Manifest this update: Mon 09 Feb 2026 16:00:25 +0000 Manifest next update: Tue 10 Feb 2026 16:00:25 +0000 Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: AIgtGAv6mhrscCuMSqJQLuKzLHwFSVrU7vnB//xt7GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f9:a9:f2:d8:a0:1b:8a:f5:fd:78:87:7b:5c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98 Validity Not Before: Feb 9 16:00:25 2026 GMT Not After : Feb 10 16:00:25 2026 GMT Subject: CN=46ded498683184a000030449ec112a51983efa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:43:3e:a8:5b:97:6f:f5:4c:4c:f4:34:89: 6a:33:6a:30:86:48:1f:f1:47:b2:1b:3b:b0:f3:a2: 31:11:83:fe:5c:02:be:79:47:31:6f:ff:84:58:3d: ce:1b:87:47:df:ba:75:b0:53:d8:22:a6:a5:97:3e: f3:53:0d:c0:37:b0:b4:2f:f2:5f:1f:fd:b3:a4:dc: 40:c6:63:a1:ac:26:00:5a:9e:58:ce:7a:8a:f8:e9: 85:b4:1a:71:e7:c6:be:32:b7:22:23:8a:b8:b5:d5: 71:5c:cd:11:de:f1:87:4d:1f:16:35:7f:ef:52:0f: 69:4c:56:79:a7:58:f0:e4:1c:fa:8c:48:75:8f:77: a4:52:da:7c:2f:92:dc:31:72:72:a1:f4:b7:e5:40: 49:ba:7e:ba:a4:fd:ce:0f:0e:7b:19:4e:2a:b3:1e: df:17:4a:b0:bf:5e:da:96:92:3c:0a:81:57:f1:53: dc:d0:48:85:20:b4:c0:d4:f7:38:c6:08:02:d0:fa: 33:b1:7d:c5:a6:73:59:c3:e2:a5:2b:e7:72:1a:32: cf:88:74:a0:02:30:0f:b2:73:b8:40:b0:24:3c:f5: 97:4b:8e:bb:63:cc:6d:00:5c:74:e5:be:59:f7:b9: 66:b3:d0:7c:4f:a3:24:ba:22:d9:72:4b:c4:4f:73: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:D4:98:68:31:84:A0:00:03:04:49:EC:11:2A:51:98:3E:FA:5E X509v3 Authority Key Identifier: keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:de:ad:ae:d3:f8:a6:c2:1e:37:5e:03:8c:cf:52:68:bd:55: e8:ab:14:59:97:47:8d:3c:4a:c4:59:9a:f7:30:07:27:62:25: 38:75:df:d7:a8:ce:1f:de:a0:3f:07:99:50:f5:89:2b:5e:99: e1:5b:f5:8c:71:d9:e0:38:7c:ab:08:0e:ba:56:65:65:24:78: 7a:f6:4d:28:00:f0:b8:26:8a:4f:35:a7:09:f7:b1:ef:b6:37: b9:ac:3a:12:5c:39:62:d8:75:6b:5c:6c:5a:a6:5a:d3:5f:55: 9f:1d:8d:09:49:60:1b:ba:33:f5:b8:33:65:2b:13:4c:51:d2: 5a:7a:ac:95:7e:4f:38:e6:55:fb:55:08:2e:4c:6e:7c:bc:61: 3a:6d:c4:0c:eb:c2:d3:36:42:9e:fe:b7:3b:38:1b:d5:a5:40: c4:96:ce:88:3b:19:e1:cb:45:7d:df:28:e0:56:e3:c7:1b:9c: 4c:94:e7:cd:a5:bf:fd:40:57:c5:fa:df:2f:ef:10:27:fa:ce: 09:8b:1c:07:46:65:b5:06:6e:21:d4:e5:8f:12:cd:8c:b5:3d: f2:7e:08:c9:d0:dc:a0:ea:30:fa:07:e9:58:94:00:74:6c:27: 71:fd:49:3b:5c:e5:85:2d:eb:50:2e:b8:f4:8d:58:cb:f8:b0: d6:e5:3e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfmp8tigG4r1/XiHe1zTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAyMTQ3OTFjZjg0OTlmYzkzYWYwMWY3YTQzZjVjYmU5 MDJhOTgwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD Eyg0NmRlZDQ5ODY4MzE4NGEwMDAwMzA0NDllYzExMmE1MTk4M2VmYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwdDPqhbl2/1TEz0NIlqM2owhkgf 8UeyGzuw86IxEYP+XAK+eUcxb/+EWD3OG4dH37p1sFPYIqallz7zUw3AN7C0L/Jf H/2zpNxAxmOhrCYAWp5YznqK+OmFtBpx58a+MrciI4q4tdVxXM0R3vGHTR8WNX/v Ug9pTFZ5p1jw5Bz6jEh1j3ekUtp8L5LcMXJyofS35UBJun66pP3ODw57GU4qsx7f F0qwv17alpI8CoFX8VPc0EiFILTA1Pc4xggC0PozsX3FpnNZw+KlK+dyGjLPiHSg AjAPsnO4QLAkPPWXS467Y8xtAFx05b5Z97lms9B8T6MkuiLZckvET3PomwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbe1JhoMYSgAAMESewRKlGYPvpeMB8GA1UdIwQY MBaAFPJgIUeRz4SZ/JOvAfekP1y+kCqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81NzU5MTUtZmY3Zi00MzY0LWEzZTYt NzMxZThiMTFkNTVkLzEvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81NzU5MTUtZmY3Zi00MzY0LWEzZTYtNzMxZThiMTFkNTVk LzEvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADd6trtP4 psIeN14DjM9SaL1V6KsUWZdHjTxKxFma9zAHJ2IlOHXf16jOH96gPweZUPWJK16Z 4Vv1jHHZ4Dh8qwgOulZlZSR4evZNKADwuCaKTzWnCfex77Y3uaw6Elw5Yth1a1xs WqZa019Vnx2NCUlgG7oz9bgzZSsTTFHSWnqslX5POOZV+1UILkxufLxhOm3EDOvC 0zZCnv63Ozgb1aVAxJbOiDsZ4ctFfd8o4FbjxxucTJTnzaW//UBXxfrfL+8QJ/rO CYscB0ZltQZuIdTljxLNjLU98n4IydDcoOow+gfpWJQAdGwncf1JO1zlhS3rUC64 9I1Yy/iw1uU+gQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:44 2026 by rpki-client