This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json) Hash identifier: wKNrOZ8U0pcA53IVV8tG3M7gk4vz51OZYx1wByLWZ9M= Subject key identifier: BC:24:4A:2F:18:45:83:E8:58:5C:98:88:FB:72:AC:6F:10:0D:69:69 Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45 Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45 Certificate serial: 019C41D84FEEC619EF48578DEF8BFEE12185 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft Manifest number: 0E7C Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: BHJ5fbsIB1o717/0Cz1gZgMfmzuJ3trKfzg5sh81CAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4f:ee:c6:19:ef:48:57:8d:ef:8b:fe:e1:21:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45 Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=bc244a2f184583e8585c9888fb72ac6f100d6969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:f9:14:3a:30:e9:94:9f:2c:df:5a:1d:3f: 85:59:0b:ce:e7:ac:c0:f4:ab:2b:62:81:aa:45:de: ca:2a:cc:36:95:d6:b8:cf:1b:d5:29:b0:3f:ab:17: 45:6c:5c:bd:c8:c7:d8:cb:65:33:fe:fe:5c:85:2e: 5c:ba:a1:91:e0:74:a3:9d:91:ea:f9:a1:65:32:4e: bc:aa:3e:df:af:96:8a:60:d2:f8:90:b0:3c:76:c2: 45:29:04:b0:1e:74:7b:78:b5:3c:f6:0c:d3:8c:ab: c2:66:49:f8:b5:0c:9b:5f:41:32:79:e2:53:a9:4f: 8a:bc:dc:a4:7f:d9:b5:23:99:36:6c:54:01:59:7d: cf:b5:9c:0d:96:b1:77:b6:ac:63:2e:10:c1:e0:29: 3b:8a:33:c5:71:e1:47:be:23:05:e7:8b:a1:8a:90: 3d:33:d1:16:a8:9b:2d:99:7d:92:bf:0b:d9:aa:75: d1:bf:18:6d:47:a2:8b:c7:06:5c:67:aa:a0:d3:c8: ef:90:d6:1b:00:cf:79:4b:da:7a:1e:d3:eb:a4:55: 72:98:f1:ee:91:83:14:93:85:b9:66:6f:7a:59:c5: f5:e4:1a:b2:8d:8b:2c:a4:1f:29:06:e1:ea:ec:c7: 4d:97:86:24:6b:d2:39:3c:49:7c:33:43:22:ac:38: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:24:4A:2F:18:45:83:E8:58:5C:98:88:FB:72:AC:6F:10:0D:69:69 X509v3 Authority Key Identifier: keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ad:82:84:a1:6b:7b:30:d3:3b:d5:10:e3:d9:4c:c1:bb:78: d8:3a:95:57:fe:55:2a:9f:62:de:18:95:17:b8:07:92:a4:b3: 5a:cb:3f:a5:04:13:df:17:3d:64:ee:81:f4:4a:fc:5c:7a:a6: 36:b4:2c:a6:fa:a4:aa:92:cf:01:49:28:4f:91:24:58:e7:f9: ca:0a:25:1a:a0:3a:00:e7:0d:96:35:1b:c7:bc:36:c3:aa:57: f7:7f:a8:b1:ec:0d:b3:26:d9:67:67:7f:5c:9c:ab:43:db:7f: d5:39:2a:2a:a7:9e:37:50:3a:80:99:f0:9f:3c:3e:48:cc:4b: e2:67:df:65:7e:46:8d:34:00:d2:bd:da:ec:17:20:c3:fe:58: 18:5b:b8:56:59:0a:cc:f1:ce:63:4b:c9:b1:ed:a0:10:20:bb: 96:52:40:5a:14:5f:53:eb:3b:87:be:e9:d6:cd:79:2f:ba:00: 92:41:e7:df:ac:6d:7f:72:20:bc:1f:46:b4:81:f6:47:8f:91: 1a:c1:9b:88:f7:d0:bc:22:3b:e8:27:9b:47:20:ae:02:84:7f: 60:5e:7c:77:80:c8:d3:7b:34:fb:74:5c:4d:99:d7:88:ed:48: e7:55:88:d8:12:09:1e:ab:72:24:e0:ea:6d:5c:47:c9:ad:31: 2b:ba:2a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2E/uxhnvSFeN74v+4SGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOTc2MGNmMTFlZjJiODYyMTg3YjA1ZTVkNzUxYzczNGM2 MzRiNDUwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD EyhiYzI0NGEyZjE4NDU4M2U4NTg1Yzk4ODhmYjcyYWM2ZjEwMGQ2OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1X5FDow6ZSfLN9aHT+FWQvO56zA 9KsrYoGqRd7KKsw2lda4zxvVKbA/qxdFbFy9yMfYy2Uz/v5chS5cuqGR4HSjnZHq +aFlMk68qj7fr5aKYNL4kLA8dsJFKQSwHnR7eLU89gzTjKvCZkn4tQybX0EyeeJT qU+KvNykf9m1I5k2bFQBWX3PtZwNlrF3tqxjLhDB4Ck7ijPFceFHviMF54uhipA9 M9EWqJstmX2SvwvZqnXRvxhtR6KLxwZcZ6qg08jvkNYbAM95S9p6HtPrpFVymPHu kYMUk4W5Zm96WcX15BqyjYsspB8pBuHq7MdNl4Yka9I5PEl8M0MirDgTCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwkSi8YRYPoWFyYiPtyrG8QDWlpMB8GA1UdIwQY MBaAFPCXYM8R7yuGIYewXl11HHNMY0tFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2It MzYwMjI0NDZmMDIzLzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2ItMzYwMjI0NDZmMDIz LzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq2ChKFr ezDTO9UQ49lMwbt42DqVV/5VKp9i3hiVF7gHkqSzWss/pQQT3xc9ZO6B9Er8XHqm NrQspvqkqpLPAUkoT5EkWOf5ygolGqA6AOcNljUbx7w2w6pX93+osewNsybZZ2d/ XJyrQ9t/1TkqKqeeN1A6gJnwnzw+SMxL4mffZX5GjTQA0r3a7Bcgw/5YGFu4VlkK zPHOY0vJse2gECC7llJAWhRfU+s7h77p1s15L7oAkkHn36xtf3IgvB9GtIH2R4+R GsGbiPfQvCI76CebRyCuAoR/YF58d4DI03s0+3RcTZnXiO1I51WI2BIJHqtyJODq bVxHya0xK7oq7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:25 2026 by rpki-client