This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json) Hash identifier: wN8NYiA1qrDTNiaN0Uo2ckD+SseYgjGXHuEcgh/XKa4= Subject key identifier: 5F:13:32:F0:26:BC:C2:39:BD:A5:28:2F:A3:B3:49:4A:1B:B1:2E:6E Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51 Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51 Certificate serial: 019C432245151F80B16394B4785F6B23905D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft Manifest number: 0DA4 Signing time: Mon 09 Feb 2026 16:00:45 +0000 Manifest this update: Mon 09 Feb 2026 16:00:45 +0000 Manifest next update: Tue 10 Feb 2026 16:00:45 +0000 Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: nUX1wLiT1cEQbF2mHvTMgs6D42WM656GTINJRuddKo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:45:15:1f:80:b1:63:94:b4:78:5f:6b:23:90:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51 Validity Not Before: Feb 9 16:00:45 2026 GMT Not After : Feb 10 16:00:45 2026 GMT Subject: CN=5f1332f026bcc239bda5282fa3b3494a1bb12e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:37:e7:32:52:93:d2:ce:9b:1b:25:e3:95: 5c:1a:c0:aa:3e:4f:6e:da:ed:57:9b:a1:3f:95:1f: 71:79:8e:db:eb:81:3e:98:41:bc:c7:ff:dc:6d:6b: 8f:fc:51:bc:46:37:7a:29:9b:8b:d2:46:21:c4:32: 9c:e6:69:9f:a9:3a:66:01:8e:36:04:d8:81:cc:e2: b2:a2:4a:55:4d:57:b3:ce:e6:88:41:ca:9e:df:7a: ee:19:27:2f:db:a1:ea:f2:5a:92:75:be:98:47:47: 2e:33:84:43:ae:8b:63:6c:4f:0e:42:76:6e:f6:ca: 16:c3:dd:88:d2:15:f5:6e:f9:d5:b7:4d:d7:c2:33: 2b:35:86:6a:3d:61:b1:ec:0a:a9:bf:c3:a4:1a:cb: fd:3b:eb:2c:3b:30:78:fa:90:3c:4f:23:0c:e7:b4: c8:d3:c2:ef:70:16:b2:35:81:4a:a1:c9:9d:20:a3: 91:fa:a0:aa:c3:c4:26:74:1f:5c:0f:f2:70:04:48: 17:1b:67:ff:44:79:c8:e7:42:95:e2:88:58:6b:75: 61:2e:c6:79:84:07:68:a4:8a:73:d7:50:41:5a:25: 98:62:d6:9c:03:38:47:8c:0d:50:70:4b:3a:4e:69: 2e:58:75:95:7f:75:97:73:1d:b9:05:19:92:af:6c: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:13:32:F0:26:BC:C2:39:BD:A5:28:2F:A3:B3:49:4A:1B:B1:2E:6E X509v3 Authority Key Identifier: keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2b:b3:59:78:e7:36:ae:e3:2a:8e:1d:e6:81:56:ca:ec:dc: 0a:51:e7:d7:60:a9:7e:4e:f4:db:d5:71:59:47:50:ce:e7:9e: e6:2d:56:5b:d7:8c:c1:45:fa:74:db:7a:30:0a:74:79:81:ab: 22:b3:19:d9:1c:c3:aa:dc:6e:df:75:36:46:5f:30:9a:b9:c9: 80:dc:5b:35:1b:8a:ef:9c:a0:c2:0f:94:ad:a0:48:1a:b7:66: 7c:fb:27:75:fb:e0:93:cc:a4:ca:30:14:41:b6:8d:cb:c6:3c: 18:81:de:6f:54:11:22:28:2c:df:74:47:58:47:3a:18:63:03: 59:72:ab:a8:8a:02:e4:d7:0b:1c:5f:2b:75:1c:62:f2:49:92: 1a:f1:56:c9:e1:2d:3b:c2:5c:1d:d5:1c:02:51:b9:df:1e:e7: 91:fa:71:15:13:29:9e:8e:bf:a2:86:25:ab:5d:cc:11:33:3c: 95:06:62:f2:71:5c:42:c2:08:0f:2e:70:67:68:11:1e:91:4e: 3d:7b:aa:d8:19:2e:c6:15:0f:a9:bb:85:ea:bb:e9:28:ee:b9: 8e:02:9b:eb:ce:d4:73:ae:ee:34:e9:a1:7b:3f:16:2a:ff:68: 28:cf:b7:f1:83:7c:6a:89:de:32:0f:58:87:98:68:03:8b:fb: a3:57:5e:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkUVH4CxY5S0eF9rI5BdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmIxMmM5MjliMmYwNWI5OWQ0OTdmYWYxNTUxZGJjNWQ4 MDdlNTEwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD Eyg1ZjEzMzJmMDI2YmNjMjM5YmRhNTI4MmZhM2IzNDk0YTFiYjEyZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDM35zJSk9LOmxsl45VcGsCqPk9u 2u1Xm6E/lR9xeY7b64E+mEG8x//cbWuP/FG8Rjd6KZuL0kYhxDKc5mmfqTpmAY42 BNiBzOKyokpVTVezzuaIQcqe33ruGScv26Hq8lqSdb6YR0cuM4RDrotjbE8OQnZu 9soWw92I0hX1bvnVt03XwjMrNYZqPWGx7Aqpv8OkGsv9O+ssOzB4+pA8TyMM57TI 08LvcBayNYFKocmdIKOR+qCqw8QmdB9cD/JwBEgXG2f/RHnI50KV4ohYa3VhLsZ5 hAdopIpz11BBWiWYYtacAzhHjA1QcEs6TmkuWHWVf3WXcx25BRmSr2zurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8TMvAmvMI5vaUoL6OzSUobsS5uMB8GA1UdIwQY MBaAFPD7EskpsvBbmdSX+vFVHbxdgH5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBzU3lTbXk4RnVaMUpmNjhWVWR2RjJBZmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hM2Q1ZjAtZWE2Yi00YTkwLWE2NDct MmVmZjliOTgzOWRiLzEvOFBzU3lTbXk4RnVaMUpmNjhWVWR2RjJBZmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hM2Q1ZjAtZWE2Yi00YTkwLWE2NDctMmVmZjliOTgzOWRi LzEvOFBzU3lTbXk4RnVaMUpmNjhWVWR2RjJBZmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCuzWXjn Nq7jKo4d5oFWyuzcClHn12Cpfk7029VxWUdQzuee5i1WW9eMwUX6dNt6MAp0eYGr IrMZ2RzDqtxu33U2Rl8wmrnJgNxbNRuK75ygwg+UraBIGrdmfPsndfvgk8ykyjAU QbaNy8Y8GIHeb1QRIigs33RHWEc6GGMDWXKrqIoC5NcLHF8rdRxi8kmSGvFWyeEt O8JcHdUcAlG53x7nkfpxFRMpno6/ooYlq13METM8lQZi8nFcQsIIDy5wZ2gRHpFO PXuq2BkuxhUPqbuF6rvpKO65jgKb687Uc67uNOmhez8WKv9oKM+38YN8aoneMg9Y h5hoA4v7o1de/A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:47 2026 by rpki-client