This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft File: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft (raw, json) Hash identifier: oA+Mxus0wUoe/Z2l4vr0bDPFZeDQIV7N1E20bUyLyFw= Subject key identifier: D0:15:AC:CA:DC:F2:5F:C3:EF:0A:C2:80:A8:B6:07:54:2B:23:70:F6 Authority key identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D Certificate issuer: /CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d Certificate serial: 019C427D7BAFB411924BA158B4BE5F5BE7A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft Manifest number: 13 Signing time: Mon 09 Feb 2026 13:00:45 +0000 Manifest this update: Mon 09 Feb 2026 13:00:45 +0000 Manifest next update: Tue 10 Feb 2026 13:00:45 +0000 Files and hashes: 1: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl (hash: sMNuNrYZPHy5USNbffWgqwYerecwh7a+C3LvsYMZGSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7b:af:b4:11:92:4b:a1:58:b4:be:5f:5b:e7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d Validity Not Before: Feb 9 13:00:45 2026 GMT Not After : Feb 10 13:00:45 2026 GMT Subject: CN=d015accadcf25fc3ef0ac280a8b607542b2370f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:30:82:19:7a:33:ee:30:2c:01:74:59:25: 4b:bf:7f:76:e4:a3:4e:14:a0:ee:5f:15:b4:e0:f0: 07:f9:9c:4c:b7:01:ac:98:3a:ac:82:1b:d9:1c:7b: f5:d3:07:d4:d3:a7:1d:43:74:24:f0:c2:2b:d0:ff: c8:9e:b0:db:22:4c:02:d9:5c:a6:8c:93:92:5d:89: af:9b:3c:25:5d:25:c1:27:4f:4f:98:e7:e2:39:44: 8d:7e:5e:ee:ea:b8:82:5d:64:fb:f0:56:1c:35:79: 28:40:c9:8d:b1:cc:e1:db:f4:4e:e6:bb:98:78:b4: 82:aa:0b:50:76:6a:4f:d2:8a:fc:4f:de:3a:59:13: 5e:2e:53:72:b9:1d:01:4b:a7:4d:e3:3c:c8:0c:cb: 8f:27:9e:d8:d3:b6:bb:97:95:3f:da:eb:38:fd:da: 52:df:1e:55:e9:57:a7:ef:2b:2d:30:e5:34:ed:3c: 2a:76:b1:2d:0f:3f:fc:d4:9d:97:60:e0:35:ee:6b: dd:c4:ae:61:d7:a1:d7:e2:dc:4d:34:2f:db:b1:a8: 77:31:b9:41:d6:3b:03:a5:91:3d:99:31:28:12:9b: 2d:00:04:61:46:62:d3:88:ff:0d:1f:ad:9f:fa:b8: 80:9e:d2:b7:26:91:6e:77:45:72:60:da:c6:47:92: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:15:AC:CA:DC:F2:5F:C3:EF:0A:C2:80:A8:B6:07:54:2B:23:70:F6 X509v3 Authority Key Identifier: keyid:F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:63:43:65:d9:17:02:cd:8e:fb:82:40:48:9d:09:3b:bc:a3: 55:e1:4d:3b:20:e0:f4:76:4f:07:eb:bf:f1:02:7c:5f:72:c7: 08:d1:ce:19:a1:52:80:c9:36:dd:7b:63:fe:21:7e:ee:d9:ee: f8:8b:c7:65:b5:d4:88:9d:aa:08:05:d9:2b:32:13:2a:a8:6b: 80:f1:18:db:55:c3:29:eb:db:5f:a6:b1:52:73:48:5f:4c:e2: bd:a2:03:3b:c4:4f:63:ad:e5:d9:4b:ce:0a:2b:85:46:91:32: 0b:04:6f:e2:64:91:e5:34:38:72:44:36:cd:83:48:20:0b:7f: 32:6d:23:04:cf:2b:6f:d4:6f:29:ef:4c:f7:4e:35:0d:15:7d: 7f:5f:5a:f6:80:5f:e2:3a:cf:c0:e8:87:32:b2:c8:36:e4:93: 6f:25:59:44:e6:2e:e6:04:c3:02:6a:f7:7b:34:8e:01:da:65: 17:5b:85:71:96:80:f6:98:89:ca:97:8f:9d:68:eb:84:b4:08: d3:04:92:77:bb:9c:52:ac:3f:51:36:11:d2:28:5e:d1:cf:2a: 11:30:0e:45:64:a2:49:88:aa:65:2a:90:5d:ab:a7:d1:cd:ff: 51:1c:6a:66:99:8b:8e:be:b0:c8:7f:e6:03:0c:02:eb:78:88: c7:99:76:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXuvtBGSS6FYtL5fW+elMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWFhMGM0OGQxYzZlMmQwMmY1OTMyMGY1ZDM0OTNhNmU1 ODcwNWQwHhcNMjYwMjA5MTMwMDQ1WhcNMjYwMjEwMTMwMDQ1WjAzMTEwLwYDVQQD EyhkMDE1YWNjYWRjZjI1ZmMzZWYwYWMyODBhOGI2MDc1NDJiMjM3MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Ywghl6M+4wLAF0WSVLv3925KNO FKDuXxW04PAH+ZxMtwGsmDqsghvZHHv10wfU06cdQ3Qk8MIr0P/InrDbIkwC2Vym jJOSXYmvmzwlXSXBJ09PmOfiOUSNfl7u6riCXWT78FYcNXkoQMmNsczh2/RO5ruY eLSCqgtQdmpP0or8T946WRNeLlNyuR0BS6dN4zzIDMuPJ57Y07a7l5U/2us4/dpS 3x5V6Ven7ystMOU07TwqdrEtDz/81J2XYOA17mvdxK5h16HX4txNNC/bsah3MblB 1jsDpZE9mTEoEpstAARhRmLTiP8NH62f+riAntK3JpFud0VyYNrGR5Kj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAVrMrc8l/D7wrCgKi2B1QrI3D2MB8GA1UdIwQY MBaAFPJaoMSNHG4tAvWTIPXTSTpuWHBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxxZ3hJMGNiaTBDOVpNZzlkTkpPbTVZY0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81Y2RjYjgtZDAwZS00ZWNlLWFlYTEt ZDRjNzRkMTI1ZjY4LzEvOGxxZ3hJMGNiaTBDOVpNZzlkTkpPbTVZY0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81Y2RjYjgtZDAwZS00ZWNlLWFlYTEtZDRjNzRkMTI1ZjY4 LzEvOGxxZ3hJMGNiaTBDOVpNZzlkTkpPbTVZY0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGNDZdkX As2O+4JASJ0JO7yjVeFNOyDg9HZPB+u/8QJ8X3LHCNHOGaFSgMk23Xtj/iF+7tnu +IvHZbXUiJ2qCAXZKzITKqhrgPEY21XDKevbX6axUnNIX0zivaIDO8RPY63l2UvO CiuFRpEyCwRv4mSR5TQ4ckQ2zYNIIAt/Mm0jBM8rb9RvKe9M9041DRV9f19a9oBf 4jrPwOiHMrLINuSTbyVZROYu5gTDAmr3ezSOAdplF1uFcZaA9piJypePnWjrhLQI 0wSSd7ucUqw/UTYR0ihe0c8qETAORWSiSYiqZSqQXaun0c3/URxqZpmLjr6wyH/m AwwC63iIx5l2aw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:45 2026 by rpki-client