This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json) Hash identifier: kDDERDbPs5e9iwQl0PHmBSu6FFk7Jm+7tQ4dbrrTnoI= Subject key identifier: 67:DC:D0:AF:4B:C3:64:E5:64:0E:6A:55:66:DB:FE:A8:FA:D5:93:78 Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15 Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015 Certificate serial: 019C41D8BE382AED54B4558B33BC6FF7A2C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft Manifest number: 0793 Signing time: Mon 09 Feb 2026 10:00:49 +0000 Manifest this update: Mon 09 Feb 2026 10:00:49 +0000 Manifest next update: Tue 10 Feb 2026 10:00:49 +0000 Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: 3Ylp6G71syxZ5TpN5HTbj9dpYKXEUj8q1Z9h/nlEyGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:be:38:2a:ed:54:b4:55:8b:33:bc:6f:f7:a2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015 Validity Not Before: Feb 9 10:00:49 2026 GMT Not After : Feb 10 10:00:49 2026 GMT Subject: CN=67dcd0af4bc364e5640e6a5566dbfea8fad59378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:c8:66:d6:88:5d:a7:95:cb:dc:90:8b:91: 86:53:74:2f:b4:d4:b6:87:26:8b:e7:66:ae:a9:2d: 17:5f:64:2a:57:6f:87:eb:a8:aa:0d:f0:b8:8f:bf: 73:08:e4:9f:ea:b5:59:ce:d0:d6:a3:13:77:1d:8e: ce:78:18:42:0e:a4:b5:03:09:cc:c1:89:47:bd:d9: ff:4c:5c:ee:04:1c:a7:9d:6d:ea:f7:dc:58:4d:87: ee:eb:01:90:9a:7f:98:8d:62:73:cd:87:c9:e7:aa: 08:81:01:7d:af:70:9d:d7:5c:79:92:3c:41:d0:81: 24:20:ce:fa:d1:45:e9:9e:31:b2:ba:1d:81:de:6a: 6d:f8:f5:75:d5:d8:d7:29:d0:71:98:c4:40:61:75: af:22:7a:ef:58:4b:8f:06:4b:f1:1d:cd:4c:96:16: 74:cf:cc:42:19:61:39:21:1e:e7:d6:7d:48:d2:f4: 8c:d9:23:b0:1c:ff:f6:e2:93:cf:20:47:2a:df:b1: f0:f5:0d:93:d0:f0:5b:d0:8c:1a:9c:e5:90:1d:e6: 84:d1:79:f3:60:82:98:12:c0:17:67:fa:d7:9e:38: 32:5f:19:79:b0:15:8a:80:3d:4a:5f:69:91:24:1f: 66:94:fc:55:10:60:05:8a:9c:c1:86:de:bc:cd:78: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DC:D0:AF:4B:C3:64:E5:64:0E:6A:55:66:DB:FE:A8:FA:D5:93:78 X509v3 Authority Key Identifier: keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bb:a9:b8:4d:d0:29:61:30:5c:45:9a:2f:cc:bc:e0:f4:e5: 21:e3:11:9f:14:7f:12:ef:e2:9f:7d:3c:b9:e9:c6:0b:e9:b6: c8:92:b4:ba:7b:17:02:36:fe:5f:b9:c6:e2:6e:ca:5f:6e:0a: f5:f8:1d:c2:e4:e0:4a:29:7e:9b:56:3b:c9:09:11:24:c8:0a: 71:9e:42:4f:d4:ef:f1:19:0f:39:b3:93:b2:9e:7d:9c:56:c0: 5a:88:40:59:d2:eb:73:49:3f:bb:22:2b:f2:9a:68:d6:ad:b9: b3:da:03:1e:f1:26:93:28:3d:18:27:c4:fe:e8:93:eb:a6:01: 0f:38:0b:5c:a5:01:c1:5a:62:52:4e:d2:53:a6:e7:aa:66:8a: 88:ed:00:bd:9c:dc:39:be:fb:ae:27:17:3e:15:ce:8c:cd:91: e8:77:5b:a1:b4:13:98:b4:01:64:bb:5c:bc:c7:fd:09:c6:0b: cf:73:9d:d6:ed:bd:40:25:91:39:4a:11:03:bd:64:5a:ef:d4: 99:5e:04:aa:0d:05:d1:d7:25:82:36:29:47:41:0a:80:67:5c: f3:78:0a:cb:79:f2:88:2b:b1:4b:33:3c:bc:3f:56:14:2d:26: 03:9f:22:30:0c:a2:4b:4e:d1:cc:50:df:1a:b6:3a:99:63:30: 34:2c:b1:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2L44Ku1UtFWLM7xv96LGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzU2ZWMxMzBkOThhZjJkMGQyOTQ1OWYyMGZhNzliZDYz NTkwMTUwHhcNMjYwMjA5MTAwMDQ5WhcNMjYwMjEwMTAwMDQ5WjAzMTEwLwYDVQQD Eyg2N2RjZDBhZjRiYzM2NGU1NjQwZTZhNTU2NmRiZmVhOGZhZDU5Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm43IZtaIXaeVy9yQi5GGU3QvtNS2 hyaL52auqS0XX2QqV2+H66iqDfC4j79zCOSf6rVZztDWoxN3HY7OeBhCDqS1AwnM wYlHvdn/TFzuBBynnW3q99xYTYfu6wGQmn+YjWJzzYfJ56oIgQF9r3Cd11x5kjxB 0IEkIM760UXpnjGyuh2B3mpt+PV11djXKdBxmMRAYXWvInrvWEuPBkvxHc1MlhZ0 z8xCGWE5IR7n1n1I0vSM2SOwHP/24pPPIEcq37Hw9Q2T0PBb0IwanOWQHeaE0Xnz YIKYEsAXZ/rXnjgyXxl5sBWKgD1KX2mRJB9mlPxVEGAFipzBht68zXismwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfc0K9Lw2TlZA5qVWbb/qj61ZN4MB8GA1UdIwQY MBaAFKPFbsEw2Yry0NKUWfIPp5vWNZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjkt YjNlOWJlNzQyODk0LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjktYjNlOWJlNzQyODk0 LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLupuE3Q KWEwXEWaL8y84PTlIeMRnxR/Eu/in308uenGC+m2yJK0unsXAjb+X7nG4m7KX24K 9fgdwuTgSil+m1Y7yQkRJMgKcZ5CT9Tv8RkPObOTsp59nFbAWohAWdLrc0k/uyIr 8ppo1q25s9oDHvEmkyg9GCfE/uiT66YBDzgLXKUBwVpiUk7SU6bnqmaKiO0AvZzc Ob77ricXPhXOjM2R6HdbobQTmLQBZLtcvMf9CcYLz3Od1u29QCWROUoRA71kWu/U mV4Eqg0F0dclgjYpR0EKgGdc83gKy3nyiCuxSzM8vD9WFC0mA58iMAyiS07RzFDf GrY6mWMwNCyxFA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:31 2026 by rpki-client