This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json) Hash identifier: 3qfH679SIX8v8E3iv7jT96DQdCP4bhRHkilbDKnsG98= Subject key identifier: B2:8C:62:A7:CB:97:35:9D:C6:64:69:29:95:0D:F1:0F:BC:63:93:D1 Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd Certificate serial: 019C42465AD0A592F0C26F4FE3843E210EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft Manifest number: 0BBA Signing time: Mon 09 Feb 2026 12:00:32 +0000 Manifest this update: Mon 09 Feb 2026 12:00:32 +0000 Manifest next update: Tue 10 Feb 2026 12:00:32 +0000 Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: cQ7aGm9fxy3Zz2hKtQAt7SVGNB+V2RLKgCft1DOuSm4=) 2: DrVZDZh6t-NASVfKCJKEMxtwld0.roa (hash: cTJ6lFiko+3ixFYd+6UnWr/LWA37RjzGG0uQnDkQEnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5a:d0:a5:92:f0:c2:6f:4f:e3:84:3e:21:0e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd Validity Not Before: Feb 9 12:00:32 2026 GMT Not After : Feb 10 12:00:32 2026 GMT Subject: CN=b28c62a7cb97359dc6646929950df10fbc6393d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:af:2e:0c:ae:ae:da:ce:fe:e2:b3:13:00: 43:4b:70:7c:e4:9d:39:ba:e7:07:38:ca:a7:e8:7f: 68:8c:71:0c:37:d7:62:2e:4c:b0:cb:71:44:27:50: bf:13:b4:dc:29:01:7b:dd:59:b5:1f:6a:2a:c1:29: 37:d9:ca:1b:6f:5e:b0:bf:df:a8:ff:eb:b4:0a:19: 15:83:01:5b:ab:25:66:61:89:0d:5d:ed:f4:50:f0: 0c:ce:12:4c:f4:6e:5f:39:2d:ef:ed:9c:18:7e:f5: 31:69:82:4c:02:e9:aa:58:91:3a:4c:88:d4:5b:6a: 17:4e:3a:8b:58:24:21:39:7f:73:db:a5:a0:d5:7d: c9:02:d8:66:c6:74:b6:b6:33:b9:18:c8:7b:8e:0d: 7c:cb:4f:be:3b:2d:ac:1c:3a:9e:a2:76:ad:45:d7: a4:64:2d:36:7c:d3:02:f4:25:f7:38:5e:6b:00:b2: e5:22:8a:3c:b2:65:18:bc:b7:d0:a7:f1:58:69:7a: 1c:30:2d:70:7c:4b:5b:6d:65:08:70:54:b5:17:b9: 31:0d:ae:39:b3:07:a9:53:cb:54:be:94:e4:25:5f: 5f:a7:39:28:63:01:af:bf:0d:57:fa:93:ed:bc:b0: cc:0d:66:9b:ee:19:37:20:e0:39:4f:82:27:ee:c7: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:62:A7:CB:97:35:9D:C6:64:69:29:95:0D:F1:0F:BC:63:93:D1 X509v3 Authority Key Identifier: keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:18:47:1c:ba:fc:f9:11:5e:ef:f3:06:f7:c4:f7:eb:a6:aa: 8c:6e:8a:e8:35:8e:5c:0e:57:91:c4:c9:48:9b:90:b4:38:07: cd:ce:b9:59:25:39:f2:c9:d0:3f:aa:8e:3b:65:3f:67:24:df: 57:c4:65:4e:c5:52:11:43:e2:2e:67:d9:95:e3:53:8b:5e:a6: 06:51:c5:ff:cc:bc:fc:3c:b5:b5:15:d6:eb:f4:93:19:06:96: 31:2a:03:7d:4c:ae:e7:f0:52:14:96:78:c3:74:58:49:c4:95: 92:97:9e:5a:b2:01:ec:db:4c:84:3a:31:e8:9c:1e:11:76:0a: 42:13:c2:9e:2a:5f:23:36:3c:3b:00:0a:97:ce:22:ca:bd:73: ee:73:11:8f:1b:56:58:33:7e:c9:1d:99:27:88:8f:87:68:f2: 43:ba:bf:7e:ac:cc:e8:a0:50:3e:53:b2:c4:a9:52:aa:a5:eb: eb:f5:e8:1c:97:50:f2:90:aa:b6:6e:52:41:f4:4e:e2:d3:a4: e2:b6:9d:42:dd:2a:e5:9f:2d:96:28:ca:27:06:9d:32:d4:29: 9e:21:8d:17:06:36:83:71:68:00:73:61:93:f2:bb:7c:63:8a: f1:d6:e9:09:b3:cd:d8:de:8d:f6:0a:0d:ab:32:33:d3:76:73: 8c:4e:d7:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlrQpZLwwm9P44Q+IQ69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2 NjE5ZmQwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD EyhiMjhjNjJhN2NiOTczNTlkYzY2NDY5Mjk5NTBkZjEwZmJjNjM5M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyivLgyurtrO/uKzEwBDS3B85J05 uucHOMqn6H9ojHEMN9diLkywy3FEJ1C/E7TcKQF73Vm1H2oqwSk32cobb16wv9+o /+u0ChkVgwFbqyVmYYkNXe30UPAMzhJM9G5fOS3v7ZwYfvUxaYJMAumqWJE6TIjU W2oXTjqLWCQhOX9z26Wg1X3JAthmxnS2tjO5GMh7jg18y0++Oy2sHDqeonatRdek ZC02fNMC9CX3OF5rALLlIoo8smUYvLfQp/FYaXocMC1wfEtbbWUIcFS1F7kxDa45 swepU8tUvpTkJV9fpzkoYwGvvw1X+pPtvLDMDWab7hk3IOA5T4In7seHiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKMYqfLlzWdxmRpKZUN8Q+8Y5PRMB8GA1UdIwQY MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt MjNjMTYyNjNjZjNiLzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhhHHLr8 +RFe7/MG98T366aqjG6K6DWOXA5XkcTJSJuQtDgHzc65WSU58snQP6qOO2U/ZyTf V8RlTsVSEUPiLmfZleNTi16mBlHF/8y8/Dy1tRXW6/STGQaWMSoDfUyu5/BSFJZ4 w3RYScSVkpeeWrIB7NtMhDox6JweEXYKQhPCnipfIzY8OwAKl84iyr1z7nMRjxtW WDN+yR2ZJ4iPh2jyQ7q/fqzM6KBQPlOyxKlSqqXr6/XoHJdQ8pCqtm5SQfRO4tOk 4radQt0q5Z8tlijKJwadMtQpniGNFwY2g3FoAHNhk/K7fGOK8dbpCbPN2N6N9goN qzIz03ZzjE7X0A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:46 2026 by rpki-client