This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json) Hash identifier: oXWOgDwQEXbIvFtVLBeoxN5Qweu1O3oKlfHPBaXlCY8= Subject key identifier: 5C:3D:90:E4:20:0A:A1:97:FB:1B:CD:FB:F0:7A:75:A7:1E:14:95:28 Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff Certificate serial: 019C41D8BC6E3F12718C061BDEAA485CC6DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft Manifest number: 08EB Signing time: Mon 09 Feb 2026 10:00:48 +0000 Manifest this update: Mon 09 Feb 2026 10:00:48 +0000 Manifest next update: Tue 10 Feb 2026 10:00:48 +0000 Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: xp8v/XBZa+k/sb5Wy2t0ucnA0C+KpWR3vpOizCclx48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:bc:6e:3f:12:71:8c:06:1b:de:aa:48:5c:c6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff Validity Not Before: Feb 9 10:00:48 2026 GMT Not After : Feb 10 10:00:48 2026 GMT Subject: CN=5c3d90e4200aa197fb1bcdfbf07a75a71e149528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:97:47:f4:96:f8:11:cc:75:6a:c0:c5:36: f2:7d:56:51:3e:b5:c6:71:31:e6:3b:86:4b:35:bb: 18:17:b2:8c:e6:57:d0:22:c6:46:3c:ef:96:44:8d: ae:f9:4c:2c:81:fe:02:39:13:22:79:cf:f5:a2:15: dc:f8:e3:f9:bf:f3:01:32:29:db:e8:51:ad:17:1b: 6c:c6:14:1f:e8:32:d0:f2:59:69:83:6c:6c:8a:8e: 20:68:62:9d:dd:01:5e:84:09:c5:f7:99:d2:59:d3: db:7a:6f:bf:5a:26:31:53:df:00:fb:91:ff:cc:f0: 36:56:76:4e:86:7b:70:88:61:a9:23:ba:49:4b:67: d3:51:bf:29:c6:f7:4e:1c:76:6c:5e:2c:a8:b8:25: 07:92:b3:c2:f7:be:38:bb:bf:76:a8:5f:a5:fb:4c: 62:bd:fd:dc:ec:80:f1:99:8c:7e:41:ae:7b:f2:5c: 9a:8f:d3:a9:1d:0a:fe:48:4d:14:bd:99:6d:77:a4: 56:8f:89:cc:7a:70:55:fe:c6:d6:eb:6c:af:d9:56: 85:c2:24:97:c3:66:6d:b1:bb:07:bc:e6:67:9c:54: 41:a4:58:21:b8:9a:1d:55:7b:48:f0:4a:5b:6b:ac: d1:2a:80:93:e6:af:2a:2c:db:25:2d:25:12:26:d7: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3D:90:E4:20:0A:A1:97:FB:1B:CD:FB:F0:7A:75:A7:1E:14:95:28 X509v3 Authority Key Identifier: keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:09:be:67:c5:29:5a:c5:c7:89:30:e5:d6:f0:ed:3e:aa: e8:aa:1c:63:2c:e6:e0:60:44:5d:a3:28:95:b1:23:f1:eb:44: 58:b4:ce:6e:33:bc:d0:78:e5:23:7e:03:ec:6e:db:8f:6e:0c: 5c:fb:f1:3f:68:f7:9b:2f:8f:a9:71:8e:d5:0d:75:63:4f:93: fa:f3:07:87:bd:f8:c1:a9:d9:8b:b0:26:84:3e:da:86:f5:85: b7:78:3f:ae:3b:23:3e:9f:ae:10:ef:94:80:0c:40:32:a1:f3: 7e:4d:3b:c4:12:57:70:c8:df:78:a6:e2:64:8b:ba:6a:f9:0a: 61:c8:b5:78:9f:a4:42:1e:a9:93:29:14:46:61:2c:06:d6:32: 8e:6d:0b:e7:df:ce:8a:f8:df:b4:13:ef:0d:29:47:c7:e4:6b: bc:99:48:67:6e:96:55:34:e4:5f:b4:00:ef:06:ca:e8:b4:be: 8a:55:4b:76:3a:d4:62:99:85:f9:b2:7c:47:62:41:94:6a:22: ad:14:36:78:90:c5:62:59:74:b9:95:88:ca:39:4d:70:40:4e: a4:5b:f2:ba:0a:f5:44:bc:75:8b:ce:a6:cb:61:17:3d:e4:a9: 26:98:19:11:5a:d6:1c:87:eb:40:1f:db:05:f6:35:4d:6e:81: 25:d1:05:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LxuPxJxjAYb3qpIXMbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGMxOTY0ODQ3MDA5MWZjYTdjMGVkNzljZTlkZjZiZGFh MGNkZmYwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD Eyg1YzNkOTBlNDIwMGFhMTk3ZmIxYmNkZmJmMDdhNzVhNzFlMTQ5NTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5iXR/SW+BHMdWrAxTbyfVZRPrXG cTHmO4ZLNbsYF7KM5lfQIsZGPO+WRI2u+Uwsgf4CORMiec/1ohXc+OP5v/MBMinb 6FGtFxtsxhQf6DLQ8llpg2xsio4gaGKd3QFehAnF95nSWdPbem+/WiYxU98A+5H/ zPA2VnZOhntwiGGpI7pJS2fTUb8pxvdOHHZsXiyouCUHkrPC9744u792qF+l+0xi vf3c7IDxmYx+Qa578lyaj9OpHQr+SE0UvZltd6RWj4nMenBV/sbW62yv2VaFwiSX w2ZtsbsHvOZnnFRBpFghuJodVXtI8Epba6zRKoCT5q8qLNslLSUSJtczFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw9kOQgCqGX+xvN+/B6daceFJUoMB8GA1UdIwQY MBaAFPCMGWSEcAkfynwO15zp32vaoM3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTIt ZDFmZThjYjAxNDU2LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTItZDFmZThjYjAxNDU2 LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBQJvmfF KVrFx4kw5dbw7T6q6KocYyzm4GBEXaMolbEj8etEWLTObjO80HjlI34D7G7bj24M XPvxP2j3my+PqXGO1Q11Y0+T+vMHh734wanZi7AmhD7ahvWFt3g/rjsjPp+uEO+U gAxAMqHzfk07xBJXcMjfeKbiZIu6avkKYci1eJ+kQh6pkykURmEsBtYyjm0L59/O ivjftBPvDSlHx+RrvJlIZ26WVTTkX7QA7wbK6LS+ilVLdjrUYpmF+bJ8R2JBlGoi rRQ2eJDFYll0uZWIyjlNcEBOpFvyugr1RLx1i86my2EXPeSpJpgZEVrWHIfrQB/b BfY1TW6BJdEFXA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:39 2026 by rpki-client