This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json) Hash identifier: IXKxCV8yOBUGcZVvctclkXVhj+ocKtkfUSfwSMpzlWc= Subject key identifier: 7F:E5:28:12:49:2A:E0:D8:9F:34:1D:EA:92:3E:39:70:9B:0F:E3:95 Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06 Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606 Certificate serial: 019C1C83BB1C107B2115609C2B13DBB6E687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft Manifest number: 17FC Signing time: Mon 02 Feb 2026 04:02:00 +0000 Manifest this update: Mon 02 Feb 2026 04:02:00 +0000 Manifest next update: Tue 03 Feb 2026 04:02:00 +0000 Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: qlTJaUT2ONNfLFUBN/TpB3O/M9hylLKTEbzaOxEQQ2g=) 2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:83:bb:1c:10:7b:21:15:60:9c:2b:13:db:b6:e6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606 Validity Not Before: Feb 2 04:02:00 2026 GMT Not After : Feb 3 04:02:00 2026 GMT Subject: CN=7fe52812492ae0d89f341dea923e39709b0fe395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:a3:03:29:98:01:5e:61:76:04:a1:d3:f2: 05:4f:af:3c:39:cc:8a:48:2b:e0:ea:ff:72:b8:48: 18:c6:49:f8:67:19:6e:6f:ab:a4:3d:e8:09:ad:73: 29:c8:ce:99:6b:0e:8d:cc:be:21:a6:d0:a1:18:19: 1e:34:05:40:02:8b:21:63:56:53:e7:dd:fb:66:3a: 69:69:be:d6:4a:3c:87:b5:fa:d5:fd:1f:ea:40:97: bd:ab:5c:0a:f7:aa:c1:a8:8a:ba:48:c5:15:99:a8: ae:0c:41:84:88:e4:f1:a6:b6:e4:41:71:e1:85:9f: 1d:bd:d5:46:d2:0d:b6:ea:6c:aa:36:4f:d5:94:8e: fe:7c:22:6b:0b:65:ee:97:88:cf:aa:8f:52:4e:73: 52:8e:ae:40:cb:db:d5:e1:c3:bf:3d:da:11:09:79: aa:2d:ab:28:b3:22:34:7c:ce:85:fc:65:e6:f4:36: 77:8c:9c:4e:b1:1c:31:16:cf:ac:61:78:c1:57:1a: 00:16:cd:5c:4e:e2:ed:87:04:a6:5b:7c:e0:a9:a7: b1:82:27:cf:b0:9d:7f:7f:1e:b2:a1:4a:4e:2e:73: 7a:6d:d6:99:7e:13:c6:fc:8c:5b:45:01:61:a2:f1: 4c:b5:a2:b1:06:a0:d1:f4:0a:3d:1d:fc:37:de:5a: 8c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:28:12:49:2A:E0:D8:9F:34:1D:EA:92:3E:39:70:9B:0F:E3:95 X509v3 Authority Key Identifier: keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4f:18:8c:a6:53:db:01:cd:32:75:0a:c4:36:eb:bf:c7:11: 86:22:cd:06:a4:35:19:a8:c2:37:e9:d9:ae:8a:b1:85:0f:84: 4e:18:b3:7c:80:54:a3:37:57:34:4b:5d:ff:f4:b8:a0:c7:fb: 22:b2:90:21:fd:f3:0d:6e:2f:88:cb:e0:98:7e:d4:8e:67:18: db:5e:2f:13:c4:2e:82:cb:78:48:44:c6:e4:5a:39:6d:96:dc: 94:33:9e:8c:49:9f:10:ba:e6:23:82:35:c2:c5:a2:97:41:73: 52:a8:8a:8e:e7:d6:ae:5f:14:81:24:17:25:36:71:b9:2a:15: 37:57:05:74:c3:4a:3a:94:c5:1c:3a:06:ba:12:dc:29:ac:3e: ec:97:b2:1e:6d:b3:11:79:7f:ca:c3:68:ab:f8:61:13:cc:0c: 9a:ea:de:fb:88:d0:cc:29:de:f2:e4:97:98:02:05:74:1b:60: 97:61:2f:2c:1f:05:7b:6a:86:0b:03:da:c7:0e:9a:9b:03:6f: 8c:00:1c:63:f9:6b:b7:c9:8c:68:48:fc:a6:9a:a5:99:11:34: 17:09:8f:89:6d:9b:2e:aa:80:04:b3:a3:58:bf:d8:3d:a1:32: 30:33:61:5a:fc:7d:a9:cd:78:74:3c:a9:6b:ec:91:a6:60:fc: dc:c4:48:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcg7scEHshFWCcKxPbtuaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk NTM2MDYwHhcNMjYwMjAyMDQwMjAwWhcNMjYwMjAzMDQwMjAwWjAzMTEwLwYDVQQD Eyg3ZmU1MjgxMjQ5MmFlMGQ4OWYzNDFkZWE5MjNlMzk3MDliMGZlMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbCjAymYAV5hdgSh0/IFT688OcyK SCvg6v9yuEgYxkn4Zxlub6ukPegJrXMpyM6Zaw6NzL4hptChGBkeNAVAAoshY1ZT 5937Zjppab7WSjyHtfrV/R/qQJe9q1wK96rBqIq6SMUVmaiuDEGEiOTxprbkQXHh hZ8dvdVG0g226myqNk/VlI7+fCJrC2Xul4jPqo9STnNSjq5Ay9vV4cO/PdoRCXmq LasosyI0fM6F/GXm9DZ3jJxOsRwxFs+sYXjBVxoAFs1cTuLthwSmW3zgqaexgifP sJ1/fx6yoUpOLnN6bdaZfhPG/IxbRQFhovFMtaKxBqDR9Ao9Hfw33lqMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/lKBJJKuDYnzQd6pI+OXCbD+OVMB8GA1UdIwQY MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE8YjKZT 2wHNMnUKxDbrv8cRhiLNBqQ1GajCN+nZroqxhQ+EThizfIBUozdXNEtd//S4oMf7 IrKQIf3zDW4viMvgmH7UjmcY214vE8Qugst4SETG5Fo5bZbclDOejEmfELrmI4I1 wsWil0FzUqiKjufWrl8UgSQXJTZxuSoVN1cFdMNKOpTFHDoGuhLcKaw+7JeyHm2z EXl/ysNoq/hhE8wMmure+4jQzCne8uSXmAIFdBtgl2EvLB8Fe2qGCwPaxw6amwNv jAAcY/lrt8mMaEj8ppqlmRE0FwmPiW2bLqqABLOjWL/YPaEyMDNhWvx9qc14dDyp a+yRpmD83MRIxg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:23 2026 by rpki-client