This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json) Hash identifier: CAXQbxccAzm3kbmUZf8EbOckEZJ30j1jTds4biKbG3c= Subject key identifier: AF:90:06:DF:A5:10:89:0C:88:08:8B:4C:36:B6:C2:75:F0:B3:10:BE Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86 Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386 Certificate serial: 019C43225E91BC70C4C403BF40A1E35E2E09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft Manifest number: 0DE6 Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: R1sWGVBlXe7gFSuZO3We4z0goXr5emWGs5iBHGAC2hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5e:91:bc:70:c4:c4:03:bf:40:a1:e3:5e:2e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386 Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=af9006dfa510890c88088b4c36b6c275f0b310be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:d3:6a:12:49:fd:b3:70:5b:b6:4c:6a:f7: f2:ec:7f:43:0d:67:19:52:48:4c:3f:40:c2:d9:81: 92:bf:ab:16:79:bb:78:51:d5:b4:e5:82:dd:0b:f0: 68:02:7a:b3:20:52:d7:47:b9:70:2d:cf:81:86:bf: fc:d0:fa:a6:a3:5c:22:ea:52:67:b0:60:24:bd:78: 0b:0a:50:ad:76:10:57:82:c9:f5:07:26:07:0e:9d: 93:f8:29:32:36:00:93:7d:69:0c:09:08:c3:8f:cb: c7:86:a9:70:c2:97:d6:cd:99:00:ac:ad:aa:eb:c7: 7b:3a:82:3f:b7:18:4c:aa:99:ff:45:0e:bc:da:b4: ba:7c:72:8f:c6:24:74:3e:75:72:cb:24:87:e5:b5: 97:3e:94:a3:ea:27:b7:38:cc:c7:f8:45:c2:0a:8d: 95:22:01:7b:45:b7:13:c5:08:a4:bf:7e:3a:45:77: 11:96:ce:da:16:2e:b1:f2:0c:70:c3:b2:ca:e3:31: 2b:8e:95:9e:14:4c:73:49:6c:20:2f:b0:e0:cd:11: 48:fb:c1:b3:98:a9:a1:1b:c6:f2:92:fb:b2:0a:63: 6d:9f:4e:82:d5:8c:2b:ce:1b:06:9a:d3:b4:d7:33: ba:72:5a:98:b6:43:b0:f6:a4:07:e6:eb:22:a7:d6: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:06:DF:A5:10:89:0C:88:08:8B:4C:36:B6:C2:75:F0:B3:10:BE X509v3 Authority Key Identifier: keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:d0:6a:e0:a4:d0:7a:3a:c4:e0:f5:b8:3d:29:70:3c:47: a6:0d:56:84:5f:c5:d0:22:13:84:0f:84:72:07:ed:7c:38:0a: ba:59:78:91:d6:92:41:f6:b7:13:ce:e0:f3:a2:63:18:46:96: d2:4b:43:64:1b:d3:cf:eb:6c:8e:15:02:84:88:de:15:be:8b: ea:c9:19:aa:9c:3a:2e:93:84:56:67:c4:27:9d:bd:05:37:c5: 38:d8:65:a4:bd:21:7a:59:04:f0:e9:d5:20:7b:ab:8f:5a:d5: cf:c3:39:4d:f0:bd:94:0f:c0:6d:47:f8:ab:e9:59:65:68:fb: 5d:69:93:99:44:e2:cc:a9:aa:0c:e5:ca:6b:8d:79:fc:84:50: 3b:b3:64:cf:e6:55:ee:53:1e:fa:8d:32:04:41:e0:10:db:58: 4b:07:6e:e2:e3:0b:07:58:6f:86:81:fa:11:e0:43:25:46:13: 64:43:1d:df:41:06:23:9d:d4:4a:16:ff:b8:b0:1b:fd:38:27: 5f:59:09:5a:e1:ab:e5:f7:9a:cd:36:ed:d9:b4:0a:e6:47:39: 85:7f:ec:62:64:26:ae:be:de:29:89:3f:fd:26:ef:8f:58:ca: dc:80:af:c0:3b:df:9a:e1:ff:51:0c:06:3d:f4:d1:99:44:06: f5:87:90:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIl6RvHDExAO/QKHjXi4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTk1Yjc4YjA1NzY1MDEyNzhlZmQ3ZTAyMDI2OWJhMWYw NmQzODYwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD EyhhZjkwMDZkZmE1MTA4OTBjODgwODhiNGMzNmI2YzI3NWYwYjMxMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pXTahJJ/bNwW7ZMavfy7H9DDWcZ UkhMP0DC2YGSv6sWebt4UdW05YLdC/BoAnqzIFLXR7lwLc+Bhr/80Pqmo1wi6lJn sGAkvXgLClCtdhBXgsn1ByYHDp2T+CkyNgCTfWkMCQjDj8vHhqlwwpfWzZkArK2q 68d7OoI/txhMqpn/RQ682rS6fHKPxiR0PnVyyySH5bWXPpSj6ie3OMzH+EXCCo2V IgF7RbcTxQikv346RXcRls7aFi6x8gxww7LK4zErjpWeFExzSWwgL7DgzRFI+8Gz mKmhG8bykvuyCmNtn06C1YwrzhsGmtO01zO6clqYtkOw9qQH5usip9aTuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+QBt+lEIkMiAiLTDa2wnXwsxC+MB8GA1UdIwQY MBaAFPCpW3iwV2UBJ479fgICabofBtOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEt YmRkZWY2MGNmOWQ4LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEtYmRkZWY2MGNmOWQ4 LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddPQauCk 0Ho6xOD1uD0pcDxHpg1WhF/F0CIThA+EcgftfDgKull4kdaSQfa3E87g86JjGEaW 0ktDZBvTz+tsjhUChIjeFb6L6skZqpw6LpOEVmfEJ529BTfFONhlpL0helkE8OnV IHurj1rVz8M5TfC9lA/AbUf4q+lZZWj7XWmTmUTizKmqDOXKa415/IRQO7Nkz+ZV 7lMe+o0yBEHgENtYSwdu4uMLB1hvhoH6EeBDJUYTZEMd30EGI53UShb/uLAb/Tgn X1kJWuGr5feazTbt2bQK5kc5hX/sYmQmrr7eKYk//Sbvj1jK3ICvwDvfmuH/UQwG PfTRmUQG9YeQLA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:08 2026 by rpki-client