This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json) Hash identifier: QOy9sPUUUbROpIKvbjg4xtQcE6drX4VHA11QJBeEcQU= Subject key identifier: 1C:CE:47:A1:AB:0F:6B:91:7C:11:6E:5E:FD:44:DB:0A:CB:7E:31:61 Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8 Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8 Certificate serial: 019C4246C1257AAEA87B154BCA8B7093DD4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft Manifest number: 1604 Signing time: Mon 09 Feb 2026 12:00:59 +0000 Manifest this update: Mon 09 Feb 2026 12:00:59 +0000 Manifest next update: Tue 10 Feb 2026 12:00:59 +0000 Files and hashes: 1: QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa (hash: vjfnrfXaTawfVYXNYU+0NjZYU8xM90SngyWSZqja7G0=) 2: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: +vVll8tyVZKn6ZLQg8NhPZtPVEx2m5Wl9I7zeP3HshM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c1:25:7a:ae:a8:7b:15:4b:ca:8b:70:93:dd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8 Validity Not Before: Feb 9 12:00:59 2026 GMT Not After : Feb 10 12:00:59 2026 GMT Subject: CN=1cce47a1ab0f6b917c116e5efd44db0acb7e3161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:8f:c3:7e:ca:0c:c3:6c:82:b3:57:bb:a4: 35:fe:3e:fd:da:4f:16:6d:7b:e5:c5:69:ef:1f:00: a2:e0:22:4d:5d:dd:20:c7:41:38:7a:f2:c2:54:30: d0:80:17:2b:64:e2:ba:16:bc:ff:ca:05:53:f9:48: 78:ba:73:fc:f7:bc:45:34:4d:8d:84:7d:f3:fc:58: 70:c2:66:ce:98:db:f5:e5:2a:71:93:04:cb:1b:45: 70:48:f7:7c:ed:49:c7:19:34:4f:aa:f0:a7:cb:b5: 3c:43:72:6b:84:fa:f4:a9:6e:82:7c:df:40:aa:17: 6f:ad:c3:f3:be:54:cc:ba:f3:27:b5:c6:b5:ef:3b: fa:22:a5:f4:73:24:4c:e2:11:bb:aa:69:c6:45:0e: ee:bd:c9:fc:b5:3a:b9:aa:e1:32:3c:d2:46:48:74: d1:9b:36:cb:31:26:91:9e:b7:67:1f:b6:d7:6c:f3: 1f:87:21:53:8e:34:97:d2:f6:aa:f9:43:6b:6c:c9: 6d:01:81:9d:34:6c:74:3c:e4:6f:0e:ce:61:0f:66: e0:f7:59:a9:22:3d:a8:34:fa:2a:88:d8:81:c7:4d: 39:55:b0:26:13:3e:95:4a:94:d1:31:56:51:75:dc: 0f:7a:2c:ea:96:dd:49:e7:c5:dc:1c:92:8a:dc:b2: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CE:47:A1:AB:0F:6B:91:7C:11:6E:5E:FD:44:DB:0A:CB:7E:31:61 X509v3 Authority Key Identifier: keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:53:fe:50:98:ec:ce:d6:c3:00:68:38:84:46:53:69:5c:49: 56:6c:07:2e:da:46:87:5b:ff:93:eb:26:0e:de:d4:3a:e0:55: be:75:fe:ec:81:5f:ca:99:e6:9b:02:fe:59:89:f0:f2:a1:48: 54:e8:85:14:b6:30:bb:97:03:7f:e3:4a:bb:68:8c:5d:3f:4e: ad:88:81:53:59:df:ce:7a:0e:5f:91:46:37:d6:b8:74:f5:bd: 78:0f:83:58:31:36:6d:5b:33:da:fd:4e:e4:a2:46:14:ad:0e: a8:9d:e3:8c:39:61:20:5a:35:13:2f:8c:d4:5e:e2:54:b1:fa: f0:0e:de:52:19:af:8c:4f:c7:a3:4a:59:af:18:77:cc:80:f6: fb:33:93:9b:53:93:56:f7:dd:81:07:d2:af:e3:4a:2b:49:ad: 79:ca:5e:9e:f2:8f:2f:10:d7:d1:a6:d8:59:ce:aa:bd:31:61: 92:85:62:77:70:e5:cf:31:71:50:85:c2:78:89:c6:33:86:46: 5f:ad:98:79:08:34:a8:17:20:7e:ed:3c:d4:f5:54:7d:be:ba: 2e:9f:c6:d7:0c:44:99:9a:6e:03:2c:71:00:35:a4:7a:86:52: 81:d9:16:24:55:31:be:31:5b:4d:c8:a7:1a:98:b0:2d:80:6e: 11:18:41:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsEleq6oexVLyotwk91NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YzBhYTJlOWU4MjAwZWVlNjcwMjY5NDJhMmM1MjQ4ODAy ZjMzYjgwHhcNMjYwMjA5MTIwMDU5WhcNMjYwMjEwMTIwMDU5WjAzMTEwLwYDVQQD EygxY2NlNDdhMWFiMGY2YjkxN2MxMTZlNWVmZDQ0ZGIwYWNiN2UzMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+aPw37KDMNsgrNXu6Q1/j792k8W bXvlxWnvHwCi4CJNXd0gx0E4evLCVDDQgBcrZOK6Frz/ygVT+Uh4unP897xFNE2N hH3z/FhwwmbOmNv15SpxkwTLG0VwSPd87UnHGTRPqvCny7U8Q3JrhPr0qW6CfN9A qhdvrcPzvlTMuvMntca17zv6IqX0cyRM4hG7qmnGRQ7uvcn8tTq5quEyPNJGSHTR mzbLMSaRnrdnH7bXbPMfhyFTjjSX0vaq+UNrbMltAYGdNGx0PORvDs5hD2bg91mp Ij2oNPoqiNiBx005VbAmEz6VSpTRMVZRddwPeizqlt1J58XcHJKK3LIsWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzOR6GrD2uRfBFuXv1E2wrLfjFhMB8GA1UdIwQY MBaAFEfAqi6eggDu5nAmlCosUkiALzO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMt YzY5Mjc4MjA2NGIwLzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMtYzY5Mjc4MjA2NGIw LzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFP+UJjs ztbDAGg4hEZTaVxJVmwHLtpGh1v/k+smDt7UOuBVvnX+7IFfypnmmwL+WYnw8qFI VOiFFLYwu5cDf+NKu2iMXT9OrYiBU1nfznoOX5FGN9a4dPW9eA+DWDE2bVsz2v1O 5KJGFK0OqJ3jjDlhIFo1Ey+M1F7iVLH68A7eUhmvjE/Ho0pZrxh3zID2+zOTm1OT VvfdgQfSr+NKK0mtecpenvKPLxDX0abYWc6qvTFhkoVid3DlzzFxUIXCeInGM4ZG X62YeQg0qBcgfu081PVUfb66Lp/G1wxEmZpuAyxxADWkeoZSgdkWJFUxvjFbTcin GpiwLYBuERhBUg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:30 2026 by rpki-client