This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft File: 8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json) Hash identifier: w9yppiGxOsLyoq0rs1/DdYgNPpt6QPWztwAsQtOElms= Subject key identifier: CF:0C:27:A3:9D:31:81:F3:D5:56:2C:13:13:43:B0:81:C3:9A:BF:24 Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 Certificate issuer: /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Certificate serial: 019C1B6FC3E5916AA2F31295E9B50C980477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft Manifest number: 1234 Signing time: Sun 01 Feb 2026 23:00:35 +0000 Manifest this update: Sun 01 Feb 2026 23:00:35 +0000 Manifest next update: Mon 02 Feb 2026 23:00:35 +0000 Files and hashes: 1: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: /5BeMMSDOwPLg9WP+QXWCsCBHyhWlEHQDTIkf9/z3Ms=) 2: uYZjOh9Kgwsak2oPpAOEr0mbsfE.roa (hash: OrmjLRTXG+oegV4PdrzJj0Bu9Tz8UUlGWQ3FZMfRKHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:6f:c3:e5:91:6a:a2:f3:12:95:e9:b5:0c:98:04:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Validity Not Before: Feb 1 23:00:35 2026 GMT Not After : Feb 2 23:00:35 2026 GMT Subject: CN=cf0c27a39d3181f3d5562c131343b081c39abf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:04:6a:e1:1d:1b:76:35:0a:6c:76:f0:3f: 67:7a:8a:91:f8:94:57:8c:8b:3c:33:74:15:d0:22: f2:06:11:92:f9:93:17:1e:44:a9:c6:b9:8b:94:b0: 49:44:ca:34:f4:28:1f:98:be:59:6e:3c:b3:49:fb: 6f:34:d2:45:06:15:54:a0:8d:9f:4c:fb:ca:ca:33: ae:08:e8:62:24:24:02:0d:22:81:f1:04:14:9f:99: 31:94:44:90:a6:cb:bd:5a:b0:4b:72:33:d1:8c:96: 22:23:41:9f:c7:06:8c:47:e2:3d:b2:61:01:36:bc: 5a:a5:29:14:be:4a:6c:c9:ce:ef:3a:f4:94:ad:f0: 3f:07:53:ae:5b:92:b0:35:fc:75:08:7f:90:2d:a2: 96:a6:b2:8d:53:2e:30:6a:0a:9a:1e:27:12:c9:50: 6f:ce:df:c9:30:44:d6:d5:e2:a8:4a:06:1e:79:56: 50:6d:23:fd:00:a8:a9:1e:60:d9:8b:32:f9:1b:74: 94:a0:50:5a:18:26:5e:7c:36:75:f5:66:49:9d:f8: 36:a1:be:92:18:e2:04:bc:6c:16:a0:78:ea:84:44: 55:1c:69:99:b8:bb:75:f8:9c:d3:06:5e:52:ae:5a: 96:df:81:78:63:db:97:f3:38:bd:86:ca:20:30:35: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0C:27:A3:9D:31:81:F3:D5:56:2C:13:13:43:B0:81:C3:9A:BF:24 X509v3 Authority Key Identifier: keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:11:d0:f1:f1:12:41:ab:44:40:f2:9f:be:3f:09:9d:57:81: 55:e6:82:c6:be:f2:44:e9:7c:99:8f:63:58:b3:4a:37:f6:c4: bb:67:1d:4d:c4:53:db:a3:21:5e:3a:b9:3f:e6:b7:46:4e:2a: 31:45:cb:e5:14:a4:fb:f8:3f:5b:24:26:11:d1:9d:35:79:7f: a6:f9:17:1c:e1:99:90:84:35:07:fd:6c:7d:50:8c:5f:e9:a3: 0b:7d:f5:f4:b9:1d:c6:66:14:23:44:d3:b1:2e:5c:ba:17:c8: 4e:d9:14:75:bf:50:4e:f9:29:7d:45:fb:ad:30:e5:f9:c9:5a: 67:16:04:08:40:cd:1c:8f:ce:f5:60:f5:bb:5f:fa:52:23:03: 84:01:ef:74:f6:17:9e:9f:f4:f2:88:ae:3f:98:84:88:5a:4b: fc:29:71:cc:d6:3c:af:1c:e2:37:dc:33:0b:cc:03:d2:3d:fb: 78:e1:a0:d9:67:6c:ce:82:59:c3:93:60:cf:93:3c:1c:25:7b: fa:9f:d1:c5:42:bf:2a:0d:f3:dd:58:f4:32:a4:09:1c:07:56: de:99:be:78:14:d2:bd:8b:e4:2e:ee:67:c5:f2:c7:86:0f:8f: 93:12:ad:c0:00:6a:29:f1:a9:1d:72:eb:5c:cb:e7:31:23:9b: b4:7b:b2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbb8PlkWqi8xKV6bUMmAR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDFkNjY0Njk4YjcwZmZiMmEyNmY2ODRiNDdkZWI2Yzhk NTlhNTMwHhcNMjYwMjAxMjMwMDM1WhcNMjYwMjAyMjMwMDM1WjAzMTEwLwYDVQQD EyhjZjBjMjdhMzlkMzE4MWYzZDU1NjJjMTMxMzQzYjA4MWMzOWFiZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PsEauEdG3Y1Cmx28D9neoqR+JRX jIs8M3QV0CLyBhGS+ZMXHkSpxrmLlLBJRMo09CgfmL5ZbjyzSftvNNJFBhVUoI2f TPvKyjOuCOhiJCQCDSKB8QQUn5kxlESQpsu9WrBLcjPRjJYiI0GfxwaMR+I9smEB NrxapSkUvkpsyc7vOvSUrfA/B1OuW5KwNfx1CH+QLaKWprKNUy4wagqaHicSyVBv zt/JMETW1eKoSgYeeVZQbSP9AKipHmDZizL5G3SUoFBaGCZefDZ19WZJnfg2ob6S GOIEvGwWoHjqhERVHGmZuLt1+JzTBl5SrlqW34F4Y9uX8zi9hsogMDXbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8MJ6OdMYHz1VYsExNDsIHDmr8kMB8GA1UdIwQY MBaAFPFB1mRpi3D/sqJvaEtH3rbI1ZpTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yZThhYmUtOGU3MC00NzE1LTkxYWUt OTYzZDEzZmQwOWJiLzEvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yZThhYmUtOGU3MC00NzE1LTkxYWUtOTYzZDEzZmQwOWJi LzEvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRHQ8fES QatEQPKfvj8JnVeBVeaCxr7yROl8mY9jWLNKN/bEu2cdTcRT26MhXjq5P+a3Rk4q MUXL5RSk+/g/WyQmEdGdNXl/pvkXHOGZkIQ1B/1sfVCMX+mjC3319LkdxmYUI0TT sS5cuhfITtkUdb9QTvkpfUX7rTDl+claZxYECEDNHI/O9WD1u1/6UiMDhAHvdPYX np/08oiuP5iEiFpL/ClxzNY8rxziN9wzC8wD0j37eOGg2WdszoJZw5Ngz5M8HCV7 +p/RxUK/Kg3z3Vj0MqQJHAdW3pm+eBTSvYvkLu5nxfLHhg+PkxKtwABqKfGpHXLr XMvnMSObtHuyOg== -----END CERTIFICATE-----Generated at Mon Feb 2 04:55:41 2026 by rpki-client