This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json) Hash identifier: J7zRB1Bw4apfB18HlCgSDj0e9nG+e3+LqzhTKSpwpXw= Subject key identifier: F6:5B:0C:03:B0:D7:66:01:F7:C1:3D:64:36:8D:8B:48:C7:30:8A:4C Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Certificate serial: 019C1B38F6A78DD92F47DF8A5C68F9E46ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft Manifest number: 17FB Signing time: Sun 01 Feb 2026 22:00:43 +0000 Manifest this update: Sun 01 Feb 2026 22:00:43 +0000 Manifest next update: Mon 02 Feb 2026 22:00:43 +0000 Files and hashes: 1: 2SUVJ80PsPV5Sm7U3L8hHtyTcHk.roa (hash: KC9QuJ44Bvhyw7hXPqUGMgqZJZPJd+t4xVPwghxLews=) 2: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: W73mCsKbZsbRIIZY2PaW0CIJK6uDFDMnmMXCt4brclA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:38:f6:a7:8d:d9:2f:47:df:8a:5c:68:f9:e4:6a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Validity Not Before: Feb 1 22:00:43 2026 GMT Not After : Feb 2 22:00:43 2026 GMT Subject: CN=f65b0c03b0d76601f7c13d64368d8b48c7308a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:29:ce:6d:34:56:b2:35:8e:2f:81:ed:ce: 18:47:8b:66:c0:05:18:f7:c4:82:66:e9:2c:41:ee: 25:bb:5c:d9:70:9a:3e:8e:42:92:72:df:c8:71:b2: bc:fa:4c:96:57:ad:fb:bd:f4:91:56:7a:0d:dc:10: 17:f1:5b:55:e5:c9:5d:e8:c3:1d:93:f8:35:c7:06: fa:06:23:2c:ba:9e:b7:e8:d8:c8:18:27:da:f4:3b: 5a:39:94:59:68:80:43:b6:0a:48:a9:cb:d5:bf:2b: a4:6c:d7:1f:e7:d6:e2:1e:d6:37:7a:79:f9:b2:2d: d3:16:0b:ff:91:c4:13:24:1c:ff:01:29:bb:a6:92: 75:4d:c5:e6:eb:7b:a9:9e:86:3a:d9:22:0f:23:1f: 6f:34:7a:64:7d:40:1d:ab:ab:cb:19:b4:c7:47:52: 88:b6:84:ae:31:3a:3d:63:8a:62:a2:7e:5a:f5:48: 83:cc:39:a3:37:f7:04:96:e5:e0:5c:28:fc:76:41: de:4d:ca:df:66:d4:65:20:c9:a9:1d:4d:18:42:5b: df:3f:86:e9:34:65:fd:82:5e:a9:7f:c8:6b:a4:cf: e7:d8:a4:5b:5f:a8:58:86:77:b6:bc:04:f0:fc:44: 9b:2c:77:c4:2d:f0:43:7e:40:cd:3a:b8:00:73:4f: 23:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:0C:03:B0:D7:66:01:F7:C1:3D:64:36:8D:8B:48:C7:30:8A:4C X509v3 Authority Key Identifier: keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:47:48:3f:14:f1:56:5c:ce:a9:89:30:ba:22:3c:7f:63:60: 70:d9:f9:d0:4b:23:bb:76:71:95:2c:29:79:2b:e6:2d:cf:4e: a1:31:05:9f:30:85:56:67:61:d2:9b:6c:c1:87:c3:b8:a8:41: 59:03:c0:81:01:53:96:6d:b6:31:9a:54:11:17:f7:38:3a:3e: f3:16:38:51:b9:aa:91:74:8b:5e:ae:ba:34:fa:52:ed:92:33: e2:1b:55:39:05:20:0e:5f:89:11:bd:4c:15:d8:9d:7e:45:29: 72:da:2a:91:55:c1:79:c9:0d:e5:f5:ea:f5:b6:67:db:d6:b2: c1:ca:a9:94:f4:d2:cd:31:9a:32:55:72:50:ff:75:84:00:b5: 84:41:e0:18:93:aa:d1:5c:c9:d4:d4:28:99:57:8e:93:a0:79: 00:74:48:0b:de:e2:bb:7e:67:59:bf:22:7a:e6:d2:a2:94:7a: d9:41:68:65:cd:4b:e1:c5:ac:b1:aa:15:45:f7:90:f2:cc:8b: a5:33:79:65:be:c1:5c:46:89:b7:d2:60:94:4b:b5:7e:ba:71: 6a:55:c0:78:39:ef:f1:bd:65:2f:95:11:ed:e2:a3:8a:ed:10: d3:05:83:7d:e1:8d:39:14:40:67:56:ef:ef:d5:e3:17:42:84: d7:cf:2a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbOPanjdkvR9+KXGj55GrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZGU4ZWJkZGQwODQxNjNhOTBiOWFlNTAzOTdiMmRiNDlj YjE3YWQwHhcNMjYwMjAxMjIwMDQzWhcNMjYwMjAyMjIwMDQzWjAzMTEwLwYDVQQD EyhmNjViMGMwM2IwZDc2NjAxZjdjMTNkNjQzNjhkOGI0OGM3MzA4YTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQIpzm00VrI1ji+B7c4YR4tmwAUY 98SCZuksQe4lu1zZcJo+jkKSct/IcbK8+kyWV637vfSRVnoN3BAX8VtV5cld6MMd k/g1xwb6BiMsup636NjIGCfa9DtaOZRZaIBDtgpIqcvVvyukbNcf59biHtY3enn5 si3TFgv/kcQTJBz/ASm7ppJ1TcXm63upnoY62SIPIx9vNHpkfUAdq6vLGbTHR1KI toSuMTo9Y4pion5a9UiDzDmjN/cEluXgXCj8dkHeTcrfZtRlIMmpHU0YQlvfP4bp NGX9gl6pf8hrpM/n2KRbX6hYhne2vATw/ESbLHfELfBDfkDNOrgAc08jQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZbDAOw12YB98E9ZDaNi0jHMIpMMB8GA1UdIwQY MBaAFPLejr3dCEFjqQua5QOXsttJyxetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGIt YWYxYWMwZjAwNDE3LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGItYWYxYWMwZjAwNDE3 LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUdIPxTx VlzOqYkwuiI8f2NgcNn50Esju3ZxlSwpeSvmLc9OoTEFnzCFVmdh0ptswYfDuKhB WQPAgQFTlm22MZpUERf3ODo+8xY4UbmqkXSLXq66NPpS7ZIz4htVOQUgDl+JEb1M FdidfkUpctoqkVXBeckN5fXq9bZn29aywcqplPTSzTGaMlVyUP91hAC1hEHgGJOq 0VzJ1NQomVeOk6B5AHRIC97iu35nWb8ieubSopR62UFoZc1L4cWssaoVRfeQ8syL pTN5Zb7BXEaJt9JglEu1frpxalXAeDnv8b1lL5UR7eKjiu0Q0wWDfeGNORRAZ1bv 79XjF0KE188qZw== -----END CERTIFICATE-----Generated at Mon Feb 2 05:02:52 2026 by rpki-client