This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json) Hash identifier: C2d9vrjLn9GqBsKSdrj2qjbAG/ON8mdvONIFvV39qcc= Subject key identifier: F5:D0:67:1F:4E:E0:43:6E:39:77:11:F8:ED:65:E9:F6:6C:76:F8:5A Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b Certificate serial: 019C43224777A25DCC4938D6C42F714B22DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft Manifest number: 0C34 Signing time: Mon 09 Feb 2026 16:00:45 +0000 Manifest this update: Mon 09 Feb 2026 16:00:45 +0000 Manifest next update: Tue 10 Feb 2026 16:00:45 +0000 Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: 2jhZg8OG5Xr2wsoAhg568PeeD+2PCdSoKdNn8tt2xgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:47:77:a2:5d:cc:49:38:d6:c4:2f:71:4b:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b Validity Not Before: Feb 9 16:00:45 2026 GMT Not After : Feb 10 16:00:45 2026 GMT Subject: CN=f5d0671f4ee0436e397711f8ed65e9f66c76f85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:77:0b:c6:2a:5d:05:8b:4a:70:f4:c9:aa: 46:88:b8:7a:79:0e:3b:bb:da:a6:cc:0c:90:1c:b7: d9:e7:b5:c4:56:e1:ee:0b:37:ce:a8:5b:8f:fe:a8: db:8d:33:bc:ed:91:cc:09:85:c4:6a:75:17:51:d7: 1d:80:58:f3:93:6c:52:40:f8:18:fc:a5:18:77:df: 16:03:c1:df:ea:43:3b:12:51:81:8b:12:1f:5b:ee: 98:a0:cb:aa:a0:ea:2f:d2:ce:e8:f4:5f:8d:f1:a2: 91:7e:22:91:45:8d:30:08:49:3b:23:26:6f:93:be: 81:5b:d5:a0:28:91:78:b3:c2:85:6a:a1:44:42:f1: 74:41:94:96:84:8a:d9:b5:d6:1a:2a:44:d9:84:7f: 91:c0:21:90:38:89:cf:d1:07:c5:28:3d:a8:bd:e0: a2:bf:65:18:6d:e8:9f:18:b6:04:8a:65:ce:ee:3d: 02:8a:a7:7e:62:cb:d7:93:21:e8:57:2c:3f:e1:5e: c5:9e:a5:a4:5e:56:b0:4a:cc:21:c5:74:dd:c3:95: 9a:92:e0:80:a0:bd:ff:e2:e2:0d:21:1b:a7:d2:ef: 11:e8:7d:8b:50:71:be:01:b8:cb:9a:aa:42:9d:30: 61:01:d4:cb:70:58:7d:74:56:05:5f:cd:d8:b4:c5: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D0:67:1F:4E:E0:43:6E:39:77:11:F8:ED:65:E9:F6:6C:76:F8:5A X509v3 Authority Key Identifier: keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:68:93:50:28:59:fc:32:df:21:14:e7:a2:c3:57:c4:1b:88: 8a:75:60:42:60:5d:69:16:92:7d:c4:f4:18:01:51:a0:44:7f: 8a:7d:11:ea:37:64:c5:80:f2:11:ef:71:23:8a:94:9f:d9:46: 7b:0d:35:06:13:35:b5:bb:a1:bb:a1:e5:7b:6d:0c:c8:82:2f: 94:6f:36:04:d6:ee:8e:2a:f0:e8:9f:50:a3:b7:4f:d1:d9:31: 7e:b8:96:39:9d:5e:11:c3:c6:44:92:35:1b:0f:72:a8:ab:0a: 12:97:f6:f8:76:2c:7c:4d:f0:16:f6:1c:f6:2d:2a:3f:8a:9f: 48:f0:77:8a:6a:84:e3:b3:12:d5:fb:96:62:38:83:13:7a:1b: a7:95:d2:ae:4d:47:07:df:cf:3b:6a:db:76:e0:c5:9b:58:8c: 1d:8b:c8:e5:e7:ae:2c:04:b4:e9:c5:25:f9:5f:0b:3a:c1:e6: 5b:79:32:c9:7d:cd:e8:a7:d5:23:dd:8f:56:13:2d:43:47:c0: 97:69:f5:ce:af:fc:b9:0a:2d:92:69:65:26:bd:e4:81:9c:f9: 51:f9:38:68:7e:60:0d:17:b2:3f:d2:01:4c:14:ef:75:8e:e4: 9c:35:20:17:b1:34:2d:b4:07:d2:ce:b3:95:b7:a7:e4:fd:72: 57:bd:12:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkd3ol3MSTjWxC9xSyLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzgxZDhlNDI2N2QyZDQ1ZWI2NTI1MGEyYTQ4MjUwYjVm YjUyNWIwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD EyhmNWQwNjcxZjRlZTA0MzZlMzk3NzExZjhlZDY1ZTlmNjZjNzZmODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMZ3C8YqXQWLSnD0yapGiLh6eQ47 u9qmzAyQHLfZ57XEVuHuCzfOqFuP/qjbjTO87ZHMCYXEanUXUdcdgFjzk2xSQPgY /KUYd98WA8Hf6kM7ElGBixIfW+6YoMuqoOov0s7o9F+N8aKRfiKRRY0wCEk7IyZv k76BW9WgKJF4s8KFaqFEQvF0QZSWhIrZtdYaKkTZhH+RwCGQOInP0QfFKD2oveCi v2UYbeifGLYEimXO7j0Ciqd+YsvXkyHoVyw/4V7FnqWkXlawSswhxXTdw5WakuCA oL3/4uINIRun0u8R6H2LUHG+AbjLmqpCnTBhAdTLcFh9dFYFX83YtMVMVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXQZx9O4ENuOXcR+O1l6fZsdvhaMB8GA1UdIwQY MBaAFPHIHY5CZ9LUXrZSUKKkglC1+1JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lYmFiNDctNjA5MS00YjE0LTgwMDgt MzYyYmI1NDQ2MDg1LzEvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lYmFiNDctNjA5MS00YjE0LTgwMDgtMzYyYmI1NDQ2MDg1 LzEvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz2iTUChZ /DLfIRTnosNXxBuIinVgQmBdaRaSfcT0GAFRoER/in0R6jdkxYDyEe9xI4qUn9lG ew01BhM1tbuhu6Hle20MyIIvlG82BNbujirw6J9Qo7dP0dkxfriWOZ1eEcPGRJI1 Gw9yqKsKEpf2+HYsfE3wFvYc9i0qP4qfSPB3imqE47MS1fuWYjiDE3obp5XSrk1H B9/PO2rbduDFm1iMHYvI5eeuLAS06cUl+V8LOsHmW3kyyX3N6KfVI92PVhMtQ0fA l2n1zq/8uQotkmllJr3kgZz5Ufk4aH5gDReyP9IBTBTvdY7knDUgF7E0LbQH0s6z lben5P1yV70SPQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:39:38 2026 by rpki-client