This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json) Hash identifier: W2HGu8Wp6B7iVJYxJS4iwQQCXhDw0FS9G73DbXdmNfw= Subject key identifier: 15:CB:5E:AB:43:0E:0C:C2:9F:A1:5B:41:24:3B:71:55:9E:34:6B:8F Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84 Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384 Certificate serial: 019C42B440E9BBA9251A942C296A7E2BFB80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft Manifest number: 058E Signing time: Mon 09 Feb 2026 14:00:35 +0000 Manifest this update: Mon 09 Feb 2026 14:00:35 +0000 Manifest next update: Tue 10 Feb 2026 14:00:35 +0000 Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: ytwjEAXws7HComjhtT2VImj+k3vv3qAabWN+wxdBGJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:40:e9:bb:a9:25:1a:94:2c:29:6a:7e:2b:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384 Validity Not Before: Feb 9 14:00:35 2026 GMT Not After : Feb 10 14:00:35 2026 GMT Subject: CN=15cb5eab430e0cc29fa15b41243b71559e346b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:6c:7d:51:0a:a9:79:12:dc:18:b3:62:51: b6:24:35:15:dd:18:97:5d:84:f1:61:14:53:55:c8: 31:6c:55:20:4c:b8:16:8e:01:34:15:3e:e1:44:97: 60:60:f4:3c:f0:61:65:21:0e:17:57:53:bd:2c:aa: 5b:37:a6:6c:35:05:af:3f:a5:54:e3:31:18:c9:93: d6:c2:d1:75:8d:65:59:9b:bb:e3:5a:15:04:bf:3c: 1c:71:0b:fe:18:dd:f4:e1:de:2f:37:26:ef:88:55: 91:4e:83:5f:65:09:e7:5e:b8:5c:2b:fe:6a:49:3a: 85:35:64:db:d1:6b:51:58:11:15:9e:3f:e9:c5:6a: fe:a9:32:e5:4d:7a:50:70:8b:85:ac:16:eb:a4:bb: 57:50:58:d5:41:eb:b5:3c:13:64:a8:41:48:74:33: 6c:a1:93:c5:8a:ef:9f:7c:da:36:06:84:48:3a:2c: 64:eb:d4:95:48:da:de:d4:3d:fc:fc:a5:57:94:f7: c5:fb:5f:c4:c1:93:66:8b:be:1c:10:3e:cb:df:24: a5:90:08:e2:d6:9c:95:16:d2:43:9b:8a:fe:6e:e9: 7c:1e:4b:ff:66:14:85:e1:dd:f3:5f:a9:8b:de:7c: 7e:67:de:4a:e8:c9:ea:40:a3:91:48:9a:6c:08:92: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CB:5E:AB:43:0E:0C:C2:9F:A1:5B:41:24:3B:71:55:9E:34:6B:8F X509v3 Authority Key Identifier: keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b3:b4:66:29:fd:51:9a:fa:fa:ec:b6:f9:dc:69:ca:de:8a: 24:ee:4c:36:b7:4c:0b:55:d7:7e:9f:eb:f1:76:f2:45:bf:f4: 3a:c3:46:e0:71:20:75:32:ed:1d:c9:52:fa:2f:1c:3c:ae:38: 7f:5b:7c:d4:03:90:92:30:c6:a3:ef:7e:a6:3e:f4:ad:db:68: 36:25:a1:2c:5c:33:e4:8e:c2:c7:7a:2c:8a:e8:d4:4d:2e:b9: 58:c8:f4:68:af:33:7c:3f:d4:e7:22:c4:88:57:62:f6:65:17: 44:81:79:29:8b:ad:57:b4:60:25:6b:06:1c:dd:09:ae:72:35: fa:a4:e2:13:46:05:e9:be:ec:d2:e9:e3:da:40:89:4d:24:ce: da:63:7c:c8:17:f0:5d:20:dc:03:f0:56:f9:c8:c6:42:fa:80: d1:66:4f:ec:0a:f8:04:01:93:79:7b:c4:2a:ac:59:b0:78:37: 9c:b7:ef:03:c6:9f:43:58:e5:55:d7:56:f7:39:53:81:fe:63: dc:b9:3c:7b:c0:7f:c4:80:06:36:4a:b5:45:f8:3d:9f:6a:bc: af:96:e4:23:bb:b4:60:fc:5b:e7:06:73:a7:87:36:31:0b:64: d4:77:04:15:27:47:36:f3:81:1a:c5:f5:c3:01:7e:c0:60:4d: 5b:ea:e4:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEDpu6klGpQsKWp+K/uAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWYyMDZmZTMwODVkOTk0M2NiNmEwNjNkYzk3ZTBkZWI3 ZjQzODQwHhcNMjYwMjA5MTQwMDM1WhcNMjYwMjEwMTQwMDM1WjAzMTEwLwYDVQQD EygxNWNiNWVhYjQzMGUwY2MyOWZhMTViNDEyNDNiNzE1NTllMzQ2YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIRsfVEKqXkS3BizYlG2JDUV3RiX XYTxYRRTVcgxbFUgTLgWjgE0FT7hRJdgYPQ88GFlIQ4XV1O9LKpbN6ZsNQWvP6VU 4zEYyZPWwtF1jWVZm7vjWhUEvzwccQv+GN304d4vNybviFWRToNfZQnnXrhcK/5q STqFNWTb0WtRWBEVnj/pxWr+qTLlTXpQcIuFrBbrpLtXUFjVQeu1PBNkqEFIdDNs oZPFiu+ffNo2BoRIOixk69SVSNre1D38/KVXlPfF+1/EwZNmi74cED7L3ySlkAji 1pyVFtJDm4r+bul8Hkv/ZhSF4d3zX6mL3nx+Z95K6MnqQKORSJpsCJK5oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXLXqtDDgzCn6FbQSQ7cVWeNGuPMB8GA1UdIwQY MBaAFETvIG/jCF2ZQ8tqBj3Jfg3rf0OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQt ZmJkNTBjZDg4ZWM0LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQtZmJkNTBjZDg4ZWM0 LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLO0Zin9 UZr6+uy2+dxpyt6KJO5MNrdMC1XXfp/r8XbyRb/0OsNG4HEgdTLtHclS+i8cPK44 f1t81AOQkjDGo+9+pj70rdtoNiWhLFwz5I7Cx3osiujUTS65WMj0aK8zfD/U5yLE iFdi9mUXRIF5KYutV7RgJWsGHN0JrnI1+qTiE0YF6b7s0unj2kCJTSTO2mN8yBfw XSDcA/BW+cjGQvqA0WZP7Ar4BAGTeXvEKqxZsHg3nLfvA8afQ1jlVddW9zlTgf5j 3Lk8e8B/xIAGNkq1Rfg9n2q8r5bkI7u0YPxb5wZzp4c2MQtk1HcEFSdHNvOBGsX1 wwF+wGBNW+rklQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:18 2026 by rpki-client