This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json) Hash identifier: hDQf2z8yVlR1Yy9C4Sl9Rfpa2rxkP4UBPRUOMGhqClo= Subject key identifier: B9:35:90:E9:20:17:D9:DE:9B:E9:C8:4C:3C:13:C3:16:F4:B0:C4:86 Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537 Certificate serial: 019C4321E8F015261B510CA62F1272D99D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft Manifest number: 0A9D Signing time: Mon 09 Feb 2026 16:00:21 +0000 Manifest this update: Mon 09 Feb 2026 16:00:21 +0000 Manifest next update: Tue 10 Feb 2026 16:00:21 +0000 Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=) 2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 1vBRhdNeC+cb8riDNFgHjwO6vYwd77OcLeKUwY4hLO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e8:f0:15:26:1b:51:0c:a6:2f:12:72:d9:9d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537 Validity Not Before: Feb 9 16:00:21 2026 GMT Not After : Feb 10 16:00:21 2026 GMT Subject: CN=b93590e92017d9de9be9c84c3c13c316f4b0c486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:31:e7:45:8b:20:9a:4b:d2:5b:29:fe:03: d8:24:35:50:fb:17:f7:d6:a2:b4:34:82:0a:21:99: 85:9c:f1:10:12:de:58:77:e0:12:aa:bc:30:74:47: 06:94:98:cf:b0:fa:65:e0:73:37:69:1f:7c:8e:6a: a9:7f:34:3c:0d:47:bf:58:63:d2:17:09:99:4c:d9: c7:8a:b0:c5:1f:ed:81:96:42:51:58:6d:1a:d6:c1: 09:c8:2b:a3:93:6b:7c:3f:bb:0c:cf:bc:78:7b:5a: eb:7a:c1:a3:c3:45:36:79:1b:00:54:54:f6:b6:a1: 8e:a4:34:4d:af:09:4f:6d:46:1c:f6:1a:08:87:9a: 07:1a:10:60:b1:91:0d:9d:1e:d3:55:7f:db:db:e1: 0c:e0:76:55:7c:04:ef:7b:8a:f2:46:db:76:03:ae: 2e:1f:d5:b7:6c:0a:94:48:f9:b2:01:63:99:65:df: ff:74:e2:22:e8:17:ed:3a:a4:0b:c1:dd:32:f6:2a: 93:38:a1:af:23:d3:4b:93:6a:45:eb:3b:32:0f:75: b0:16:48:01:6c:3e:04:9c:3c:e5:5c:34:5f:c7:91: a8:1b:3c:04:43:78:99:87:da:3e:69:22:7f:e1:96: 67:41:d1:01:bd:a9:bc:78:f5:fe:60:1e:1b:ba:3a: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:35:90:E9:20:17:D9:DE:9B:E9:C8:4C:3C:13:C3:16:F4:B0:C4:86 X509v3 Authority Key Identifier: keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2b:31:64:36:8d:14:45:03:52:76:4a:f6:a1:da:38:f6:21: dc:18:d8:87:0b:30:43:2a:2d:c1:5a:28:9f:a5:a0:66:43:da: bd:65:af:7a:c3:b6:b5:5c:3a:5f:d0:ae:bd:1e:0e:ef:a9:e7: 84:51:cc:4e:7a:33:82:ff:c0:ac:74:5c:bc:f8:3a:6b:79:05: 49:6f:84:b8:09:13:c6:25:6b:c0:93:1a:85:b7:3b:b7:b9:8e: 82:ae:e1:14:2e:32:42:ba:57:45:b6:69:24:7f:59:37:e4:18: 52:b9:80:b7:53:9c:3e:48:8b:af:98:51:18:d5:31:65:27:3b: 78:06:08:2a:e7:06:cf:d9:71:ae:1c:5b:64:7c:a8:a3:bf:b0: dc:91:91:3f:b9:cd:7f:98:47:df:1b:73:1e:e2:71:3a:a9:59: 6a:c3:4c:cd:b3:eb:db:be:7a:58:2c:9d:25:cc:6e:17:73:17: 8e:92:9b:10:89:64:1b:51:ba:b5:8b:00:27:a5:43:6c:ad:bb: b9:9b:7d:a8:7a:8e:67:20:c1:85:dc:8b:3f:f9:de:bd:1a:f3: 16:62:86:a0:3f:4a:59:14:0a:cc:f4:6e:65:e0:21:43:63:56: d7:f1:5c:50:7a:eb:5b:72:90:f6:bd:c2:ce:65:15:b1:1b:8f: 0b:e0:09:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIejwFSYbUQymLxJy2Z0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk Zjc1MzcwHhcNMjYwMjA5MTYwMDIxWhcNMjYwMjEwMTYwMDIxWjAzMTEwLwYDVQQD EyhiOTM1OTBlOTIwMTdkOWRlOWJlOWM4NGMzYzEzYzMxNmY0YjBjNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmMx50WLIJpL0lsp/gPYJDVQ+xf3 1qK0NIIKIZmFnPEQEt5Yd+ASqrwwdEcGlJjPsPpl4HM3aR98jmqpfzQ8DUe/WGPS FwmZTNnHirDFH+2BlkJRWG0a1sEJyCujk2t8P7sMz7x4e1rresGjw0U2eRsAVFT2 tqGOpDRNrwlPbUYc9hoIh5oHGhBgsZENnR7TVX/b2+EM4HZVfATve4ryRtt2A64u H9W3bAqUSPmyAWOZZd//dOIi6BftOqQLwd0y9iqTOKGvI9NLk2pF6zsyD3WwFkgB bD4EnDzlXDRfx5GoGzwEQ3iZh9o+aSJ/4ZZnQdEBvam8ePX+YB4bujrlGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk1kOkgF9nem+nITDwTwxb0sMSGMB8GA1UdIwQY MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt YjlkNjY4ZjA1MWRlLzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvisxZDaN FEUDUnZK9qHaOPYh3BjYhwswQyotwVoon6WgZkPavWWvesO2tVw6X9CuvR4O76nn hFHMTnozgv/ArHRcvPg6a3kFSW+EuAkTxiVrwJMahbc7t7mOgq7hFC4yQrpXRbZp JH9ZN+QYUrmAt1OcPkiLr5hRGNUxZSc7eAYIKucGz9lxrhxbZHyoo7+w3JGRP7nN f5hH3xtzHuJxOqlZasNMzbPr2756WCydJcxuF3MXjpKbEIlkG1G6tYsAJ6VDbK27 uZt9qHqOZyDBhdyLP/nevRrzFmKGoD9KWRQKzPRuZeAhQ2NW1/FcUHrrW3KQ9r3C zmUVsRuPC+AJBA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:30:30 2026 by rpki-client