This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json) Hash identifier: RHaxCE5+HqSZM1gRH5+BuT2FJMl94CQX/Wote1SGUb0= Subject key identifier: 95:46:9A:5D:84:BC:21:F7:72:3F:3D:89:0A:BC:9A:27:69:1D:79:FB Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Certificate serial: 019C42B41948AAFD32D8CC1CAE835D033E7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft Manifest number: 0CA6 Signing time: Mon 09 Feb 2026 14:00:25 +0000 Manifest this update: Mon 09 Feb 2026 14:00:25 +0000 Manifest next update: Tue 10 Feb 2026 14:00:25 +0000 Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=) 2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: tjF1eF6/OA3wJ4Kw0EeWMuIjyPFrAToHdeVwYnGqODU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:19:48:aa:fd:32:d8:cc:1c:ae:83:5d:03:3e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Validity Not Before: Feb 9 14:00:25 2026 GMT Not After : Feb 10 14:00:25 2026 GMT Subject: CN=95469a5d84bc21f7723f3d890abc9a27691d79fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:65:81:f8:7f:c0:4f:30:07:b1:2b:4f:ed: 3b:30:ae:b5:ed:84:d0:d1:25:02:85:85:c0:e3:a7: ac:5b:71:05:1d:d2:40:41:9e:8f:ff:10:fa:fa:58: c0:14:35:ec:a4:e8:db:dc:18:bd:27:b8:22:94:6a: c4:3e:28:9e:52:ae:04:b2:28:a1:fe:52:e8:50:3a: bd:51:6a:fb:90:21:68:8c:e1:61:ba:cb:5f:95:e1: 58:37:cd:90:45:63:81:44:2c:7a:ef:8f:38:18:31: 68:30:02:9d:e3:e7:e7:26:a6:c1:8b:2c:35:57:74: 46:e0:6b:94:ff:12:74:4b:c9:5e:9d:bc:76:69:37: c9:47:0f:85:ec:78:50:d5:3f:47:ca:e4:46:9a:65: c6:fe:69:59:ae:ba:a2:a9:00:6f:66:e7:ec:31:ec: 58:2e:d7:4c:24:1d:06:dc:51:86:4a:66:1d:d1:7d: b7:76:3e:c0:72:2f:b3:ea:ed:0a:54:93:07:ff:32: a9:a2:32:46:81:b6:ba:27:50:77:32:9d:34:71:55: ed:a0:6d:b8:0f:48:30:d9:40:d3:44:37:3b:89:4c: 26:2f:ee:3d:e8:ce:11:ae:28:cf:1c:c5:78:61:f1: aa:3a:77:99:d9:2c:2a:06:91:91:0a:55:34:0b:2e: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:46:9A:5D:84:BC:21:F7:72:3F:3D:89:0A:BC:9A:27:69:1D:79:FB X509v3 Authority Key Identifier: keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:72:d3:a6:15:80:fc:13:f2:72:6f:c5:dd:de:98:5b:d1:74: 90:b4:4f:8f:e8:21:de:67:eb:03:65:22:5f:30:e0:aa:60:35: 6c:25:fe:50:c4:a3:8b:dd:7b:31:16:c8:fa:d2:1e:f4:70:e6: 38:cf:fa:18:82:d5:c1:66:e5:e2:c7:22:c0:c2:d5:ad:d6:e3: 79:6d:39:dd:31:9e:55:da:78:25:b1:93:68:2a:2e:8d:42:05: 01:d9:1c:2c:2b:58:f1:4b:55:74:e4:6f:93:48:0c:62:7c:d7: b3:0c:49:25:70:b9:60:76:d2:1e:a1:fd:e6:5e:e5:5a:82:35: b6:8f:6f:bb:75:4b:35:23:fe:7a:2a:8c:c8:6d:95:e4:a2:f3: b2:4b:ea:60:61:6d:37:c8:fe:52:44:a5:9d:ba:8e:54:e8:d7: bb:03:c9:11:c5:ab:82:15:06:92:72:69:59:79:d8:18:45:35: 1f:4f:e3:5f:52:f2:f0:d5:fa:66:5b:cd:e9:6f:f7:d3:80:5d: 35:cf:85:bc:d3:bb:d9:1a:4f:4a:54:c8:d4:6d:50:77:5b:d5: f3:87:28:e2:b0:fa:9a:3e:cc:f8:b2:e2:a3:8c:cd:4c:ee:35: 43:41:46:1d:1c:2f:45:d3:4b:64:c8:88:8d:5e:3b:b6:e8:55: 6e:67:22:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBlIqv0y2MwcroNdAz56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx ZTBlODQwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD Eyg5NTQ2OWE1ZDg0YmMyMWY3NzIzZjNkODkwYWJjOWEyNzY5MWQ3OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yxlgfh/wE8wB7ErT+07MK617YTQ 0SUChYXA46esW3EFHdJAQZ6P/xD6+ljAFDXspOjb3Bi9J7gilGrEPiieUq4Esiih /lLoUDq9UWr7kCFojOFhustfleFYN82QRWOBRCx67484GDFoMAKd4+fnJqbBiyw1 V3RG4GuU/xJ0S8lenbx2aTfJRw+F7HhQ1T9HyuRGmmXG/mlZrrqiqQBvZufsMexY LtdMJB0G3FGGSmYd0X23dj7Aci+z6u0KVJMH/zKpojJGgba6J1B3Mp00cVXtoG24 D0gw2UDTRDc7iUwmL+496M4RrijPHMV4YfGqOneZ2SwqBpGRClU0Cy7I+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVGml2EvCH3cj89iQq8midpHXn7MB8GA1UdIwQY MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnLTphWA /BPycm/F3d6YW9F0kLRPj+gh3mfrA2UiXzDgqmA1bCX+UMSji917MRbI+tIe9HDm OM/6GILVwWbl4sciwMLVrdbjeW053TGeVdp4JbGTaCoujUIFAdkcLCtY8UtVdORv k0gMYnzXswxJJXC5YHbSHqH95l7lWoI1to9vu3VLNSP+eiqMyG2V5KLzskvqYGFt N8j+UkSlnbqOVOjXuwPJEcWrghUGknJpWXnYGEU1H0/jX1Ly8NX6ZlvN6W/304Bd Nc+FvNO72RpPSlTI1G1Qd1vV84co4rD6mj7M+LLio4zNTO41Q0FGHRwvRdNLZMiI jV47tuhVbmciRg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:30 2026 by rpki-client