This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json) Hash identifier: C6t/fY1FquNw+ajs5Yvv8XVU17t83wRTtqTTdfpflH0= Subject key identifier: 33:17:59:87:84:B0:26:B5:55:41:41:BA:5C:50:FD:8F:5D:80:69:28 Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Certificate serial: 019C44A2E39A5B4551F9261AE5E4ABBB80A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft Manifest number: 0BC4 Signing time: Mon 09 Feb 2026 23:00:51 +0000 Manifest this update: Mon 09 Feb 2026 23:00:51 +0000 Manifest next update: Tue 10 Feb 2026 23:00:51 +0000 Files and hashes: 1: UJVP39MP0a98z-vs1ITaLznv-Ng.roa (hash: VF6p8kiAtBBS2svfl/i9xWe417imO3ZaV515/+Pjex8=) 2: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: fbk9WKyiJlirXPE2I324xsGivRCSLtmp706xB9B+N4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:e3:9a:5b:45:51:f9:26:1a:e5:e4:ab:bb:80:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Validity Not Before: Feb 9 23:00:51 2026 GMT Not After : Feb 10 23:00:51 2026 GMT Subject: CN=3317598784b026b5554141ba5c50fd8f5d806928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ec:48:bd:24:23:f4:1d:a7:ea:24:fe:b1:28: fe:3f:a5:0e:c2:32:2d:62:0f:2c:40:c6:10:ae:0f: fb:f9:29:6b:c9:a2:59:77:9e:4d:f9:94:c2:f2:0d: c5:34:ba:16:78:ea:f1:f1:b7:79:81:93:53:8d:94: e1:d0:dc:c5:d7:5c:e9:2a:5b:33:2b:df:6c:1f:49: c2:b9:00:66:ff:6e:e6:b6:a8:26:1a:a4:90:ce:19: eb:69:50:8b:c1:fa:0b:bd:3e:b1:dc:ce:3b:d7:31: ef:70:7f:c7:b7:09:8d:f1:3a:d8:23:69:d0:07:dc: 60:8e:12:b0:f2:11:53:74:8e:1e:f3:25:0b:9b:95: e7:c7:8d:83:00:91:68:a1:55:a3:99:26:62:7d:e2: c1:b9:37:e1:ba:2a:a1:dd:14:a3:8e:df:32:4a:e3: bb:8e:f6:b4:51:e2:c9:36:b7:78:7e:2f:4a:e6:60: 65:6a:92:a4:9a:f5:d1:14:20:fa:a7:c0:a0:9f:93: 1f:10:29:00:1c:c0:67:30:20:42:d8:bf:2d:a4:df: 68:8d:55:03:bc:75:5a:33:78:0c:d3:f4:69:42:4c: 9d:19:e8:21:6e:b3:ec:a3:40:a8:dd:f7:6c:e7:ee: db:5f:79:a5:ee:c4:e8:1f:c2:b5:e6:86:7a:34:31: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:17:59:87:84:B0:26:B5:55:41:41:BA:5C:50:FD:8F:5D:80:69:28 X509v3 Authority Key Identifier: keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e4:4f:dc:31:27:d9:3d:e0:b9:9e:d7:ce:b5:6d:0a:5a:6e: 2f:9b:50:4a:07:b2:67:82:df:1c:b8:ea:f4:3e:4e:8e:fa:25: 01:b5:89:32:65:9b:95:70:1a:7d:05:2b:f7:37:d5:c9:0f:91: 1f:8c:5c:9c:ba:79:3e:f1:cc:28:f5:c1:4d:27:a5:30:2d:47: fb:3c:cb:71:2e:8a:5e:d0:fa:4d:c8:db:ce:d3:44:fb:42:32: af:90:5b:08:b9:2b:ee:e4:7a:19:78:70:33:5d:76:04:73:c4: 4c:55:18:3b:27:b3:27:66:68:28:25:e4:ad:ca:4e:5c:40:0c: bd:80:e4:8b:27:21:12:be:96:04:14:a1:68:8b:61:e8:3d:23: fb:fe:91:0d:fe:30:95:64:62:0a:62:73:a8:df:b5:03:5a:2e: fb:32:9e:ce:2e:a5:f8:b6:10:b7:d3:52:3e:d9:00:7a:ea:a9: 93:8e:73:6e:71:23:d8:07:63:be:86:05:e2:db:3f:e3:d4:11: 37:cd:cb:8d:5c:1f:19:a8:f0:c9:21:b9:1c:1c:9f:61:20:65: 8d:e1:13:75:7d:41:25:e4:90:c3:92:d7:a8:2f:bc:4e:0c:68: 92:bd:8f:c8:49:8d:46:ab:44:de:d3:bd:5c:18:7c:53:7e:0b: 32:0b:e7:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEouOaW0VR+SYa5eSru4CjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm NWRlOWQwHhcNMjYwMjA5MjMwMDUxWhcNMjYwMjEwMjMwMDUxWjAzMTEwLwYDVQQD EygzMzE3NTk4Nzg0YjAyNmI1NTU0MTQxYmE1YzUwZmQ4ZjVkODA2OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9exIvSQj9B2n6iT+sSj+P6UOwjIt Yg8sQMYQrg/7+SlryaJZd55N+ZTC8g3FNLoWeOrx8bd5gZNTjZTh0NzF11zpKlsz K99sH0nCuQBm/27mtqgmGqSQzhnraVCLwfoLvT6x3M471zHvcH/HtwmN8TrYI2nQ B9xgjhKw8hFTdI4e8yULm5Xnx42DAJFooVWjmSZifeLBuTfhuiqh3RSjjt8ySuO7 jva0UeLJNrd4fi9K5mBlapKkmvXRFCD6p8Cgn5MfECkAHMBnMCBC2L8tpN9ojVUD vHVaM3gM0/RpQkydGeghbrPso0Co3fds5+7bX3ml7sToH8K15oZ6NDHYaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMXWYeEsCa1VUFBulxQ/Y9dgGkoMB8GA1UdIwQY MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOORP3DEn 2T3guZ7XzrVtClpuL5tQSgeyZ4LfHLjq9D5OjvolAbWJMmWblXAafQUr9zfVyQ+R H4xcnLp5PvHMKPXBTSelMC1H+zzLcS6KXtD6TcjbztNE+0Iyr5BbCLkr7uR6GXhw M112BHPETFUYOyezJ2ZoKCXkrcpOXEAMvYDkiychEr6WBBShaIth6D0j+/6RDf4w lWRiCmJzqN+1A1ou+zKezi6l+LYQt9NSPtkAeuqpk45zbnEj2AdjvoYF4ts/49QR N83LjVwfGajwySG5HByfYSBljeETdX1BJeSQw5LXqC+8Tgxokr2PyEmNRqtE3tO9 XBh8U34LMgvnTA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:47 2026 by rpki-client