This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json) Hash identifier: wWgoJ8mj/eiNx1jmCOKXlS2FTl3KgwKX9kIJFcjEKi0= Subject key identifier: 21:B9:15:2F:B2:4A:D5:A2:34:6E:09:D5:D8:1B:BD:CC:32:03:41:A0 Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Certificate serial: 019C41A1719A70A43317879A0797AF1FB0DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft Manifest number: 0F4A Signing time: Mon 09 Feb 2026 09:00:25 +0000 Manifest this update: Mon 09 Feb 2026 09:00:25 +0000 Manifest next update: Tue 10 Feb 2026 09:00:25 +0000 Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=) 2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: 0wqTlgERl5FDyfjDg4oG9fTLUO3B9G3vrxYnAQP/lKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:71:9a:70:a4:33:17:87:9a:07:97:af:1f:b0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Validity Not Before: Feb 9 09:00:25 2026 GMT Not After : Feb 10 09:00:25 2026 GMT Subject: CN=21b9152fb24ad5a2346e09d5d81bbdcc320341a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:5c:22:a5:cb:20:7e:e6:74:00:39:cc:c8: 46:75:f8:c5:c3:b8:86:af:c2:25:3a:c1:f7:7b:f8: 06:fa:57:4c:aa:c6:44:b1:04:81:b4:8c:ec:cb:4c: 72:a8:ab:ee:99:8e:c3:52:ab:c0:17:de:76:1c:c9: b7:43:06:e0:c3:6e:7f:38:fa:bc:14:27:33:1a:c5: b0:4f:d6:56:fb:2f:4f:56:6f:47:26:3b:14:83:a0: 72:d1:23:00:f8:d1:e0:9f:6f:9c:ad:49:b9:e0:e8: 70:54:75:b8:6e:47:cb:89:b3:8e:4c:b8:29:84:d2: c8:31:4c:88:78:a0:ed:ae:b2:b8:09:c4:76:b4:39: 1d:55:7d:8d:68:ed:a0:4e:09:7c:23:9a:05:da:5a: 7b:05:2a:19:c0:b5:4c:0c:8d:0c:ed:04:3e:86:b9: cc:4d:e6:8b:b0:33:35:cc:8c:ae:41:99:55:06:d8: de:c7:92:d8:13:94:8b:8c:75:28:cf:62:13:b2:58: 3b:2e:8e:20:38:ec:35:de:d4:9d:cf:a3:12:cd:ce: 61:90:37:d3:9f:c2:4c:a9:4f:5c:79:f2:d8:dc:77: 4f:fa:b7:de:60:80:68:63:9e:e4:8a:55:03:70:f1: 1f:15:57:8a:ae:62:f6:a3:a9:58:e5:c6:09:da:f9: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:15:2F:B2:4A:D5:A2:34:6E:09:D5:D8:1B:BD:CC:32:03:41:A0 X509v3 Authority Key Identifier: keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:09:11:4e:42:dc:cd:44:a9:64:a3:95:9a:ed:ff:f8:bd:b4: ce:43:d7:b9:59:98:42:ab:7e:1a:b3:cd:b8:92:86:f1:6b:c6: 95:c6:91:de:12:dd:c3:87:6b:6a:ee:bb:66:0e:78:bf:f8:a4: 18:7a:29:21:bd:88:ef:84:08:b8:3b:fd:99:32:fc:43:f5:9c: 7b:78:cd:79:d1:34:75:fe:35:1c:e5:69:b4:d8:7f:0c:b4:ff: b6:62:2c:bf:7a:22:1d:16:c6:83:1f:f7:68:8f:15:74:b3:4a: c4:0a:b0:0c:9b:3a:77:bc:e2:7b:6d:46:76:3a:12:e4:d2:b5: 83:67:cd:65:92:1d:5a:39:c1:c7:81:73:10:35:76:f4:7d:0f: 5a:8c:cc:2f:2f:7a:09:5f:f4:e4:f0:11:e6:41:79:c1:3d:ec: 40:cb:e9:e3:2d:c3:bb:5e:17:12:ea:47:5f:87:68:a8:45:cf: 38:40:78:c9:b0:dc:1a:63:8a:cd:14:3c:78:47:51:0e:8b:f0: 9b:97:a2:40:6e:2d:e9:b0:07:59:33:5a:c4:f5:71:6a:08:fc: c5:2c:0b:6a:fd:fb:95:98:72:7e:12:c0:65:64:21:b0:3d:0b: 23:34:f8:f9:00:d5:ee:e7:8a:22:65:a6:a6:84:6f:14:22:df: d7:33:89:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXGacKQzF4eaB5evH7DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi NmI3ZjMwHhcNMjYwMjA5MDkwMDI1WhcNMjYwMjEwMDkwMDI1WjAzMTEwLwYDVQQD EygyMWI5MTUyZmIyNGFkNWEyMzQ2ZTA5ZDVkODFiYmRjYzMyMDM0MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN9cIqXLIH7mdAA5zMhGdfjFw7iG r8IlOsH3e/gG+ldMqsZEsQSBtIzsy0xyqKvumY7DUqvAF952HMm3Qwbgw25/OPq8 FCczGsWwT9ZW+y9PVm9HJjsUg6By0SMA+NHgn2+crUm54OhwVHW4bkfLibOOTLgp hNLIMUyIeKDtrrK4CcR2tDkdVX2NaO2gTgl8I5oF2lp7BSoZwLVMDI0M7QQ+hrnM TeaLsDM1zIyuQZlVBtjex5LYE5SLjHUoz2ITslg7Lo4gOOw13tSdz6MSzc5hkDfT n8JMqU9cefLY3HdP+rfeYIBoY57kilUDcPEfFVeKrmL2o6lY5cYJ2vl8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG5FS+yStWiNG4J1dgbvcwyA0GgMB8GA1UdIwQY MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAkRTkLc zUSpZKOVmu3/+L20zkPXuVmYQqt+GrPNuJKG8WvGlcaR3hLdw4drau67Zg54v/ik GHopIb2I74QIuDv9mTL8Q/Wce3jNedE0df41HOVptNh/DLT/tmIsv3oiHRbGgx/3 aI8VdLNKxAqwDJs6d7zie21GdjoS5NK1g2fNZZIdWjnBx4FzEDV29H0PWozMLy96 CV/05PAR5kF5wT3sQMvp4y3Du14XEupHX4doqEXPOEB4ybDcGmOKzRQ8eEdRDovw m5eiQG4t6bAHWTNaxPVxagj8xSwLav37lZhyfhLAZWQhsD0LIzT4+QDV7ueKImWm poRvFCLf1zOJ3g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:58 2026 by rpki-client