This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json) Hash identifier: ZoaWnlkQWPf7MGtAIYJpyyncreemKTxfE7q9fKdel60= Subject key identifier: BD:47:D0:8C:EF:F5:AA:57:86:C7:2A:BB:B2:07:D4:99:94:63:E5:7E Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Certificate serial: 019C43592282DF0D7B77E0FD6947784F917C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:40 +0000 Manifest this update: Mon 09 Feb 2026 17:00:40 +0000 Manifest next update: Tue 10 Feb 2026 17:00:40 +0000 Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=) 2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: ZzC7ybKBmYVCPUXL2eublZsecGgvruStfAUFu5jilyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:22:82:df:0d:7b:77:e0:fd:69:47:78:4f:91:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Validity Not Before: Feb 9 17:00:40 2026 GMT Not After : Feb 10 17:00:40 2026 GMT Subject: CN=bd47d08ceff5aa5786c72abbb207d4999463e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:f8:c4:eb:50:5b:62:31:29:72:51:2f:39: 4d:2b:02:fa:e7:f1:d1:f5:1e:0e:bd:7c:92:da:0a: 46:ca:e3:ab:7d:83:cb:42:38:bb:68:d4:65:1b:d9: 07:e6:a9:85:57:11:07:12:5f:36:a9:34:ca:22:5e: f6:74:1a:0e:5e:c8:de:56:3e:b1:87:1e:e3:8a:e0: 78:72:35:8c:bc:30:db:4c:41:de:98:66:57:2e:57: 16:1f:9e:91:0f:db:80:a8:dd:1b:61:f8:43:8e:b0: 44:91:4c:06:49:9f:ce:c3:66:42:b7:16:80:e3:34: 3e:ac:4d:d2:8e:ad:75:15:f1:d9:4e:27:07:77:68: 0d:50:cf:4b:15:a2:bf:b2:8c:42:c2:1e:76:44:07: cf:a6:09:41:2d:86:98:29:77:6d:00:71:cb:c5:85: bb:64:cc:37:44:50:dc:13:10:b0:b6:5e:7e:b0:f2: b2:dd:e3:71:3b:f2:fa:41:bb:b5:5c:87:91:59:6a: 65:50:bb:c8:95:9f:09:02:e0:7e:4a:82:83:a7:1c: 5e:d3:ef:69:85:00:a0:a6:b6:b2:41:74:a2:b7:41: 8a:14:53:60:44:f3:da:32:05:d7:05:bd:3f:9b:95: 34:4a:fd:23:c2:1c:5b:b3:a3:37:83:9a:f9:79:7e: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:D0:8C:EF:F5:AA:57:86:C7:2A:BB:B2:07:D4:99:94:63:E5:7E X509v3 Authority Key Identifier: keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:79:30:2f:3b:6f:8f:47:18:f3:ce:20:d5:5f:a1:8a:a3: 4a:09:c9:fa:3c:67:1f:a4:04:67:cb:ef:35:62:43:ed:35:39: 07:a0:36:7a:6a:6f:27:df:67:a2:13:30:a9:f7:7f:12:e1:b2: 8d:be:98:bf:cf:d5:52:e6:3c:ff:43:4a:0f:53:c0:ab:3f:a5: de:9d:a0:35:b5:a2:03:7b:a5:f9:18:e7:92:2d:46:72:ef:53: 5b:e6:d4:11:74:72:e2:36:8f:49:48:40:1f:78:06:05:a2:9e: a6:92:78:25:c2:ed:60:11:a9:9f:4a:1c:50:dd:51:d7:b6:d5: 3e:fb:56:d0:e2:5b:3f:bd:2f:53:95:c9:e9:00:8e:a2:ce:f5: 97:86:c6:2c:d8:99:f9:65:b0:88:26:6c:f8:1b:88:5f:8e:18: 1c:56:85:21:3c:74:c4:21:57:3b:1e:52:05:e1:a4:0d:89:ae: 27:32:41:03:b9:5a:aa:f9:9b:b8:12:74:87:44:6f:60:cb:2f: 16:d2:59:c6:c9:b6:18:fb:99:1f:72:d4:c5:d5:f6:97:ca:42: e4:55:36:80:ac:81:6d:c6:cf:ef:54:82:b3:b2:91:52:27:db: 0a:75:67:dc:24:de:24:31:2b:db:a7:5c:70:17:43:5b:3f:22: 2b:c1:8d:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSKC3w17d+D9aUd4T5F8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh YWI2OWEwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD EyhiZDQ3ZDA4Y2VmZjVhYTU3ODZjNzJhYmJiMjA3ZDQ5OTk0NjNlNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr874xOtQW2IxKXJRLzlNKwL65/HR 9R4OvXyS2gpGyuOrfYPLQji7aNRlG9kH5qmFVxEHEl82qTTKIl72dBoOXsjeVj6x hx7jiuB4cjWMvDDbTEHemGZXLlcWH56RD9uAqN0bYfhDjrBEkUwGSZ/Ow2ZCtxaA 4zQ+rE3Sjq11FfHZTicHd2gNUM9LFaK/soxCwh52RAfPpglBLYaYKXdtAHHLxYW7 ZMw3RFDcExCwtl5+sPKy3eNxO/L6Qbu1XIeRWWplULvIlZ8JAuB+SoKDpxxe0+9p hQCgprayQXSit0GKFFNgRPPaMgXXBb0/m5U0Sv0jwhxbs6M3g5r5eX7glwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1H0Izv9apXhscqu7IH1JmUY+V+MB8GA1UdIwQY MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvJ5MC87 b49HGPPOINVfoYqjSgnJ+jxnH6QEZ8vvNWJD7TU5B6A2empvJ99nohMwqfd/EuGy jb6Yv8/VUuY8/0NKD1PAqz+l3p2gNbWiA3ul+Rjnki1Gcu9TW+bUEXRy4jaPSUhA H3gGBaKeppJ4JcLtYBGpn0ocUN1R17bVPvtW0OJbP70vU5XJ6QCOos71l4bGLNiZ +WWwiCZs+BuIX44YHFaFITx0xCFXOx5SBeGkDYmuJzJBA7laqvmbuBJ0h0RvYMsv FtJZxsm2GPuZH3LUxdX2l8pC5FU2gKyBbcbP71SCs7KRUifbCnVn3CTeJDEr26dc cBdDWz8iK8GNTw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:43 2026 by rpki-client