This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json) Hash identifier: J/Ioy72OmdS3zOo8RmB4Q0wBZwydPuEYl2bVY/urukI= Subject key identifier: 3F:FC:89:0A:FF:50:D0:08:0C:06:35:B9:26:B0:B2:5B:97:C0:19:C9 Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b Certificate serial: 019C41A1500F0E38631319D7B8486F4A109F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 09:00:16 +0000 Manifest this update: Mon 09 Feb 2026 09:00:16 +0000 Manifest next update: Tue 10 Feb 2026 09:00:16 +0000 Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: Qc7knOyEe80B0fTcvL/elMZzbFUJUQkiKX8fcZW8js8=) 2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:50:0f:0e:38:63:13:19:d7:b8:48:6f:4a:10:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b Validity Not Before: Feb 9 09:00:16 2026 GMT Not After : Feb 10 09:00:16 2026 GMT Subject: CN=3ffc890aff50d0080c0635b926b0b25b97c019c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:e5:a7:f1:70:b2:3e:36:f8:4a:b6:4b:56: 84:76:87:a6:4f:05:1c:a3:89:94:9f:d5:11:47:43: e0:bf:15:8a:9c:2b:df:40:27:6a:8d:5a:7f:49:f6: 0e:5a:99:b6:27:5e:73:06:5f:d9:fb:b1:49:f6:cb: 7f:bc:5f:90:b1:8b:84:5f:66:83:96:b8:78:05:9f: 92:d5:f2:0e:b8:ca:6f:e2:94:73:b5:19:67:70:79: 62:aa:e0:92:1b:4d:dc:33:51:fb:91:07:9e:17:f4: 5c:5d:b4:2f:d9:60:ce:16:ca:df:e0:46:72:4a:ab: 84:e1:9b:a3:88:84:8a:90:f4:73:2b:e0:f4:c1:bc: 39:0a:e5:86:d4:ed:eb:c8:90:a8:5a:93:54:a4:40: 1a:c5:1d:10:6d:3a:cc:63:b4:6b:b8:40:93:a9:49: e6:2f:f9:3f:ec:ba:2d:60:22:fc:97:94:5a:28:9b: 3f:da:6e:a7:f5:7a:fa:46:ec:e1:84:fd:42:11:46: 30:57:9a:39:10:83:0d:b9:e5:4a:04:63:cc:83:df: c7:31:bd:87:7c:1e:51:bd:88:57:b9:8a:23:b7:fe: 80:10:a2:c0:5c:f2:bb:e0:1b:44:9d:ef:a6:90:1c: ff:5c:ca:c1:71:54:02:6a:00:aa:17:a7:90:97:8b: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:89:0A:FF:50:D0:08:0C:06:35:B9:26:B0:B2:5B:97:C0:19:C9 X509v3 Authority Key Identifier: keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c6:f9:08:9e:d9:5d:29:0a:3b:0b:ef:2b:12:c9:64:54:36: 39:c8:4f:89:0c:0e:cc:ec:71:26:23:40:71:c3:6d:91:6f:ae: 33:b1:cf:c4:0e:1e:51:5a:95:51:6e:f3:b7:b2:60:6a:2a:6f: 22:a8:bc:ac:fb:ac:cc:ce:f7:f0:07:71:64:ba:67:58:ec:6d: b7:68:19:86:73:2e:f3:c8:ee:fa:b6:20:a0:f7:5e:41:0b:1e: 7e:08:a4:12:da:47:a6:76:1f:8d:da:74:d1:dc:6f:47:ba:8b: fd:79:b2:20:56:b1:fd:8e:c0:1c:bf:cb:eb:de:9b:a5:94:8a: ad:f5:34:58:6e:2a:0a:2a:2a:7d:f4:73:e6:a4:ca:ca:ec:5d: c3:3b:e2:50:63:2a:f0:09:6e:dd:eb:de:ac:c5:3d:a0:a8:50: c2:d6:e4:5a:33:00:a9:d7:f6:46:b9:4e:c2:fb:21:52:43:ac: f9:b8:6d:a1:21:0d:44:e1:d2:75:20:82:d8:5a:22:c7:ac:1a: ca:92:db:b7:60:1f:49:30:16:a7:4d:1d:50:00:60:f2:fb:64: dd:f7:7b:1b:a6:d8:af:3e:22:71:fe:3a:8b:f5:dc:bc:d1:f1: c0:aa:78:8b:dd:df:2c:f7:48:0d:3a:75:51:13:52:63:1d:0e: 73:e3:bb:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVAPDjhjExnXuEhvShCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl OTdlNmIwHhcNMjYwMjA5MDkwMDE2WhcNMjYwMjEwMDkwMDE2WjAzMTEwLwYDVQQD EygzZmZjODkwYWZmNTBkMDA4MGMwNjM1YjkyNmIwYjI1Yjk3YzAxOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXnlp/Fwsj42+Eq2S1aEdoemTwUc o4mUn9URR0PgvxWKnCvfQCdqjVp/SfYOWpm2J15zBl/Z+7FJ9st/vF+QsYuEX2aD lrh4BZ+S1fIOuMpv4pRztRlncHliquCSG03cM1H7kQeeF/RcXbQv2WDOFsrf4EZy SquE4ZujiISKkPRzK+D0wbw5CuWG1O3ryJCoWpNUpEAaxR0QbTrMY7RruECTqUnm L/k/7LotYCL8l5RaKJs/2m6n9Xr6RuzhhP1CEUYwV5o5EIMNueVKBGPMg9/HMb2H fB5RvYhXuYojt/6AEKLAXPK74BtEne+mkBz/XMrBcVQCagCqF6eQl4usRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/8iQr/UNAIDAY1uSawsluXwBnJMB8GA1UdIwQY MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcb5CJ7Z XSkKOwvvKxLJZFQ2OchPiQwOzOxxJiNAccNtkW+uM7HPxA4eUVqVUW7zt7Jgaipv Iqi8rPuszM738AdxZLpnWOxtt2gZhnMu88ju+rYgoPdeQQsefgikEtpHpnYfjdp0 0dxvR7qL/XmyIFax/Y7AHL/L696bpZSKrfU0WG4qCioqffRz5qTKyuxdwzviUGMq 8Alu3everMU9oKhQwtbkWjMAqdf2RrlOwvshUkOs+bhtoSENROHSdSCC2Foix6wa ypLbt2AfSTAWp00dUABg8vtk3fd7G6bYrz4icf46i/XcvNHxwKp4i93fLPdIDTp1 URNSYx0Oc+O75w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:47 2026 by rpki-client