This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: lTQcOlfl2SvnPkcvdIGlDWuWactSIIP32PEwtYlKwn0= Subject key identifier: 1F:D2:24:08:34:0A:A9:6E:D8:9A:9D:E3:A6:6D:8E:89:97:9C:94:43 Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019C432234B4259786F89ED77C2DFA640F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0F94 Signing time: Mon 09 Feb 2026 16:00:40 +0000 Manifest this update: Mon 09 Feb 2026 16:00:40 +0000 Manifest next update: Tue 10 Feb 2026 16:00:40 +0000 Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=) 2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: HCZXXruCtpN7ItN+ZVYL/QdW+cXyNVYhBqVJy3NmrJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:34:b4:25:97:86:f8:9e:d7:7c:2d:fa:64:0f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Feb 9 16:00:40 2026 GMT Not After : Feb 10 16:00:40 2026 GMT Subject: CN=1fd22408340aa96ed89a9de3a66d8e89979c9443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:76:30:aa:f0:55:27:d0:07:a1:05:e1:48: 02:7d:06:4b:b2:66:ac:95:94:e9:67:36:f5:c9:65: d0:dc:0e:89:2c:cf:c8:b0:e3:3f:18:e6:8c:89:9f: f0:f6:b9:8d:5c:2c:04:67:83:47:69:4c:52:02:e6: f8:bb:9a:43:5e:d9:a8:f3:9b:84:2c:aa:37:34:c3: 87:ce:8e:01:09:ca:86:a2:35:ea:60:57:24:52:d4: 5a:52:19:41:1e:6e:32:4e:26:3d:98:6b:64:48:6e: 4a:df:66:ae:8b:fb:d6:ad:c3:57:0a:1d:86:4e:8f: f1:a0:5e:c1:32:57:5b:04:68:19:24:55:f7:fd:f3: 75:5f:d2:9e:d7:47:ab:13:ae:92:e0:80:e7:1a:be: 98:14:9b:d8:1b:80:22:8d:dc:42:9d:18:6c:bd:cd: 56:15:b7:1e:48:46:9d:96:e9:3b:62:cd:81:03:0a: f7:22:92:c8:4c:2d:8e:12:54:6a:1a:f1:ad:b5:6b: da:86:84:7d:f8:86:3d:c8:bf:3f:9e:ed:02:c2:f7: 2a:3b:fa:fe:f7:90:c6:1a:96:c9:03:af:95:4a:9a: 64:d2:f2:44:05:90:3f:3c:52:a2:48:20:34:39:c7: 10:4e:42:11:43:e7:8b:c2:31:b6:0e:1c:c3:77:c3: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:24:08:34:0A:A9:6E:D8:9A:9D:E3:A6:6D:8E:89:97:9C:94:43 X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:15:ee:91:c6:14:d3:85:51:0a:50:2d:48:e5:f6:1d:7b:03: 67:17:6e:f6:dd:bf:7d:6e:c4:36:56:dc:02:68:16:b0:9d:f4: 95:94:23:90:94:35:00:e2:00:8e:d1:4f:c1:47:03:61:6a:ed: d9:6c:4f:f6:09:f9:dc:72:58:20:db:69:28:6d:bd:00:b6:7f: 7a:5c:f2:ad:b9:06:33:64:70:b9:eb:10:45:42:69:37:95:32: 97:74:b9:3e:03:6c:e0:f5:2f:3d:e8:fa:76:0f:e6:e3:0b:b4: 23:dd:18:cd:1a:97:b9:0e:8b:b3:03:b4:db:4e:28:9e:6a:9a: 30:2c:09:d3:ce:7e:46:1e:bd:7a:25:75:ef:4b:cf:af:9a:3b: 70:0b:64:74:c8:ce:df:ff:86:d7:35:3c:5b:61:1a:b3:84:4c: 52:f5:e1:a5:24:2d:c0:f8:65:48:3c:de:27:43:3f:39:72:22: ae:d3:52:26:ef:ad:5d:89:f6:8a:03:f7:15:9a:a6:37:87:9e: 86:34:79:b9:b4:17:e6:31:42:ba:79:85:4c:fb:da:c1:58:28: 38:6e:f9:c0:07:92:42:2b:79:be:d8:75:1d:9b:ec:a0:34:0b: a6:a4:f5:ed:85:4e:0a:25:ea:19:80:22:fb:7c:ad:83:8b:48: 68:7c:0a:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjS0JZeG+J7XfC36ZA8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD EygxZmQyMjQwODM0MGFhOTZlZDg5YTlkZTNhNjZkOGU4OTk3OWM5NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHl2MKrwVSfQB6EF4UgCfQZLsmas lZTpZzb1yWXQ3A6JLM/IsOM/GOaMiZ/w9rmNXCwEZ4NHaUxSAub4u5pDXtmo85uE LKo3NMOHzo4BCcqGojXqYFckUtRaUhlBHm4yTiY9mGtkSG5K32aui/vWrcNXCh2G To/xoF7BMldbBGgZJFX3/fN1X9Ke10erE66S4IDnGr6YFJvYG4AijdxCnRhsvc1W FbceSEadluk7Ys2BAwr3IpLITC2OElRqGvGttWvahoR9+IY9yL8/nu0CwvcqO/r+ 95DGGpbJA6+VSppk0vJEBZA/PFKiSCA0OccQTkIRQ+eLwjG2DhzDd8M7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/SJAg0Cqlu2Jqd46ZtjomXnJRDMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShXukcYU 04VRClAtSOX2HXsDZxdu9t2/fW7ENlbcAmgWsJ30lZQjkJQ1AOIAjtFPwUcDYWrt 2WxP9gn53HJYINtpKG29ALZ/elzyrbkGM2RwuesQRUJpN5Uyl3S5PgNs4PUvPej6 dg/m4wu0I90YzRqXuQ6LswO0204onmqaMCwJ085+Rh69eiV170vPr5o7cAtkdMjO 3/+G1zU8W2Eas4RMUvXhpSQtwPhlSDzeJ0M/OXIirtNSJu+tXYn2igP3FZqmN4ee hjR5ubQX5jFCunmFTPvawVgoOG75wAeSQit5vth1HZvsoDQLpqT17YVOCiXqGYAi +3ytg4tIaHwK+g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:56 2026 by rpki-client