This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json) Hash identifier: xjhku4UHRfBdGGGJ0ejS/ywO9GNTAYESoPDoNnOtiiY= Subject key identifier: D9:3C:69:3D:4E:2A:01:6F:6E:5D:45:40:53:28:FD:BE:CF:A5:F7:5E Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58 Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58 Certificate serial: 019C43C6D59EB2AC97ED65B3907C16FA4AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft Manifest number: 0F1F Signing time: Mon 09 Feb 2026 19:00:30 +0000 Manifest this update: Mon 09 Feb 2026 19:00:30 +0000 Manifest next update: Tue 10 Feb 2026 19:00:30 +0000 Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: MvEWFYQhais+V8gCG0w1yyad24Gzhc5Z2vz2Yc/19SI=) 2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d5:9e:b2:ac:97:ed:65:b3:90:7c:16:fa:4a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58 Validity Not Before: Feb 9 19:00:30 2026 GMT Not After : Feb 10 19:00:30 2026 GMT Subject: CN=d93c693d4e2a016f6e5d45405328fdbecfa5f75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:5b:c3:7a:d2:31:ae:c0:47:f9:42:b6:57: 3f:e0:65:0c:10:a9:45:91:99:51:26:35:e9:63:fd: 3e:a8:be:70:aa:0f:cb:bd:a8:a5:49:5c:9e:b6:22: 31:59:a8:f9:4b:f5:21:3a:eb:19:64:87:ca:a9:13: cc:64:73:d5:9b:fb:8d:61:f6:ac:ee:63:4a:09:0f: 92:8e:f0:59:e5:0b:df:00:2a:72:e1:94:28:25:58: c0:bf:b2:a2:db:24:0c:62:ed:e3:fb:71:bd:de:89: 1e:38:bc:e1:6c:75:b4:6e:01:a6:cc:d3:95:35:22: e2:08:a7:7f:8e:bf:42:29:5f:8e:98:47:e7:5e:e5: ca:55:7f:65:b6:0f:bc:ef:46:3a:94:ba:86:4b:5f: e1:c6:f7:f6:f5:73:13:8c:6b:23:ba:5b:87:b0:08: 8d:42:08:c2:9c:92:52:b9:e9:16:b9:b2:d4:8e:8e: 3c:3e:35:fc:33:39:9a:bc:dd:8b:17:ee:13:9b:a3: 51:4a:27:0d:39:bb:c4:4c:00:cb:05:28:bd:43:e7: d6:84:a9:30:84:76:33:24:63:25:d3:fe:ca:92:87: a2:dc:81:42:d4:99:63:e5:68:42:c6:3c:50:61:e7: f6:f4:f6:bb:b9:f0:2f:18:2c:3b:ef:91:4b:f7:09: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:69:3D:4E:2A:01:6F:6E:5D:45:40:53:28:FD:BE:CF:A5:F7:5E X509v3 Authority Key Identifier: keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:be:fd:9d:a4:e3:d5:4c:f9:4d:c5:d9:fb:1c:60:aa:db:98: 2e:be:64:0d:0c:c8:58:3f:ef:5d:db:6f:3a:2b:6b:29:95:1c: bc:f1:ff:69:b1:2c:98:e3:5f:1e:5c:cc:da:2c:f3:d4:b6:cd: c0:dc:7e:11:b3:ef:77:12:89:c8:a1:f9:4e:c4:f3:85:0c:0a: 2e:f8:cf:cc:46:2b:67:b0:c1:46:cc:5e:5b:1a:aa:b1:f8:09: a2:b0:b3:93:ea:44:e8:8b:db:b6:76:08:97:63:68:57:ee:f1: ac:24:68:45:ec:68:10:34:24:dc:98:7e:6a:8a:e0:2f:d0:74: cb:a1:c5:07:f7:7a:ac:f5:90:e5:4e:42:e6:b9:0e:fa:44:d1: 1d:50:3b:9a:77:2c:7d:9f:a5:cd:66:c1:1c:63:b3:6b:d4:1c: bb:25:75:0a:a6:2c:9e:bd:78:df:06:25:e6:d4:5a:b1:c0:17: 28:a8:0f:2c:7c:4a:e6:57:2c:ad:d6:35:1b:44:e8:a8:38:d3: 13:3e:8d:b3:25:9c:0b:9f:7b:fa:55:8f:07:9a:8f:ee:11:b7: d7:c3:b5:a9:37:0d:df:9e:3d:64:48:ee:a3:9e:fd:b6:31:d7: 07:dc:10:19:3b:9b:35:33:d7:ba:14:6a:26:d1:ac:fd:8f:4a: e3:60:8f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtWesqyX7WWzkHwW+kqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh MGNjNTgwHhcNMjYwMjA5MTkwMDMwWhcNMjYwMjEwMTkwMDMwWjAzMTEwLwYDVQQD EyhkOTNjNjkzZDRlMmEwMTZmNmU1ZDQ1NDA1MzI4ZmRiZWNmYTVmNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtapbw3rSMa7AR/lCtlc/4GUMEKlF kZlRJjXpY/0+qL5wqg/LvailSVyetiIxWaj5S/UhOusZZIfKqRPMZHPVm/uNYfas 7mNKCQ+SjvBZ5QvfACpy4ZQoJVjAv7Ki2yQMYu3j+3G93okeOLzhbHW0bgGmzNOV NSLiCKd/jr9CKV+OmEfnXuXKVX9ltg+870Y6lLqGS1/hxvf29XMTjGsjuluHsAiN QgjCnJJSuekWubLUjo48PjX8MzmavN2LF+4Tm6NRSicNObvETADLBSi9Q+fWhKkw hHYzJGMl0/7Kkoei3IFC1Jlj5WhCxjxQYef29Pa7ufAvGCw775FL9wmcdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk8aT1OKgFvbl1FQFMo/b7PpfdeMB8GA1UdIwQY MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr79naTj 1Uz5TcXZ+xxgqtuYLr5kDQzIWD/vXdtvOitrKZUcvPH/abEsmONfHlzM2izz1LbN wNx+EbPvdxKJyKH5TsTzhQwKLvjPzEYrZ7DBRsxeWxqqsfgJorCzk+pE6IvbtnYI l2NoV+7xrCRoRexoEDQk3Jh+aorgL9B0y6HFB/d6rPWQ5U5C5rkO+kTRHVA7mncs fZ+lzWbBHGOza9QcuyV1CqYsnr143wYl5tRascAXKKgPLHxK5lcsrdY1G0ToqDjT Ez6NsyWcC597+lWPB5qP7hG318O1qTcN3549ZEjuo579tjHXB9wQGTubNTPXuhRq JtGs/Y9K42CPNA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:08 2026 by rpki-client