This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json) Hash identifier: ly4Smjc+nHvhsjHOKC0+KxwsFXVErMkPWMrowiRjVIE= Subject key identifier: D5:29:85:D0:00:89:DF:91:24:A3:FD:AE:48:F1:BD:BD:87:CD:05:EF Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22 Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122 Certificate serial: 019C425B1C1877C016B946C78C09C2167F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft Manifest number: 08 Signing time: Mon 09 Feb 2026 12:23:13 +0000 Manifest this update: Mon 09 Feb 2026 12:23:13 +0000 Manifest next update: Tue 10 Feb 2026 12:23:13 +0000 Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: +/rQCMlLfToo9RdQ1QVTbs+rKFr8vJOx6Wv1eTrxveI=) 2: SGTfk5RPZJW3hTGfHsKKtMd3MoQ.asa (hash: 6L5TAjX3FzF9MErfoA0fYw7TfgZgbsqd4eDxXEUCEwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:5b:1c:18:77:c0:16:b9:46:c7:8c:09:c2:16:7f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122 Validity Not Before: Feb 9 12:23:13 2026 GMT Not After : Feb 10 12:23:13 2026 GMT Subject: CN=d52985d00089df9124a3fdae48f1bdbd87cd05ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b8:43:c8:b4:e7:ee:67:b8:0c:8a:47:1b:af: 78:a9:3f:fd:58:a1:bb:06:06:45:19:79:d8:d7:26: 1e:bc:68:b1:46:8f:70:68:d5:53:32:64:6b:0b:96: e0:e9:e0:9c:09:9c:d2:d2:f8:79:fe:0c:3d:40:63: da:23:40:07:ea:ae:06:71:e8:86:d8:70:ae:e6:8e: 5f:04:79:01:c2:ab:53:f5:ae:6a:ab:8d:c8:0a:aa: e1:e5:ab:bb:00:f1:60:7a:c7:42:92:6b:70:31:b8: 9a:32:10:6d:19:ef:00:4d:6b:a9:fd:f2:df:62:1f: 32:08:15:18:90:aa:b4:be:37:ed:5a:db:73:87:58: 64:a8:b8:21:52:c9:c3:c8:83:ff:f0:e1:0d:e0:b6: ea:19:e0:53:4d:57:27:f9:ef:36:f3:64:df:b7:1d: ff:90:d6:b8:76:06:87:7a:b1:1a:10:be:89:4c:ac: f7:ba:99:55:9b:11:14:3a:73:cb:6b:1c:9d:09:b9: 3c:3a:94:b2:5e:c4:e0:f2:47:b4:58:d0:07:55:a6: d5:74:a5:7a:7e:75:3b:4f:46:ec:c8:f7:98:9d:a5: 93:72:98:8b:2d:eb:7f:b0:f8:93:8b:a7:4c:ea:42: 29:c2:d0:b4:55:28:19:84:20:68:be:f7:62:ca:70: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:29:85:D0:00:89:DF:91:24:A3:FD:AE:48:F1:BD:BD:87:CD:05:EF X509v3 Authority Key Identifier: keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f4:8c:c7:84:92:f0:67:7a:79:2a:13:62:24:44:0a:a3:7a: 12:5a:7e:42:04:bf:44:45:5b:c3:a2:50:fe:17:44:c4:df:81: 76:db:6d:d9:f6:87:61:6a:71:5a:66:9a:9a:05:d0:14:0f:ed: c7:2a:a4:0f:3c:7a:6d:fb:17:2c:cc:8f:2a:47:2c:ef:ab:69: 89:74:84:b9:1f:6f:0d:8c:77:6e:a1:d6:90:9d:c7:c3:86:97: 51:b4:8d:d5:7f:c2:db:22:a6:b0:81:a3:dc:cf:54:4e:3a:1c: 4b:1b:7b:ba:c7:58:1d:d1:6f:0d:f2:7c:72:65:6d:c2:cf:af: a4:d8:c5:76:67:fc:3b:57:a4:15:75:77:1c:5e:f5:3c:d0:7d: 6d:eb:59:84:8d:ed:09:58:2b:5d:e6:0f:fd:d2:99:48:ed:e4: b4:8c:f3:23:ad:f6:6a:b4:6a:1a:7c:1e:c5:d9:fd:be:40:ac: 5a:71:64:23:43:13:32:fe:a2:b4:c8:4d:10:6f:0a:69:d9:8f: 6b:1b:df:ff:17:e2:c9:cc:31:e3:f2:07:f8:2d:75:c0:0e:30: 0d:0c:75:6d:6d:e8:38:b8:28:b8:33:01:e4:91:4e:b1:b1:c0: c6:37:b0:6a:f1:ff:c5:bf:38:22:20:6e:e7:b0:16:da:1f:36: 2b:a5:f9:0f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCWxwYd8AWuUbHjAnCFn+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw YjUxMjIwHhcNMjYwMjA5MTIyMzEzWhcNMjYwMjEwMTIyMzEzWjAzMTEwLwYDVQQD EyhkNTI5ODVkMDAwODlkZjkxMjRhM2ZkYWU0OGYxYmRiZDg3Y2QwNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67hDyLTn7me4DIpHG694qT/9WKG7 BgZFGXnY1yYevGixRo9waNVTMmRrC5bg6eCcCZzS0vh5/gw9QGPaI0AH6q4GceiG 2HCu5o5fBHkBwqtT9a5qq43ICqrh5au7APFgesdCkmtwMbiaMhBtGe8ATWup/fLf Yh8yCBUYkKq0vjftWttzh1hkqLghUsnDyIP/8OEN4LbqGeBTTVcn+e8282Tftx3/ kNa4dgaHerEaEL6JTKz3uplVmxEUOnPLaxydCbk8OpSyXsTg8ke0WNAHVabVdKV6 fnU7T0bsyPeYnaWTcpiLLet/sPiTi6dM6kIpwtC0VSgZhCBovvdiynCkOQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNUphdAAid+RJKP9rkjxvb2HzQXvMB8GA1UdIwQY MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2 LWM4NjE1YTU0MGNkZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4L2Y0OWQ4NC00YTFjLTQwZmQtYmFhNi1jODYxNWE1NDBj ZGQvMS8xLWtaVnFpbkxUSU9VZjEtbXhvOEV3amtMVVNJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvSM x4SS8Gd6eSoTYiRECqN6Elp+QgS/REVbw6JQ/hdExN+Bdttt2faHYWpxWmaamgXQ FA/txyqkDzx6bfsXLMyPKkcs76tpiXSEuR9vDYx3bqHWkJ3Hw4aXUbSN1X/C2yKm sIGj3M9UTjocSxt7usdYHdFvDfJ8cmVtws+vpNjFdmf8O1ekFXV3HF71PNB9betZ hI3tCVgrXeYP/dKZSO3ktIzzI632arRqGnwexdn9vkCsWnFkI0MTMv6itMhNEG8K admPaxvf/xfiycwx4/IH+C11wA4wDQx1bW3oOLgouDMB5JFOsbHAxjewavH/xb84 IiBu57AW2h82K6X5Dw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:32 2026 by rpki-client