This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json) Hash identifier: eXTP6yBU5Ve0gI+OEB4e1lG4HTAjm9CaHcYB2pLxl+Y= Subject key identifier: 47:5B:8A:1D:71:9E:B7:1B:E2:4F:D9:14:EB:54:D4:04:70:D0:88:09 Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b Certificate serial: 019C43595A83397448D292B3C00CC03A5EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft Manifest number: 125F Signing time: Mon 09 Feb 2026 17:00:55 +0000 Manifest this update: Mon 09 Feb 2026 17:00:55 +0000 Manifest next update: Tue 10 Feb 2026 17:00:55 +0000 Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=) 2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: Q6Ly5gqjXQ/hxU7ERUTjNoGQgFt/j+D52xlGMncAFgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:5a:83:39:74:48:d2:92:b3:c0:0c:c0:3a:5e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b Validity Not Before: Feb 9 17:00:55 2026 GMT Not After : Feb 10 17:00:55 2026 GMT Subject: CN=475b8a1d719eb71be24fd914eb54d40470d08809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:eb:7b:86:8c:b1:ca:37:5d:78:36:6f:dc: e3:06:17:4c:b2:d5:4c:7f:10:38:94:fb:24:2d:14: 69:79:eb:a5:31:56:db:01:c2:ca:8d:c8:eb:3f:18: 13:12:d7:54:07:55:48:3d:00:0d:15:18:44:92:69: 57:53:d8:1f:ff:36:78:74:18:82:2b:d1:16:fb:2f: c4:2f:97:b7:31:a5:37:92:2d:99:59:d3:f2:82:8a: d4:16:89:d6:5c:bf:e7:fa:16:f7:3c:e2:87:7e:8a: d9:7a:e5:1d:21:3c:c5:ab:46:10:14:2d:1f:9a:3e: 53:c3:81:f9:1a:b8:83:39:1f:48:b4:43:99:54:74: a5:cb:f1:18:30:55:f1:0e:46:81:ad:57:2c:b9:3b: 00:36:89:2c:74:c6:f4:95:8d:d5:e3:16:c1:63:97: 00:d2:47:62:ff:02:3a:39:93:3f:67:c7:d7:37:51: 77:59:c6:26:a6:9f:2e:58:a7:5d:a4:14:45:cb:7a: 3a:52:73:57:06:9a:7b:14:ff:7e:66:d1:22:50:19: e2:c7:08:ef:08:a1:df:3c:98:86:21:6e:19:0b:41: 62:71:46:4c:43:59:4a:14:86:e7:f4:1d:06:e2:66: 49:f0:e4:26:a3:4b:52:7c:1e:33:e3:37:ad:09:57: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:8A:1D:71:9E:B7:1B:E2:4F:D9:14:EB:54:D4:04:70:D0:88:09 X509v3 Authority Key Identifier: keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8b:48:01:bd:9f:aa:d3:b5:35:ed:39:e9:54:03:45:17:35: 35:dd:70:7b:28:1f:69:55:54:42:1b:22:a9:47:70:39:1c:29: 58:3c:92:27:73:0c:fb:fd:22:d5:10:6b:88:b0:df:47:8c:d2: b9:88:76:7d:76:a5:87:56:1d:93:c9:ec:2c:d3:3b:d2:c5:3e: 9f:f2:58:c4:4c:56:3e:a1:e9:76:b1:56:29:d3:c0:c3:5a:94: ec:c3:c2:19:ff:28:80:66:b1:ec:e1:b1:2f:3a:92:0d:1d:55: 10:c6:f0:5e:b1:a8:32:2c:22:c5:6f:f4:59:b2:1b:39:17:ae: 00:80:11:1f:d1:23:2e:fb:31:b2:13:90:52:64:36:6b:fb:da: 64:17:8c:01:cb:9f:81:0c:67:0a:a1:49:94:99:40:0e:16:a3: 23:dd:52:68:54:ba:e8:43:6c:15:06:1e:e4:67:a8:55:37:27: 3f:46:83:b1:f9:61:d8:2c:34:50:ed:6f:12:ae:ad:b5:37:33: 79:62:99:66:ed:15:2c:e8:a0:bd:2e:9a:18:c9:42:a2:a8:0f: f2:de:b0:06:9f:db:36:39:ff:1c:a4:f2:da:de:dc:f6:13:2f: 65:a2:e3:62:b5:73:60:70:f8:c6:5d:db:87:93:51:b4:6c:28: 4d:46:a8:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVqDOXRI0pKzwAzAOl7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2 ZThmN2IwHhcNMjYwMjA5MTcwMDU1WhcNMjYwMjEwMTcwMDU1WjAzMTEwLwYDVQQD Eyg0NzViOGExZDcxOWViNzFiZTI0ZmQ5MTRlYjU0ZDQwNDcwZDA4ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3fre4aMsco3XXg2b9zjBhdMstVM fxA4lPskLRRpeeulMVbbAcLKjcjrPxgTEtdUB1VIPQANFRhEkmlXU9gf/zZ4dBiC K9EW+y/EL5e3MaU3ki2ZWdPygorUFonWXL/n+hb3POKHforZeuUdITzFq0YQFC0f mj5Tw4H5GriDOR9ItEOZVHSly/EYMFXxDkaBrVcsuTsANoksdMb0lY3V4xbBY5cA 0kdi/wI6OZM/Z8fXN1F3WcYmpp8uWKddpBRFy3o6UnNXBpp7FP9+ZtEiUBnixwjv CKHfPJiGIW4ZC0FicUZMQ1lKFIbn9B0G4mZJ8OQmo0tSfB4z4zetCVe3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdbih1xnrcb4k/ZFOtU1ARw0IgJMB8GA1UdIwQY MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeItIAb2f qtO1Ne056VQDRRc1Nd1weygfaVVUQhsiqUdwORwpWDySJ3MM+/0i1RBriLDfR4zS uYh2fXalh1Ydk8nsLNM70sU+n/JYxExWPqHpdrFWKdPAw1qU7MPCGf8ogGax7OGx LzqSDR1VEMbwXrGoMiwixW/0WbIbOReuAIARH9EjLvsxshOQUmQ2a/vaZBeMAcuf gQxnCqFJlJlADhajI91SaFS66ENsFQYe5GeoVTcnP0aDsflh2Cw0UO1vEq6ttTcz eWKZZu0VLOigvS6aGMlCoqgP8t6wBp/bNjn/HKTy2t7c9hMvZaLjYrVzYHD4xl3b h5NRtGwoTUaoKQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:26 2026 by rpki-client