This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json) Hash identifier: WCZ2tT6mnQC7dp3R+fDzTy+9W7k01IKswqEgFUfTW+I= Subject key identifier: 20:AA:39:2C:2B:72:CA:DD:06:EB:4E:19:0F:35:2D:FE:31:56:EC:96 Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97 Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397 Certificate serial: 019C41A23CA27A1CB7464E274CE40982A282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft Manifest number: 17B8 Signing time: Mon 09 Feb 2026 09:01:17 +0000 Manifest this update: Mon 09 Feb 2026 09:01:17 +0000 Manifest next update: Tue 10 Feb 2026 09:01:17 +0000 Files and hashes: 1: eeohtYRFJrWVG9fBhV9aZ0-UtVA.roa (hash: /gb0Y6jcS+z2smX0iJ5MevaKI/KMuFO1F7ZUjAjvbi8=) 2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: ZvTuAvfNkhT7WlAuxkpoYBbTY+KsXYhvBGayxoxRh7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:3c:a2:7a:1c:b7:46:4e:27:4c:e4:09:82:a2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397 Validity Not Before: Feb 9 09:01:17 2026 GMT Not After : Feb 10 09:01:17 2026 GMT Subject: CN=20aa392c2b72cadd06eb4e190f352dfe3156ec96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:de:ee:fa:e4:ec:77:33:22:f0:0d:54:dc: 13:a3:fe:71:3d:25:38:a1:6a:6b:d6:a3:23:1e:c4: 4c:42:71:82:ff:b0:41:ac:1b:f1:e5:d0:29:06:c5: 03:e2:b5:9e:8c:13:7b:bf:e7:d9:52:35:f8:5e:62: 1e:0d:a6:5e:99:d8:45:28:d6:10:a9:b7:1e:f1:2b: 7d:a0:fb:c1:08:05:39:9c:35:e3:70:5c:f3:db:da: 06:50:3e:d1:66:3a:52:f6:bf:67:51:82:f5:02:14: 44:30:a7:21:0b:46:29:46:b0:f7:5d:2d:c0:28:95: 1a:e9:6d:89:08:1c:64:2f:53:69:c2:c0:64:ab:75: 27:da:70:fe:b2:9a:dd:c6:e9:ec:1c:aa:22:67:92: 45:b5:1f:46:d4:86:14:cc:d5:73:e5:cc:e4:20:01: 23:8f:90:af:12:df:c6:bd:30:30:b8:4a:8a:33:b3: 94:fb:00:a7:30:b7:9b:74:b1:9d:9a:ef:bb:62:9c: e5:66:88:82:ed:55:e1:2a:a0:96:ee:02:e6:3f:64: 4a:d8:5e:2c:94:f4:ee:77:61:38:29:77:a8:4a:b9: 31:a7:e5:9b:5a:c7:ce:a4:a7:30:ac:d9:be:51:b1: 73:96:7e:74:b9:70:59:2b:6c:45:0f:dd:db:cc:93: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AA:39:2C:2B:72:CA:DD:06:EB:4E:19:0F:35:2D:FE:31:56:EC:96 X509v3 Authority Key Identifier: keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cb:e0:cd:fc:70:cc:01:d0:59:7f:79:43:83:12:9c:f6:e9: dc:a3:d8:c7:7b:9e:30:e3:a1:4e:74:9a:e2:33:2a:7a:ea:4e: 24:09:1f:20:a3:0d:fe:43:a0:bb:5e:f8:26:5f:84:c4:5e:ea: ca:35:59:19:40:4a:78:d7:b6:f8:8d:ba:50:2c:38:4c:6a:e2: 39:0f:fa:88:48:82:27:e4:cc:f1:08:69:e9:f2:8d:4c:b5:4c: 8c:f8:29:45:7c:65:fe:19:ce:93:6f:b4:b2:6c:df:f8:cc:f8: 20:98:f4:74:c2:73:e0:f3:61:8a:f9:34:f0:f9:5a:ca:03:c2: 2f:01:5b:f2:70:e2:5d:bf:52:fc:fc:87:11:b2:7b:89:63:28: 32:e7:b0:26:bc:73:49:44:c6:1a:0d:22:bf:e5:b4:54:1f:16: 10:03:13:45:0d:64:4c:77:33:4b:15:7d:e4:e1:fd:8b:59:81: 58:08:37:eb:2e:f0:11:e8:bb:90:52:a7:14:67:b3:05:8c:9e: c7:f0:c3:1e:16:7d:34:86:1e:c2:5b:bc:98:81:06:a3:9d:3e: 42:ac:e1:36:4d:40:b4:57:23:bf:94:44:5d:dd:9e:f4:05:23: 3a:72:a5:75:d2:e8:36:9d:ed:7e:15:4a:02:b5:e5:73:94:2d: 0d:8f:dc:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBojyiehy3Rk4nTOQJgqKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx ZjEzOTcwHhcNMjYwMjA5MDkwMTE3WhcNMjYwMjEwMDkwMTE3WjAzMTEwLwYDVQQD EygyMGFhMzkyYzJiNzJjYWRkMDZlYjRlMTkwZjM1MmRmZTMxNTZlYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw3e7vrk7HczIvANVNwTo/5xPSU4 oWpr1qMjHsRMQnGC/7BBrBvx5dApBsUD4rWejBN7v+fZUjX4XmIeDaZemdhFKNYQ qbce8St9oPvBCAU5nDXjcFzz29oGUD7RZjpS9r9nUYL1AhREMKchC0YpRrD3XS3A KJUa6W2JCBxkL1NpwsBkq3Un2nD+sprdxunsHKoiZ5JFtR9G1IYUzNVz5czkIAEj j5CvEt/GvTAwuEqKM7OU+wCnMLebdLGdmu+7YpzlZoiC7VXhKqCW7gLmP2RK2F4s lPTud2E4KXeoSrkxp+WbWsfOpKcwrNm+UbFzln50uXBZK2xFD93bzJMrWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCqOSwrcsrdButOGQ81Lf4xVuyWMB8GA1UdIwQY MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0 LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8vgzfxw zAHQWX95Q4MSnPbp3KPYx3ueMOOhTnSa4jMqeupOJAkfIKMN/kOgu174Jl+ExF7q yjVZGUBKeNe2+I26UCw4TGriOQ/6iEiCJ+TM8Qhp6fKNTLVMjPgpRXxl/hnOk2+0 smzf+Mz4IJj0dMJz4PNhivk08PlaygPCLwFb8nDiXb9S/PyHEbJ7iWMoMuewJrxz SUTGGg0iv+W0VB8WEAMTRQ1kTHczSxV95OH9i1mBWAg36y7wEei7kFKnFGezBYye x/DDHhZ9NIYewlu8mIEGo50+QqzhNk1AtFcjv5REXd2e9AUjOnKlddLoNp3tfhVK ArXlc5QtDY/cQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:56 2026 by rpki-client