This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json) Hash identifier: JUxfXdLgNTUWJ5GsWepS6dFxl1jOSjVCkWhnEqGzviI= Subject key identifier: BA:7B:F2:9B:FA:59:7A:D2:6E:97:E8:67:0F:61:51:E3:51:A0:9B:EB Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c Certificate serial: 019C4322623E060AF1AA1A931A30BEFB3E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft Manifest number: 0FF9 Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: fNO2DOM/uT7v5/TAp+NY8qyE9AlHbRWp7BdKKoyGRpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:62:3e:06:0a:f1:aa:1a:93:1a:30:be:fb:3e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=ba7bf29bfa597ad26e97e8670f6151e351a09beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:c0:24:17:d2:1f:00:34:d6:ef:32:5e:6d: cd:15:2e:c5:08:de:0c:b3:e6:9a:0e:24:a9:e7:37: c6:6b:78:7f:7d:d1:7e:49:61:92:b8:72:1a:75:72: 18:f2:9e:ec:e0:f6:9e:9c:2f:58:b8:80:71:e2:4b: 14:65:8a:04:95:af:b8:62:b6:6a:a5:00:60:06:ea: 8d:03:b7:dd:72:d3:03:bf:6f:d5:14:b4:bb:c0:2d: d5:6d:75:4a:bd:81:dc:12:bf:83:2b:3d:68:02:88: 82:29:f7:ed:5c:87:33:8e:0b:a7:fd:dd:2b:8c:39: 23:88:e6:03:d1:bf:eb:b9:fb:22:10:ab:12:4b:e2: 88:9e:d5:d3:15:66:df:75:fb:64:fb:09:c0:99:91: 98:e4:09:65:45:ff:04:c7:44:00:cd:cd:1f:74:3e: 6b:85:fa:6e:60:a3:5a:4d:db:d2:99:d8:3f:49:9f: f7:f3:7e:65:c8:e8:ea:47:85:36:32:14:16:5c:c9: 5f:34:d3:d1:5f:2a:02:44:e4:b5:e5:44:fa:68:28: 54:3b:de:04:7b:02:26:ad:6c:86:c3:f3:be:cf:f7: 46:2c:29:82:70:3f:f8:44:a8:bb:63:c2:33:aa:16: 20:0c:65:a0:91:df:10:99:b5:6c:0f:b5:34:d0:b5: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7B:F2:9B:FA:59:7A:D2:6E:97:E8:67:0F:61:51:E3:51:A0:9B:EB X509v3 Authority Key Identifier: keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:44:ac:fb:6d:8b:4f:9e:7a:97:29:b9:83:d7:83:82:48:93: 93:49:c9:0a:00:8a:26:c9:e8:50:d6:64:15:67:de:23:50:70: fc:4e:4c:db:bf:f1:98:28:ec:b1:46:ad:1c:a5:3c:dd:3c:c7: 76:b1:f0:04:95:89:05:ba:a1:a6:d3:04:87:18:bc:e3:15:15: 91:7f:fb:8e:08:61:87:1e:98:a8:36:2a:80:12:13:55:22:17: 93:e4:92:51:9d:4e:95:9d:bb:8d:f9:78:09:9a:e8:fb:19:7b: d6:d6:9a:e8:fc:18:ee:5e:30:3f:9b:a6:f4:37:09:22:59:8d: 9b:61:54:fd:a1:be:2c:10:f0:31:d5:eb:dd:c8:a4:3d:53:d3: e9:5b:96:4a:ad:78:e3:82:cd:d2:14:3e:ef:4d:6d:04:02:8a: be:7d:66:52:45:41:57:ef:41:a6:66:37:34:1d:ed:ae:74:c9: 62:7e:72:00:02:88:f4:b9:cc:04:50:83:42:0d:74:17:ab:08: ba:03:be:45:96:a9:07:10:fe:72:ec:43:9d:28:6a:82:cd:a9: 50:99:40:a4:38:71:c2:3c:e5:a9:a3:93:a7:70:94:71:07:75: 79:ee:8a:1f:23:c1:1e:65:6d:22:e0:d8:ca:b1:b7:22:60:ff: 21:fe:d6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImI+BgrxqhqTGjC++z6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzE1NTIxZmVkOTBkMTE0ZTc2MzUzMTBiMzA3ZjU1M2Y1 N2QyNmMwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD EyhiYTdiZjI5YmZhNTk3YWQyNmU5N2U4NjcwZjYxNTFlMzUxYTA5YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqabAJBfSHwA01u8yXm3NFS7FCN4M s+aaDiSp5zfGa3h/fdF+SWGSuHIadXIY8p7s4PaenC9YuIBx4ksUZYoEla+4YrZq pQBgBuqNA7fdctMDv2/VFLS7wC3VbXVKvYHcEr+DKz1oAoiCKfftXIczjgun/d0r jDkjiOYD0b/rufsiEKsSS+KIntXTFWbfdftk+wnAmZGY5AllRf8Ex0QAzc0fdD5r hfpuYKNaTdvSmdg/SZ/3835lyOjqR4U2MhQWXMlfNNPRXyoCROS15UT6aChUO94E ewImrWyGw/O+z/dGLCmCcD/4RKi7Y8IzqhYgDGWgkd8QmbVsD7U00LV5YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp78pv6WXrSbpfoZw9hUeNRoJvrMB8GA1UdIwQY MBaAFHfBVSH+2Q0RTnY1MQswf1U/V9JsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wZWRiMzgtYzBmOC00NDFiLWFjYmYt NjFiMGUzNjljOGZkLzEvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wZWRiMzgtYzBmOC00NDFiLWFjYmYtNjFiMGUzNjljOGZk LzEvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUSs+22L T556lym5g9eDgkiTk0nJCgCKJsnoUNZkFWfeI1Bw/E5M27/xmCjssUatHKU83TzH drHwBJWJBbqhptMEhxi84xUVkX/7jghhhx6YqDYqgBITVSIXk+SSUZ1OlZ27jfl4 CZro+xl71taa6PwY7l4wP5um9DcJIlmNm2FU/aG+LBDwMdXr3cikPVPT6VuWSq14 44LN0hQ+701tBAKKvn1mUkVBV+9BpmY3NB3trnTJYn5yAAKI9LnMBFCDQg10F6sI ugO+RZapBxD+cuxDnShqgs2pUJlApDhxwjzlqaOTp3CUcQd1ee6KHyPBHmVtIuDY yrG3ImD/If7WvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:52 2026 by rpki-client