This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json) Hash identifier: JX7C7ks7/GUGafVN3LzCm1OvJ+wfGa7zZMRf7B1DI5Y= Subject key identifier: 90:B1:C3:9B:3B:F4:05:79:B0:98:A3:22:2A:FA:EF:25:9B:B2:BC:63 Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Certificate serial: 019C432222D29D48D4350063B10C70C3BC45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: KEVzLpiIlZvYuzak8r2VEN0lblo.roa (hash: vPPG7HusI8DfbdkDC9LeEMSZP0GfYBRUhRWHNDe+9aA=) 2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: +8838E7RCvtM/TehY+henLfY2qVdgrPbtFT6GtJY+a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:22:d2:9d:48:d4:35:00:63:b1:0c:70:c3:bc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=90b1c39b3bf40579b098a3222afaef259bb2bc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:ea:fa:b7:9b:c2:66:23:f4:a4:f3:c9:9a: c6:7d:66:25:f5:7f:98:fc:cd:3d:b7:28:d9:5a:bd: 24:e2:aa:f2:70:60:66:ba:e3:ee:dd:39:99:33:53: 16:f8:40:8f:0c:ba:92:6f:c6:1f:58:2d:db:d6:ec: 50:03:f6:03:72:4a:64:49:52:fd:73:91:67:e8:da: dd:dd:84:bf:5f:a9:a1:87:f5:a1:8e:d1:a9:12:89: 45:95:ee:57:37:92:45:c0:a6:86:09:67:68:ac:f2: 4f:a4:22:07:7a:1f:6e:b0:dd:b1:f3:ab:55:b6:f7: 40:df:34:f7:2b:1b:a7:b7:aa:b2:4f:ad:18:07:32: 95:d1:fb:08:93:ab:90:42:47:a6:7e:bc:a0:1d:bf: c2:c5:7a:6e:67:85:b3:36:e7:41:09:14:d4:6d:bb: d6:9a:7d:8c:58:24:df:ec:55:01:e5:e6:f9:39:10: 18:0e:27:82:04:7e:fc:d4:2d:ae:c1:62:f8:a8:f5: d6:85:95:d9:d3:5b:c7:47:a6:6c:ee:32:59:ca:a4: 62:90:c3:0b:b7:64:0b:f6:d0:e4:bd:36:8a:91:af: ee:33:75:76:49:24:cd:80:23:25:c0:2c:83:74:5c: 07:0a:ee:6f:58:2a:d9:1d:42:3e:c9:27:79:94:d5: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:C3:9B:3B:F4:05:79:B0:98:A3:22:2A:FA:EF:25:9B:B2:BC:63 X509v3 Authority Key Identifier: keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:be:38:bb:88:96:1a:53:2a:b7:db:5b:06:28:1a:e8:d5:f5: e3:32:6d:aa:86:9a:d8:23:e9:7e:55:dc:61:22:b9:03:dd:a0: d1:31:85:a4:f3:5c:b1:5c:5d:76:72:48:7d:47:8b:45:43:30: d3:70:38:8b:3d:b2:4f:c8:b2:a3:34:72:7b:54:b2:09:c3:39: f9:d3:7c:cd:1c:9a:54:a6:eb:a4:e7:b0:fc:3b:fe:a0:c1:90: cb:3d:df:0a:69:80:ea:af:48:64:16:c0:68:0f:61:cf:71:07: 0f:e0:c4:96:07:f9:9e:c3:11:45:da:e9:61:cf:78:ac:28:e5: 8f:25:0b:66:52:0b:6f:7b:ab:18:df:9f:7d:c8:a0:3f:73:a7: 61:e6:d2:41:ef:8a:51:21:d7:44:80:c3:f5:8a:4a:80:c6:e7: 4c:c6:07:63:92:30:e6:26:3b:fe:37:c7:a1:cb:3d:31:92:41: 67:4e:26:0d:89:66:a6:a9:9d:66:a9:89:3c:8c:b0:19:8e:62: 8c:94:81:0d:6c:5a:ae:2b:70:9d:56:8b:f8:0f:a6:e1:a6:fa: 2a:cf:57:42:c2:20:93:6a:3e:06:7c:d9:4b:f2:f2:59:b4:8b: fa:47:f5:2c:79:82:fb:1f:6b:7e:67:84:21:09:c2:7e:14:12: e7:a4:d6:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiLSnUjUNQBjsQxww7xFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1 NWVkODMwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD Eyg5MGIxYzM5YjNiZjQwNTc5YjA5OGEzMjIyYWZhZWYyNTliYjJiYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKPq+rebwmYj9KTzyZrGfWYl9X+Y /M09tyjZWr0k4qrycGBmuuPu3TmZM1MW+ECPDLqSb8YfWC3b1uxQA/YDckpkSVL9 c5Fn6Nrd3YS/X6mhh/WhjtGpEolFle5XN5JFwKaGCWdorPJPpCIHeh9usN2x86tV tvdA3zT3Kxunt6qyT60YBzKV0fsIk6uQQkemfrygHb/CxXpuZ4WzNudBCRTUbbvW mn2MWCTf7FUB5eb5ORAYDieCBH781C2uwWL4qPXWhZXZ01vHR6Zs7jJZyqRikMML t2QL9tDkvTaKka/uM3V2SSTNgCMlwCyDdFwHCu5vWCrZHUI+ySd5lNU3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCxw5s79AV5sJijIir67yWbsrxjMB8GA1UdIwQY MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs744u4iW GlMqt9tbBiga6NX14zJtqoaa2CPpflXcYSK5A92g0TGFpPNcsVxddnJIfUeLRUMw 03A4iz2yT8iyozRye1SyCcM5+dN8zRyaVKbrpOew/Dv+oMGQyz3fCmmA6q9IZBbA aA9hz3EHD+DElgf5nsMRRdrpYc94rCjljyULZlILb3urGN+ffcigP3OnYebSQe+K USHXRIDD9YpKgMbnTMYHY5Iw5iY7/jfHocs9MZJBZ04mDYlmpqmdZqmJPIywGY5i jJSBDWxaritwnVaL+A+m4ab6Ks9XQsIgk2o+BnzZS/LyWbSL+kf1LHmC+x9rfmeE IQnCfhQS56TW6A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:29 2026 by rpki-client