This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json) Hash identifier: AhRGknlqIb8bCs9dVtbls9UdkJtoERLVbCteRAXurk4= Subject key identifier: 8F:84:FB:7E:5F:94:ED:EA:99:BB:7D:F9:46:A1:F5:6E:BC:08:12:3A Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce Certificate serial: 019C4322CA476CC003ED57C1A342576D555C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa (hash: 9bdrQrsfFHUHU7k9g9RNN8b9Hzrdzx2GE2UfmdhgdoI=) 2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: jI/1z83W+rmjFpADIv2FMz+MFonxvcM+tJWMQL8C0xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ca:47:6c:c0:03:ed:57:c1:a3:42:57:6d:55:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=8f84fb7e5f94edea99bb7df946a1f56ebc08123a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:4a:70:f6:74:1c:be:bb:c2:fa:94:c6:ee: f3:91:95:54:bd:b2:7a:1e:54:c4:70:05:16:cf:09: 66:73:ae:f3:ab:05:50:0f:22:b2:01:8b:63:dd:2b: a0:bf:5b:a2:18:f1:db:d3:e7:11:24:6b:9e:29:02: 73:00:c5:6f:86:d5:4f:10:7f:18:66:e9:77:5b:87: de:ef:6f:3f:24:c6:c4:d6:d1:25:e9:f6:33:c6:cf: 7a:c9:73:40:71:c6:4a:82:8b:e0:aa:cc:bf:53:e8: 9d:c4:b6:db:39:4e:a4:af:fd:cb:a6:fe:3d:b0:df: 50:a3:d0:5b:2c:4a:ad:50:a6:73:42:7e:1a:a6:e8: 54:df:db:02:c5:d1:e9:93:57:35:f9:eb:fc:c2:1c: 41:20:22:a2:df:79:0b:57:4b:58:92:21:72:5c:44: e1:db:ba:1c:3d:03:15:cd:22:6b:25:67:23:6d:d9: 60:f1:e3:8c:61:06:03:f1:54:d3:5d:78:2b:6a:4e: e1:7f:c9:66:a1:23:2c:d2:1b:32:13:22:29:d6:16: b8:08:d9:6b:89:21:80:58:c7:0a:0f:3b:3f:9d:f3: 5f:4d:00:0c:4c:2e:2a:3d:6f:14:bd:3a:65:ac:97: a5:c4:ca:57:b5:11:d3:e7:26:ac:a8:c4:e8:b4:1e: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:84:FB:7E:5F:94:ED:EA:99:BB:7D:F9:46:A1:F5:6E:BC:08:12:3A X509v3 Authority Key Identifier: keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7a:48:df:66:f0:34:f1:d7:41:37:a6:99:4a:b3:c6:f8:11: 93:f8:d3:07:cc:bb:e9:61:90:f8:3b:68:37:33:6b:94:57:bc: fb:14:b1:9f:bb:ed:c0:42:9c:f0:aa:b0:89:38:18:7c:4a:dd: a4:bd:cf:0b:23:08:d5:e0:13:9f:35:54:9e:d1:56:2d:31:a8: 74:d0:f8:7f:e9:6f:9e:08:e4:a4:a7:14:f5:bf:d6:cb:81:ec: 17:27:9d:3a:1b:45:57:ff:cc:cb:e8:e1:55:f2:84:5a:b2:f5: b3:4f:cf:02:ec:4c:af:6c:8c:62:10:12:ed:7b:74:7e:b5:d7: 04:06:fe:c2:c4:4a:1f:34:97:7a:f7:76:2b:19:8a:98:e3:00: ad:84:c3:1e:b2:b7:b9:43:90:34:79:14:b5:3e:60:a3:34:da: 2b:05:0f:ae:f6:8e:9f:9f:43:ae:2f:8e:cd:71:e4:f7:b0:96: 35:c5:2d:56:62:8c:22:f2:81:d7:80:f6:35:3a:cd:57:96:ac: 6a:c0:25:26:7d:28:c6:c0:8a:79:bd:59:e2:87:e3:9b:4b:4e: a6:60:b3:d8:b4:d3:95:97:76:77:53:04:fb:20:61:b4:81:f9: d5:ea:89:f8:af:90:5a:99:3a:c2:14:f3:94:73:27:c4:89:e3: ca:b9:f3:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIspHbMAD7VfBo0JXbVVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNGYzMTU3NTk5YjY2ZjI4Y2JjNWEyZWVkMzZmYmEyM2Yw M2QyY2UwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD Eyg4Zjg0ZmI3ZTVmOTRlZGVhOTliYjdkZjk0NmExZjU2ZWJjMDgxMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLJKcPZ0HL67wvqUxu7zkZVUvbJ6 HlTEcAUWzwlmc67zqwVQDyKyAYtj3Sugv1uiGPHb0+cRJGueKQJzAMVvhtVPEH8Y Zul3W4fe728/JMbE1tEl6fYzxs96yXNAccZKgovgqsy/U+idxLbbOU6kr/3Lpv49 sN9Qo9BbLEqtUKZzQn4apuhU39sCxdHpk1c1+ev8whxBICKi33kLV0tYkiFyXETh 27ocPQMVzSJrJWcjbdlg8eOMYQYD8VTTXXgrak7hf8lmoSMs0hsyEyIp1ha4CNlr iSGAWMcKDzs/nfNfTQAMTC4qPW8UvTplrJelxMpXtRHT5yasqMTotB6h2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+E+35flO3qmbt9+Uah9W68CBI6MB8GA1UdIwQY MBaAFKxPMVdZm2byjLxaLu02+6I/A9LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjIt MjUwOTgwZTc1YmRmLzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjItMjUwOTgwZTc1YmRm LzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnpI32bw NPHXQTemmUqzxvgRk/jTB8y76WGQ+DtoNzNrlFe8+xSxn7vtwEKc8KqwiTgYfErd pL3PCyMI1eATnzVUntFWLTGodND4f+lvngjkpKcU9b/Wy4HsFyedOhtFV//My+jh VfKEWrL1s0/PAuxMr2yMYhAS7Xt0frXXBAb+wsRKHzSXevd2KxmKmOMArYTDHrK3 uUOQNHkUtT5gozTaKwUPrvaOn59Dri+OzXHk97CWNcUtVmKMIvKB14D2NTrNV5as asAlJn0oxsCKeb1Z4ofjm0tOpmCz2LTTlZd2d1ME+yBhtIH51eqJ+K+QWpk6whTz lHMnxInjyrnzQw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:27 2026 by rpki-client