This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json) Hash identifier: BUm5xOHwpT/TzP7FPj6IBPQIes07qdMIUkVfzxQyK7k= Subject key identifier: 5E:10:A1:43:13:90:34:E0:77:69:1F:AF:A3:0F:7D:2F:E3:76:D8:4F Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9 Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9 Certificate serial: 019C43225B147F5933670664D065CFBE6891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft Manifest number: 14CB Signing time: Mon 09 Feb 2026 16:00:50 +0000 Manifest this update: Mon 09 Feb 2026 16:00:50 +0000 Manifest next update: Tue 10 Feb 2026 16:00:50 +0000 Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: 1GDLRfG3BBGEbc87qzT4SV1qibBXb7jOiumZ//ZYUw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5b:14:7f:59:33:67:06:64:d0:65:cf:be:68:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9 Validity Not Before: Feb 9 16:00:50 2026 GMT Not After : Feb 10 16:00:50 2026 GMT Subject: CN=5e10a143139034e077691fafa30f7d2fe376d84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b2:69:d6:54:0f:5b:fb:fa:25:f8:2f:8f:75: 15:6e:e2:d6:71:96:3f:0e:b5:02:3d:1b:d1:8f:88: 42:3e:5b:11:49:fc:6c:0a:8f:75:98:bc:01:a2:64: 10:57:b2:a0:29:68:b7:11:13:a9:20:60:9a:90:82: c7:54:01:bd:f4:57:bc:5a:81:4d:de:21:6a:95:4c: ad:ab:2c:cf:39:92:67:7e:73:bd:a6:3b:32:18:11: 9c:65:ae:6b:40:ce:c7:f2:bc:ff:3f:e1:37:8c:a9: f1:2a:4d:ba:3a:49:03:73:ef:28:60:ac:5b:1f:11: ca:2c:08:0b:41:ec:08:c8:0d:75:00:f3:ad:a0:35: 84:95:fc:9a:38:18:35:ca:66:93:ef:93:10:96:71: cf:06:70:b4:f8:c9:a9:eb:a1:ff:20:12:03:52:7d: 51:0a:b8:1d:c1:01:3b:70:76:7e:05:2b:3c:99:98: 93:47:17:19:d9:bf:1d:dd:e6:47:85:ce:33:bd:32: 78:63:e9:35:e2:f8:e7:61:a1:b2:3e:3d:a3:8d:95: 57:cd:b8:72:c0:cb:e6:85:f1:24:0c:48:3d:71:e2: 98:be:18:a5:35:a8:5b:06:bd:eb:dc:c9:79:f2:02: f2:e1:4b:90:58:00:c1:af:0f:4f:7a:3b:31:68:c9: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:10:A1:43:13:90:34:E0:77:69:1F:AF:A3:0F:7D:2F:E3:76:D8:4F X509v3 Authority Key Identifier: keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ae:73:71:e3:72:26:8a:57:ff:7d:0b:2b:24:fa:ea:1f:4f: 83:16:8a:ff:65:30:9f:7e:48:25:96:e6:ff:8a:4e:1e:39:b5: 53:89:d9:44:2b:7b:ba:5f:5a:ad:43:13:87:f6:4d:4f:e2:a3: 77:87:aa:cd:af:1e:2a:b8:09:4a:53:83:77:48:48:5e:8c:1e: 6d:80:e5:88:68:7f:44:bb:05:65:23:38:86:f0:74:3b:bf:cc: 52:7b:64:bc:59:14:41:93:c7:d7:95:1a:f2:68:76:5e:01:9d: 5d:ce:a6:3c:75:e8:32:07:38:4a:64:36:ea:2c:6e:c0:c8:0a: 09:1b:83:2c:73:92:76:28:c1:29:f8:24:89:15:38:09:eb:6d: 40:12:53:fe:b0:04:0f:61:43:bf:af:93:cd:73:6b:6a:2b:33: 44:4b:8f:83:9e:02:81:f2:08:e0:3a:79:8d:a3:08:72:6b:91: 39:06:73:25:83:5d:db:b2:b7:1b:a2:c9:ce:51:c4:a9:06:a2: 52:80:3b:05:64:37:8a:b5:f9:8f:e9:24:d1:4a:75:f6:6e:c8: 7c:44:6a:f4:cd:1f:6d:0c:c3:25:10:29:05:81:a6:b6:33:4d: 4f:96:c1:79:aa:60:59:75:9f:c3:f6:6f:96:3b:b2:83:35:ee: 99:22:de:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlsUf1kzZwZk0GXPvmiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz NDUyZDkwHhcNMjYwMjA5MTYwMDUwWhcNMjYwMjEwMTYwMDUwWjAzMTEwLwYDVQQD Eyg1ZTEwYTE0MzEzOTAzNGUwNzc2OTFmYWZhMzBmN2QyZmUzNzZkODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LJp1lQPW/v6Jfgvj3UVbuLWcZY/ DrUCPRvRj4hCPlsRSfxsCo91mLwBomQQV7KgKWi3EROpIGCakILHVAG99Fe8WoFN 3iFqlUytqyzPOZJnfnO9pjsyGBGcZa5rQM7H8rz/P+E3jKnxKk26OkkDc+8oYKxb HxHKLAgLQewIyA11APOtoDWElfyaOBg1ymaT75MQlnHPBnC0+Mmp66H/IBIDUn1R CrgdwQE7cHZ+BSs8mZiTRxcZ2b8d3eZHhc4zvTJ4Y+k14vjnYaGyPj2jjZVXzbhy wMvmhfEkDEg9ceKYvhilNahbBr3r3Ml58gLy4UuQWADBrw9PejsxaMkTFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4QoUMTkDTgd2kfr6MPfS/jdthPMB8GA1UdIwQY MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa5zceNy JopX/30LKyT66h9PgxaK/2Uwn35IJZbm/4pOHjm1U4nZRCt7ul9arUMTh/ZNT+Kj d4eqza8eKrgJSlODd0hIXowebYDliGh/RLsFZSM4hvB0O7/MUntkvFkUQZPH15Ua 8mh2XgGdXc6mPHXoMgc4SmQ26ixuwMgKCRuDLHOSdijBKfgkiRU4CettQBJT/rAE D2FDv6+TzXNraiszREuPg54CgfII4Dp5jaMIcmuROQZzJYNd27K3G6LJzlHEqQai UoA7BWQ3irX5j+kk0Up19m7IfERq9M0fbQzDJRApBYGmtjNNT5bBeapgWXWfw/Zv ljuygzXumSLecA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:52 2026 by rpki-client