This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json) Hash identifier: UNbtAaLb9bQg3j20djlKFGoPBgF0z3oO/Xs6WSiyyM8= Subject key identifier: F7:7A:F4:00:1C:5B:77:88:F9:D4:D8:8C:D4:24:C7:95:55:6F:30:AB Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a Certificate serial: 019C43907A196E6957E62868C849025A5A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft Manifest number: 058F Signing time: Mon 09 Feb 2026 18:01:07 +0000 Manifest this update: Mon 09 Feb 2026 18:01:07 +0000 Manifest next update: Tue 10 Feb 2026 18:01:07 +0000 Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: ynfzJktF+72r/TxWMedIVcE9tbK7k88tctvcehDrC0A=) 2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:7a:19:6e:69:57:e6:28:68:c8:49:02:5a:5a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a Validity Not Before: Feb 9 18:01:07 2026 GMT Not After : Feb 10 18:01:07 2026 GMT Subject: CN=f77af4001c5b7788f9d4d88cd424c795556f30ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:e8:9b:7d:26:08:4c:b0:4d:ba:17:44:33: cb:7e:93:0c:3c:b1:14:26:ab:8e:b5:94:63:be:31: 93:46:b7:fa:0e:64:ab:d3:26:73:a6:11:b1:bb:da: 98:fc:af:b1:4d:53:c3:dc:53:3a:84:d3:08:18:76: 20:82:2f:f0:8e:92:47:7e:24:fa:d3:79:c3:65:00: e9:e3:88:8f:52:34:3e:41:bb:43:6a:52:c3:a7:68: 4a:4e:bd:df:d3:01:2a:88:d8:9f:84:9e:c5:2a:5e: 0d:4d:ee:e5:6f:55:d7:0b:9a:45:58:72:91:39:c4: 5e:62:dd:b4:80:eb:6b:29:8a:35:64:59:13:18:eb: d1:c4:79:48:3c:7c:e7:c3:11:32:35:da:dc:ff:b4: f5:77:19:7f:44:7c:1e:e0:e7:5c:2c:c6:2e:6a:69: cf:5e:e2:0d:b6:2f:7f:fa:57:3d:60:29:20:d9:74: 77:25:10:73:9b:a1:69:fd:4c:e7:02:81:a2:8d:10: 96:c9:7c:2a:dc:f9:c7:c1:1f:be:86:b0:8d:ac:2a: 23:a8:59:be:41:ce:8f:12:8c:e1:fa:44:cb:19:ee: 0d:a7:c1:07:0c:bd:aa:89:a3:cd:49:d4:05:65:9a: ee:cf:b4:bf:2a:8d:d9:58:c8:11:85:03:e6:41:2c: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7A:F4:00:1C:5B:77:88:F9:D4:D8:8C:D4:24:C7:95:55:6F:30:AB X509v3 Authority Key Identifier: keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:71:ae:0e:0b:d4:ac:c4:79:4b:39:a4:ce:a3:fe:06:7b:e4: 35:43:12:2e:f5:73:f0:2b:31:ba:5d:d5:1e:a4:79:35:e9:23: 45:e2:93:47:15:96:71:77:fd:1a:ae:aa:00:21:ad:5b:36:a9: 47:d1:a6:91:f4:ad:c2:09:c2:2f:68:d0:71:e5:91:74:95:23: 0e:07:33:80:bd:bc:ca:33:6b:30:27:5a:5e:c7:3b:2f:9c:ab: fe:2c:36:35:63:d3:23:80:38:02:77:6e:01:08:6d:56:b5:bc: 68:be:2d:2d:05:04:15:4d:0a:97:7c:24:c2:cd:06:03:5f:bd: d6:67:3e:9b:bd:a1:16:6b:4b:e6:9f:9a:64:17:b8:7b:4b:f5: f6:fc:34:b8:02:15:dc:e3:ac:f2:f0:d4:07:71:a6:12:8c:15: 96:04:62:f9:0f:d7:bb:e1:6c:2f:8b:0b:a0:c7:0a:82:c7:f4: 69:95:ec:86:4c:0c:98:5a:0f:91:ec:a3:d7:fe:1f:73:48:89: 11:d4:7b:1e:4b:05:8a:9a:ce:5a:57:51:b6:db:40:96:a3:6d: 4c:50:cd:9a:0a:8d:ba:72:ef:0a:cd:3a:9d:d8:b1:22:61:f7: 5c:38:8b:58:00:4e:d2:df:0c:d1:b1:32:25:e9:53:9d:12:d8: 91:11:db:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHoZbmlX5ihoyEkCWloQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw YzcyMmEwHhcNMjYwMjA5MTgwMTA3WhcNMjYwMjEwMTgwMTA3WjAzMTEwLwYDVQQD EyhmNzdhZjQwMDFjNWI3Nzg4ZjlkNGQ4OGNkNDI0Yzc5NTU1NmYzMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsajom30mCEywTboXRDPLfpMMPLEU JquOtZRjvjGTRrf6DmSr0yZzphGxu9qY/K+xTVPD3FM6hNMIGHYggi/wjpJHfiT6 03nDZQDp44iPUjQ+QbtDalLDp2hKTr3f0wEqiNifhJ7FKl4NTe7lb1XXC5pFWHKR OcReYt20gOtrKYo1ZFkTGOvRxHlIPHznwxEyNdrc/7T1dxl/RHwe4OdcLMYuamnP XuINti9/+lc9YCkg2XR3JRBzm6Fp/UznAoGijRCWyXwq3PnHwR++hrCNrCojqFm+ Qc6PEozh+kTLGe4Np8EHDL2qiaPNSdQFZZruz7S/Ko3ZWMgRhQPmQSykDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd69AAcW3eI+dTYjNQkx5VVbzCrMB8GA1UdIwQY MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnGuDgvU rMR5SzmkzqP+BnvkNUMSLvVz8Csxul3VHqR5NekjReKTRxWWcXf9Gq6qACGtWzap R9GmkfStwgnCL2jQceWRdJUjDgczgL28yjNrMCdaXsc7L5yr/iw2NWPTI4A4Andu AQhtVrW8aL4tLQUEFU0Kl3wkws0GA1+91mc+m72hFmtL5p+aZBe4e0v19vw0uAIV 3OOs8vDUB3GmEowVlgRi+Q/Xu+FsL4sLoMcKgsf0aZXshkwMmFoPkeyj1/4fc0iJ EdR7HksFiprOWldRtttAlqNtTFDNmgqNunLvCs06ndixImH3XDiLWABO0t8M0bEy JelTnRLYkRHbNQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:12 2026 by rpki-client