This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json) Hash identifier: 85GIK7wUV4t062ZHVhUb6nemFk1EUU/EE37lZ9PK3Xg= Subject key identifier: E0:FB:8F:A0:74:46:56:53:64:95:9D:97:E7:90:BE:0D:9F:DA:51:B4 Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48 Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48 Certificate serial: 019C4133A5CF69CD3A3B0DE43A870BF4273F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft Manifest number: 1766 Signing time: Mon 09 Feb 2026 07:00:29 +0000 Manifest this update: Mon 09 Feb 2026 07:00:29 +0000 Manifest next update: Tue 10 Feb 2026 07:00:29 +0000 Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: k++3Vr7z6xR118GST+4ZiUFWlkLJfhTI7/DQXXC9QSA=) 2: XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa (hash: PLd3AjjjU/YjEzgvUwnUvjyB10O7EBQqmUUYsFik7AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:a5:cf:69:cd:3a:3b:0d:e4:3a:87:0b:f4:27:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48 Validity Not Before: Feb 9 07:00:29 2026 GMT Not After : Feb 10 07:00:29 2026 GMT Subject: CN=e0fb8fa07446565364959d97e790be0d9fda51b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:8f:b0:76:57:1c:32:8f:a3:99:3d:87:c2: 18:dc:63:3b:f3:e7:11:2a:51:68:f8:b6:d5:a8:d0: bf:d1:63:c6:ab:71:d1:08:58:bd:b6:2d:56:51:8b: 81:70:7b:95:49:d3:c6:a0:de:3c:25:78:c3:fc:ca: 22:76:8f:a3:98:49:79:48:6d:4c:b5:5f:29:d5:4a: c9:a8:70:fc:dd:0a:ee:8a:0a:d3:79:1c:7a:e3:9a: 7b:d2:7e:08:a3:f4:b4:2c:14:c2:98:b7:6e:8b:0c: c7:65:2a:4b:aa:77:bf:3b:0b:83:82:c5:7d:dd:61: cd:d5:d4:ad:c3:ae:b4:8a:9b:49:e0:3e:79:27:ff: 12:16:0a:e7:8d:8f:9d:dc:5d:42:9a:6b:72:00:f0: 72:98:29:ea:c1:7f:6c:04:a1:60:f5:3f:11:2f:39: d7:9d:ea:65:e5:11:e7:8c:fe:4e:44:95:84:20:7d: e5:82:cd:a0:52:8e:e3:a8:a4:0f:6d:cc:d4:b6:3c: dc:de:af:96:20:a7:49:7d:19:f5:c7:97:d9:ab:d7: 8c:75:35:1e:4e:55:5c:72:b8:ff:3c:3c:00:19:78: 72:b4:41:56:f6:82:2b:cd:25:28:62:cb:b3:be:bc: fd:26:7a:98:50:c0:a9:1e:c1:83:c7:04:82:ad:29: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FB:8F:A0:74:46:56:53:64:95:9D:97:E7:90:BE:0D:9F:DA:51:B4 X509v3 Authority Key Identifier: keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:61:25:1a:c5:d6:84:79:71:a9:8f:4b:03:c4:fc:de:c7:c2: fa:59:a6:82:29:3f:ec:e7:98:04:58:56:32:49:55:f3:cd:6e: 16:b8:f3:62:60:1c:67:1a:de:48:76:b4:18:3b:27:f1:29:a7: 29:b3:05:8f:71:cb:b3:c0:96:18:04:65:3f:d1:ae:1c:7c:f5: 72:d9:97:3b:d5:bb:95:5a:5c:06:e5:63:6f:cd:c9:39:10:30: 22:1f:ce:37:6b:18:54:3a:a8:47:77:3b:3b:24:a4:d0:6a:13: 80:8b:dd:30:b2:cb:7f:ae:1c:99:6b:6d:9a:3e:40:0a:fd:5b: 2d:7f:3c:7c:85:34:b5:bc:3b:77:fb:81:fd:f8:df:d7:b2:ce: 62:f6:5a:57:53:d5:dc:1f:24:bf:70:e3:48:2f:0d:f7:16:7e: 1b:b3:78:6b:bc:b1:65:12:69:15:94:a0:7c:d4:d1:ce:b4:4e: 7c:ad:ff:e3:cf:58:34:9c:4f:48:ec:df:92:a4:67:63:c6:b9: 70:99:ab:3b:8e:f0:e3:d7:d4:4f:ab:88:ca:2f:86:ee:24:e2: 88:94:de:33:0b:a2:8d:59:5b:6e:60:86:ef:37:cf:ac:34:6d: ba:d3:17:f9:79:94:54:3f:85:93:dd:d1:52:0f:19:23:40:d3: 91:8a:78:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM6XPac06Ow3kOocL9Cc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzhlZDQ2NmRlMmU2Y2E1OTY0ZDFlZWQwZjI0MGRkZDI1 MWRlNDgwHhcNMjYwMjA5MDcwMDI5WhcNMjYwMjEwMDcwMDI5WjAzMTEwLwYDVQQD EyhlMGZiOGZhMDc0NDY1NjUzNjQ5NTlkOTdlNzkwYmUwZDlmZGE1MWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYKPsHZXHDKPo5k9h8IY3GM78+cR KlFo+LbVqNC/0WPGq3HRCFi9ti1WUYuBcHuVSdPGoN48JXjD/Moido+jmEl5SG1M tV8p1UrJqHD83QruigrTeRx645p70n4Io/S0LBTCmLduiwzHZSpLqne/OwuDgsV9 3WHN1dStw660iptJ4D55J/8SFgrnjY+d3F1CmmtyAPBymCnqwX9sBKFg9T8RLznX nepl5RHnjP5ORJWEIH3lgs2gUo7jqKQPbczUtjzc3q+WIKdJfRn1x5fZq9eMdTUe TlVccrj/PDwAGXhytEFW9oIrzSUoYsuzvrz9JnqYUMCpHsGDxwSCrSkTiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD7j6B0RlZTZJWdl+eQvg2f2lG0MB8GA1UdIwQY MBaAFB/I7UZt4ubKWWTR7tDyQN3SUd5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jYTJhY2UtOTRhZC00NGNiLTk4MDkt ZjQ4ZDRiYWJkNTBmLzEvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jYTJhY2UtOTRhZC00NGNiLTk4MDktZjQ4ZDRiYWJkNTBm LzEvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmElGsXW hHlxqY9LA8T83sfC+lmmgik/7OeYBFhWMklV881uFrjzYmAcZxreSHa0GDsn8Smn KbMFj3HLs8CWGARlP9GuHHz1ctmXO9W7lVpcBuVjb83JORAwIh/ON2sYVDqoR3c7 OySk0GoTgIvdMLLLf64cmWttmj5ACv1bLX88fIU0tbw7d/uB/fjf17LOYvZaV1PV 3B8kv3DjSC8N9xZ+G7N4a7yxZRJpFZSgfNTRzrROfK3/489YNJxPSOzfkqRnY8a5 cJmrO47w49fUT6uIyi+G7iTiiJTeMwuijVlbbmCG7zfPrDRtutMX+XmUVD+Fk93R Ug8ZI0DTkYp4NQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:46 2026 by rpki-client