This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json) Hash identifier: +wGm5eHAL37neWdq26WryPfXgZ5gix0PL7U2y7PoXJU= Subject key identifier: 43:E3:0D:DF:04:A7:7F:06:F0:C6:A4:BD:9D:EA:C0:9A:B8:D2:52:E3 Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37 Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137 Certificate serial: 019C4322B63174C3117BAA11384544315291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft Manifest number: 1351 Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: 56YTOUHYPEK0INE5kt+s9aYOm8e8BEbEams4WNxubHs=) 2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b6:31:74:c3:11:7b:aa:11:38:45:44:31:52:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137 Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=43e30ddf04a77f06f0c6a4bd9deac09ab8d252e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:ae:5e:38:9b:ca:41:82:29:99:42:ac:4b: 55:c6:5d:58:81:68:3d:c9:9f:70:eb:4e:06:92:da: e4:8b:9e:ca:7c:45:4e:58:b2:d7:b2:bc:d7:a7:77: 6a:02:f7:0f:0d:f0:79:3b:87:cd:d0:03:cc:b8:e6: 6f:e8:1b:7e:ad:5b:1d:dd:6e:73:86:9d:9f:ce:58: f3:6e:71:d7:fe:7f:d8:7a:34:bd:29:c4:c8:d7:ae: 93:67:57:fa:00:dd:43:86:18:50:4d:04:78:16:21: 46:4c:03:d5:55:07:72:f3:c3:86:1c:ee:d3:f4:92: bb:f9:2a:94:47:d0:91:f5:77:f9:a9:29:dd:26:0e: 5e:f5:18:34:07:ae:37:ca:18:e7:60:a7:99:46:53: 3b:cb:1f:1e:e0:ac:e3:f7:02:77:c8:2d:7d:23:c7: 6e:85:eb:ac:88:f1:e7:c1:bf:82:cf:42:9a:86:53: e3:37:f9:98:58:13:65:9a:9e:94:3c:aa:91:6b:bd: 76:73:2a:73:63:70:9c:c5:ee:d5:e5:80:d9:0f:a0: 8d:67:39:bd:9b:eb:48:74:6d:0e:8c:fa:5f:7e:28: 70:4c:56:15:d9:76:7f:1f:0e:18:47:33:c0:2f:fa: da:e6:81:32:48:c2:59:68:11:c0:fc:84:4b:74:fe: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:0D:DF:04:A7:7F:06:F0:C6:A4:BD:9D:EA:C0:9A:B8:D2:52:E3 X509v3 Authority Key Identifier: keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:70:70:2e:9a:2e:fa:ca:7a:30:1e:f2:23:2b:2d:eb:7d:56: ad:97:93:4e:76:82:61:9c:11:57:40:c1:19:c6:94:d4:fb:92: 48:df:87:fa:c6:19:53:ad:6e:b1:e8:78:d7:9d:9d:ba:5d:75: be:87:d2:b0:b8:ab:00:0c:aa:db:99:cf:91:ad:14:32:ad:7e: 2e:de:db:12:b5:01:e4:65:17:8d:c9:dc:24:bd:48:09:2f:e6: 35:91:44:e2:b6:f6:8f:6f:f2:b0:1b:3c:f5:57:98:86:59:90: 67:16:7f:71:67:a4:fc:30:03:b5:61:d5:8a:21:0d:c2:48:73: 30:c4:f7:32:f6:ef:db:2f:1a:b8:95:a1:72:27:70:88:8b:70: 7f:8b:59:70:8d:bf:76:5a:f9:0e:d7:8b:d0:4a:14:2d:6c:27: d0:66:06:34:d2:09:17:52:ab:bb:ae:18:4b:79:d0:f4:15:5d: 54:d8:6b:5f:d2:71:cc:7b:a5:cd:85:6d:f2:5f:48:0d:40:31: 82:b1:ad:40:bc:7c:65:e9:aa:45:0a:a2:41:cf:10:15:f3:43: 45:26:ca:e9:58:0f:2c:64:14:b3:a4:65:ee:4e:20:7c:5f:3b: 76:9f:37:01:28:bc:5c:f0:cb:91:9e:b2:fe:72:30:1d:b1:20: 4a:8d:49:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrYxdMMRe6oROEVEMVKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5 OTAxMzcwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD Eyg0M2UzMGRkZjA0YTc3ZjA2ZjBjNmE0YmQ5ZGVhYzA5YWI4ZDI1MmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNOuXjibykGCKZlCrEtVxl1YgWg9 yZ9w604Gktrki57KfEVOWLLXsrzXp3dqAvcPDfB5O4fN0APMuOZv6Bt+rVsd3W5z hp2fzljzbnHX/n/YejS9KcTI166TZ1f6AN1DhhhQTQR4FiFGTAPVVQdy88OGHO7T 9JK7+SqUR9CR9Xf5qSndJg5e9Rg0B643yhjnYKeZRlM7yx8e4Kzj9wJ3yC19I8du heusiPHnwb+Cz0KahlPjN/mYWBNlmp6UPKqRa712cypzY3Ccxe7V5YDZD6CNZzm9 m+tIdG0OjPpffihwTFYV2XZ/Hw4YRzPAL/ra5oEySMJZaBHA/IRLdP7SWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPjDd8Ep38G8MakvZ3qwJq40lLjMB8GA1UdIwQY MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnBwLpou +sp6MB7yIyst631WrZeTTnaCYZwRV0DBGcaU1PuSSN+H+sYZU61useh4152dul11 vofSsLirAAyq25nPka0UMq1+Lt7bErUB5GUXjcncJL1ICS/mNZFE4rb2j2/ysBs8 9VeYhlmQZxZ/cWek/DADtWHViiENwkhzMMT3Mvbv2y8auJWhcidwiItwf4tZcI2/ dlr5DteL0EoULWwn0GYGNNIJF1Kru64YS3nQ9BVdVNhrX9JxzHulzYVt8l9IDUAx grGtQLx8ZemqRQqiQc8QFfNDRSbK6VgPLGQUs6Rl7k4gfF87dp83ASi8XPDLkZ6y /nIwHbEgSo1Jkw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:05 2026 by rpki-client