This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json) Hash identifier: GKSKV1H6ht25k4U2Kp6zrBoglm7tyBChe3lwdKab+eA= Subject key identifier: 8D:23:3B:CD:45:3C:22:72:1B:07:EA:C2:66:FB:2D:74:2A:E1:6C:8D Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03 Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03 Certificate serial: 019C420FA8260994CE3F2F42271F877045BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft Manifest number: 0EEF Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: HvWmKabiOZlQDe3WP1N/hfCZxGoOqJCkPV7u0e3BIas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a8:26:09:94:ce:3f:2f:42:27:1f:87:70:45:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03 Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=8d233bcd453c22721b07eac266fb2d742ae16c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:21:a0:e4:77:ae:60:8e:3a:e4:ea:04:91: e2:e9:be:4d:94:8a:23:6e:bf:ce:54:2e:a6:ce:a8: 16:e6:cb:12:ee:97:72:17:a2:9f:14:b3:8d:e2:04: e9:bb:f4:4c:77:10:08:fc:1b:7c:45:5f:58:15:4f: 7f:ce:8c:39:62:53:07:38:08:2f:8f:d1:63:fc:b2: 71:c3:22:e9:9e:36:59:d6:84:88:d8:d9:35:2e:1f: ec:be:45:16:4a:ad:f9:ab:aa:25:2b:f4:c7:9f:d5: 34:08:13:bf:1e:7a:21:db:40:1f:61:a3:11:6a:a2: 75:5c:a9:9f:f5:7e:65:0e:3f:a2:59:96:59:06:cc: 27:56:c2:2f:94:8e:4d:20:c1:6d:1f:cd:bc:58:08: 2d:97:35:e8:5c:f6:3d:36:ac:4f:cd:bb:45:40:d9: 16:92:e7:45:d0:46:ab:e0:e8:59:64:af:c3:5d:79: 0f:a9:de:08:8c:3b:1a:db:75:c5:2c:00:4e:79:47: b1:69:05:1e:f8:75:73:3b:fd:f5:27:30:2d:dd:89: d2:72:82:0a:c3:6d:7a:f1:58:8e:2b:44:76:1e:d6: 76:84:84:e0:b7:ee:9b:47:74:c0:93:ae:d7:da:05: 98:75:2b:47:03:32:58:7d:c1:25:2e:d8:7c:c7:14: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:23:3B:CD:45:3C:22:72:1B:07:EA:C2:66:FB:2D:74:2A:E1:6C:8D X509v3 Authority Key Identifier: keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:27:1a:a5:97:8d:17:72:8a:68:81:67:38:04:dd:a0:8e:e1: b7:41:ab:99:6a:7b:d6:5c:b6:76:a9:e0:85:bb:36:ca:df:2e: c4:5d:3b:94:47:41:16:f5:12:4b:44:25:08:90:95:20:83:f3: bc:f3:29:55:e9:2f:61:f3:e7:a1:7d:f5:59:f2:0c:9a:e0:82: d5:c0:83:47:d1:ff:d5:94:24:ee:1b:b3:06:b1:72:83:6d:a6: 2f:a9:7d:81:ae:fa:62:6c:73:3a:61:f9:3b:d0:7e:58:e8:da: 6c:45:58:86:54:2e:d2:ac:a1:61:e3:3f:3a:ca:1d:54:2d:8c: d3:ea:dd:2d:7e:70:c6:d6:d1:dc:9f:3b:53:87:6a:9d:42:ea: 10:f5:23:60:9d:01:14:a6:d9:6a:b2:a8:d7:76:7f:b3:26:9f: 30:c5:c3:7b:82:c5:28:2d:38:f4:5e:42:78:b7:2e:74:28:a7: 31:0e:28:50:0c:fd:b0:d5:ee:6b:bc:d5:fa:16:48:b0:8a:db: 50:8a:f7:89:d5:d0:76:bc:88:3e:02:c2:fc:81:47:00:eb:1a: f2:07:9b:88:83:d3:09:90:a2:a8:d7:d2:96:c6:1e:11:79:e3: 27:dd:23:5e:c4:7d:3f:1a:67:71:2e:11:f0:f1:bb:ad:6f:10: 09:ba:59:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6gmCZTOPy9CJx+HcEW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZTZmMTVlZjc1MjY0OWYzYjExODdkZTY4M2ZlODNiMWNl NjlmMDMwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg4ZDIzM2JjZDQ1M2MyMjcyMWIwN2VhYzI2NmZiMmQ3NDJhZTE2YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ghoOR3rmCOOuTqBJHi6b5NlIoj br/OVC6mzqgW5ssS7pdyF6KfFLON4gTpu/RMdxAI/Bt8RV9YFU9/zow5YlMHOAgv j9Fj/LJxwyLpnjZZ1oSI2Nk1Lh/svkUWSq35q6olK/THn9U0CBO/Hnoh20AfYaMR aqJ1XKmf9X5lDj+iWZZZBswnVsIvlI5NIMFtH828WAgtlzXoXPY9NqxPzbtFQNkW kudF0Ear4OhZZK/DXXkPqd4IjDsa23XFLABOeUexaQUe+HVzO/31JzAt3YnScoIK w2168ViOK0R2HtZ2hITgt+6bR3TAk67X2gWYdStHAzJYfcElLth8xxQApQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0jO81FPCJyGwfqwmb7LXQq4WyNMB8GA1UdIwQY MBaAFPHm8V73UmSfOxGH3mg/6Dsc5p8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQt NzdlNmQzNjNiMTkyLzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQtNzdlNmQzNjNiMTky LzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfycapZeN F3KKaIFnOATdoI7ht0GrmWp71ly2dqnghbs2yt8uxF07lEdBFvUSS0QlCJCVIIPz vPMpVekvYfPnoX31WfIMmuCC1cCDR9H/1ZQk7huzBrFyg22mL6l9ga76YmxzOmH5 O9B+WOjabEVYhlQu0qyhYeM/OsodVC2M0+rdLX5wxtbR3J87U4dqnULqEPUjYJ0B FKbZarKo13Z/syafMMXDe4LFKC049F5CeLcudCinMQ4oUAz9sNXua7zV+hZIsIrb UIr3idXQdryIPgLC/IFHAOsa8gebiIPTCZCiqNfSlsYeEXnjJ90jXsR9PxpncS4R 8PG7rW8QCbpZmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:16 2026 by rpki-client