This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json) Hash identifier: OOHuzrneyb6A1YRi0Gcx5VNN3YbAzbnPVBstUeG7OdY= Subject key identifier: 0F:1C:57:DA:39:1E:65:BC:3C:23:0D:23:09:4C:D6:7D:0E:EC:C4:C8 Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Certificate serial: 019C416AD57F1EA456C5B7B271601A79A30C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft Manifest number: 124A Signing time: Mon 09 Feb 2026 08:00:46 +0000 Manifest this update: Mon 09 Feb 2026 08:00:46 +0000 Manifest next update: Tue 10 Feb 2026 08:00:46 +0000 Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: uKNc7cDsQlV2sMbPW5QUqUeg7oLOQV8ZFD+u8basp5g=) 2: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (hash: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:d5:7f:1e:a4:56:c5:b7:b2:71:60:1a:79:a3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Validity Not Before: Feb 9 08:00:46 2026 GMT Not After : Feb 10 08:00:46 2026 GMT Subject: CN=0f1c57da391e65bc3c230d23094cd67d0eecc4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:64:64:bf:00:4d:07:19:93:83:54:34:1e: 8e:f7:e2:1f:fb:90:c6:bd:00:1f:1c:03:48:0a:b1: 2a:3b:14:8a:a9:25:92:d3:2e:b8:6e:0a:bf:b6:c9: 04:78:21:e3:4e:12:70:08:c5:d7:c4:52:38:01:3f: f8:7e:f4:5a:64:fa:7b:8a:76:f0:fe:37:7c:1f:b1: 03:8c:4e:43:31:b7:84:60:fa:7a:35:ba:d1:82:be: f4:ff:64:f8:11:36:72:af:27:2a:d2:7d:82:d4:b6: 8f:ea:19:67:a7:95:83:1f:cc:3d:d1:50:8f:27:d4: 09:b7:32:09:41:71:be:b5:10:89:41:5b:fb:4c:9f: 22:16:0c:52:af:7e:51:f8:2c:e7:de:b2:2b:fc:2c: d0:81:4f:e5:bb:1b:1f:22:b9:35:b2:10:94:73:6d: 76:8e:19:46:39:64:ce:ca:7d:13:ea:27:de:15:36: 9b:9f:1d:10:1f:56:69:ad:cc:57:e3:46:9a:d2:b4: 2b:f1:68:d3:15:88:60:06:32:1e:48:b9:46:93:ed: 7e:11:67:a5:a0:f1:73:40:50:2e:d3:b6:cf:9c:81: 2c:57:1c:87:ea:ba:c9:9c:40:95:25:4e:da:6a:a8: ac:68:98:f1:1c:59:68:15:75:4d:35:c3:03:52:23: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1C:57:DA:39:1E:65:BC:3C:23:0D:23:09:4C:D6:7D:0E:EC:C4:C8 X509v3 Authority Key Identifier: keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c6:f5:68:50:51:64:e6:9c:fd:96:1c:d2:ec:e8:2c:dd:d3: 92:98:28:34:95:60:b2:ef:b0:bf:52:fc:24:62:7a:ba:9f:57: b5:22:f3:ea:f6:ef:2f:2d:07:fc:74:7f:ac:95:56:da:56:b1: ed:61:0b:f9:70:e6:bd:93:b1:00:53:f8:06:0e:53:c0:38:84: 89:94:16:01:d5:6b:57:4f:fc:fb:b6:47:a4:79:7e:ac:9f:25: c0:1c:38:68:54:17:88:59:ce:4b:81:1a:a6:f6:65:33:cb:76: 6f:31:5a:03:2c:05:2f:18:d8:9b:1a:38:9f:42:c4:e8:44:d6: 3f:66:c5:05:83:4b:31:3f:38:6c:d7:d4:30:0f:be:dd:5b:91: 45:9c:0c:9e:47:e8:1c:37:9d:e2:f6:93:2e:b2:e9:98:35:67: 43:c0:e9:05:50:2a:64:3c:28:44:5f:f5:34:93:45:1d:fe:cc: 4e:11:80:72:b0:7f:db:e5:a7:02:41:17:76:43:44:51:b0:40: 57:1b:21:02:18:fb:f7:d7:77:8c:85:fc:2b:6e:a6:a4:40:63: bb:c8:cf:76:9c:f7:49:bc:5a:75:c7:1a:d5:bd:7f:f9:e6:4b: 1b:87:54:0c:2f:1b:59:11:16:e5:ca:21:94:76:1f:50:81:21: df:3b:59:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBatV/HqRWxbeycWAaeaMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2 MjdiZWYwHhcNMjYwMjA5MDgwMDQ2WhcNMjYwMjEwMDgwMDQ2WjAzMTEwLwYDVQQD EygwZjFjNTdkYTM5MWU2NWJjM2MyMzBkMjMwOTRjZDY3ZDBlZWNjNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHpkZL8ATQcZk4NUNB6O9+If+5DG vQAfHANICrEqOxSKqSWS0y64bgq/tskEeCHjThJwCMXXxFI4AT/4fvRaZPp7inbw /jd8H7EDjE5DMbeEYPp6NbrRgr70/2T4ETZyrycq0n2C1LaP6hlnp5WDH8w90VCP J9QJtzIJQXG+tRCJQVv7TJ8iFgxSr35R+Czn3rIr/CzQgU/luxsfIrk1shCUc212 jhlGOWTOyn0T6ifeFTabnx0QH1ZprcxX40aa0rQr8WjTFYhgBjIeSLlGk+1+EWel oPFzQFAu07bPnIEsVxyH6rrJnECVJU7aaqisaJjxHFloFXVNNcMDUiMd4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8cV9o5HmW8PCMNIwlM1n0O7MTIMB8GA1UdIwQY MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4 LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMb1aFBR ZOac/ZYc0uzoLN3TkpgoNJVgsu+wv1L8JGJ6up9XtSLz6vbvLy0H/HR/rJVW2lax 7WEL+XDmvZOxAFP4Bg5TwDiEiZQWAdVrV0/8+7ZHpHl+rJ8lwBw4aFQXiFnOS4Ea pvZlM8t2bzFaAywFLxjYmxo4n0LE6ETWP2bFBYNLMT84bNfUMA++3VuRRZwMnkfo HDed4vaTLrLpmDVnQ8DpBVAqZDwoRF/1NJNFHf7MThGAcrB/2+WnAkEXdkNEUbBA VxshAhj799d3jIX8K26mpEBju8jPdpz3Sbxadcca1b1/+eZLG4dUDC8bWREW5coh lHYfUIEh3ztZFA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:51 2026 by rpki-client