This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json) Hash identifier: ZYubh665idSYFMo/BkkMigITnSjt2sH/DVljqxalJnY= Subject key identifier: 28:B4:4B:5E:FB:1B:4C:24:1E:3D:61:B9:47:DA:D8:05:57:C6:0A:33 Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1 Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1 Certificate serial: 019C44DA43439F9DB589DBB00D7D9F7E9945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft Manifest number: 1812 Signing time: Tue 10 Feb 2026 00:01:20 +0000 Manifest this update: Tue 10 Feb 2026 00:01:20 +0000 Manifest next update: Wed 11 Feb 2026 00:01:20 +0000 Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: blFSBPyRLhci7ssvvKPcxpBpKvAqhg88VB/EBaLX3+M=) 2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:43:43:9f:9d:b5:89:db:b0:0d:7d:9f:7e:99:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1 Validity Not Before: Feb 10 00:01:20 2026 GMT Not After : Feb 11 00:01:20 2026 GMT Subject: CN=28b44b5efb1b4c241e3d61b947dad80557c60a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:57:6f:4d:cb:31:3c:7a:89:a4:0f:ac:ac: c5:11:64:85:a1:fd:46:c2:15:c0:66:0d:d8:ac:84: 4a:3f:39:88:b7:65:53:54:90:ec:ee:a8:9b:75:16: cb:e3:29:27:d4:5b:e9:92:98:60:83:9f:8a:8d:2d: f3:71:09:f6:1b:bd:16:ed:7c:d1:5f:4d:27:6f:69: 93:85:b4:b5:17:69:4b:9a:b1:55:76:3f:1d:35:ec: 2a:0f:85:2a:bb:61:79:58:f8:c3:34:c0:38:5d:52: 0e:da:cd:12:12:97:dd:29:ee:81:78:c9:fc:73:b6: ce:3e:d1:eb:4e:f0:d9:8c:d7:df:c7:5a:32:92:80: 2b:1e:08:f5:ca:fb:ab:28:71:8b:2a:40:b6:b1:8e: 60:4e:f3:68:f4:dd:97:b3:db:9d:1a:37:c4:9e:e2: 83:0f:0a:a8:bc:82:42:0e:ec:bc:aa:6d:b0:0b:45: 0c:f3:fa:57:3e:1f:af:01:a0:e7:4f:d9:1d:76:bc: e5:e4:d8:9d:23:d1:86:e7:db:3b:6b:14:97:c2:24: 9d:b5:33:60:ac:35:25:1d:91:02:ee:c5:c1:00:48: 5e:8c:46:64:d2:b3:5e:88:5e:51:d5:4b:b4:61:b3: e5:fd:15:3c:17:4a:8f:a7:b6:5c:bd:d0:30:94:c4: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:4B:5E:FB:1B:4C:24:1E:3D:61:B9:47:DA:D8:05:57:C6:0A:33 X509v3 Authority Key Identifier: keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d2:75:0c:8b:ca:a8:f3:8d:63:b0:34:ae:d6:a8:55:bf:11: 39:db:cc:fb:8c:e2:39:42:4e:0d:ac:be:1b:c7:e7:42:7d:70: ee:09:65:65:d4:25:be:3b:10:0f:68:aa:47:21:f4:5f:d1:cb: a8:99:ac:e2:62:fd:09:5f:b5:c8:5c:be:f1:8d:ac:4c:64:9f: f3:59:66:2f:90:16:cc:46:28:b9:d7:37:76:10:00:65:a4:f8: 35:41:b2:75:75:8c:9b:49:b2:16:17:f1:5e:cf:43:c9:25:ae: 44:f5:40:0d:3a:23:96:81:05:9e:79:fb:e7:c3:f3:d3:71:ff: 5d:23:df:8e:b0:90:63:12:1e:91:ff:0d:a0:e0:dc:91:44:d6: 1b:cd:c9:1c:cf:3a:e8:fd:ce:28:1b:4e:cc:13:d1:63:15:3f: 1f:24:f4:57:9c:2b:aa:64:6d:0d:56:77:95:b3:40:6a:1c:c4: 92:9b:4a:ea:0f:0e:73:7e:08:ff:eb:69:0c:fe:cd:46:90:ab: 0b:36:d8:07:1c:14:bc:5a:10:5c:0c:b1:bd:a8:0b:0d:27:8e: 36:39:70:a4:c4:ad:2f:b1:0b:32:38:ac:5f:f8:32:e3:46:46: ea:04:ca:f2:8c:d3:0c:ef:00:d6:63:0b:11:3e:fa:4e:92:04: 3d:1b:9d:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2kNDn521iduwDX2ffplFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh MDE4ZTEwHhcNMjYwMjEwMDAwMTIwWhcNMjYwMjExMDAwMTIwWjAzMTEwLwYDVQQD EygyOGI0NGI1ZWZiMWI0YzI0MWUzZDYxYjk0N2RhZDgwNTU3YzYwYTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lNXb03LMTx6iaQPrKzFEWSFof1G whXAZg3YrIRKPzmIt2VTVJDs7qibdRbL4ykn1Fvpkphgg5+KjS3zcQn2G70W7XzR X00nb2mThbS1F2lLmrFVdj8dNewqD4Uqu2F5WPjDNMA4XVIO2s0SEpfdKe6BeMn8 c7bOPtHrTvDZjNffx1oykoArHgj1yvurKHGLKkC2sY5gTvNo9N2Xs9udGjfEnuKD DwqovIJCDuy8qm2wC0UM8/pXPh+vAaDnT9kddrzl5NidI9GG59s7axSXwiSdtTNg rDUlHZEC7sXBAEhejEZk0rNeiF5R1Uu0YbPl/RU8F0qPp7ZcvdAwlMQJoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi0S177G0wkHj1huUfa2AVXxgozMB8GA1UdIwQY MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1 LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9J1DIvK qPONY7A0rtaoVb8ROdvM+4ziOUJODay+G8fnQn1w7gllZdQlvjsQD2iqRyH0X9HL qJms4mL9CV+1yFy+8Y2sTGSf81lmL5AWzEYoudc3dhAAZaT4NUGydXWMm0myFhfx Xs9DySWuRPVADTojloEFnnn758Pz03H/XSPfjrCQYxIekf8NoODckUTWG83JHM86 6P3OKBtOzBPRYxU/HyT0V5wrqmRtDVZ3lbNAahzEkptK6g8Oc34I/+tpDP7NRpCr CzbYBxwUvFoQXAyxvagLDSeONjlwpMStL7ELMjisX/gy40ZG6gTK8ozTDO8A1mML ET76TpIEPRudpQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:19 2026 by rpki-client