This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json) Hash identifier: BN9LyirqEMniAewy3rHCFrTRoj3binojJt87jlCcvHc= Subject key identifier: 9F:27:AA:D0:3C:39:A6:9D:BC:7B:4F:8B:A5:EB:92:AC:55:B5:54:7E Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Certificate serial: 019C43FE70678CB1BA1D523F233E40629964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft Manifest number: 0920 Signing time: Mon 09 Feb 2026 20:01:14 +0000 Manifest this update: Mon 09 Feb 2026 20:01:14 +0000 Manifest next update: Tue 10 Feb 2026 20:01:14 +0000 Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=) 2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: 3LvPeYJRrUTRjiP36my5dVj5rJF/+XFBaBPwrYQwt6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:70:67:8c:b1:ba:1d:52:3f:23:3e:40:62:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Validity Not Before: Feb 9 20:01:14 2026 GMT Not After : Feb 10 20:01:14 2026 GMT Subject: CN=9f27aad03c39a69dbc7b4f8ba5eb92ac55b5547e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:af:19:cf:60:19:eb:01:6a:67:ce:88:8d: 97:23:bb:06:0e:e7:39:e1:75:02:a0:0f:9b:25:2b: d7:ee:1f:b2:bd:6f:82:48:b3:30:d6:73:c6:9c:9f: a3:39:52:f8:da:2d:17:bc:17:1e:9f:a9:d9:ca:74: bc:19:bb:fb:70:26:1f:32:da:96:68:43:e8:d2:8e: 7b:0f:6e:fa:8b:41:2c:26:32:d5:d0:e2:ba:42:e9: bc:70:47:23:dc:42:31:1c:64:4f:22:73:76:9a:17: 91:10:1b:a2:53:7c:89:49:cb:5f:3d:7f:ee:ff:7c: 00:1c:da:a8:cd:04:ea:96:d5:fe:0f:f4:f2:d9:e2: b2:05:59:5e:34:1f:bd:d7:28:f5:89:d8:9f:ec:48: 8a:42:f0:b4:d6:b6:1e:c2:9b:ae:2d:88:cf:cc:3c: 2e:54:f6:6b:85:ed:cf:3e:14:46:f7:44:70:46:76: 0b:f9:e8:fd:cb:e6:69:6c:3b:ad:6e:9d:26:e2:c0: 53:80:45:5f:18:a6:0c:bc:ca:8b:94:03:44:8e:d1: 66:b0:48:70:cf:a0:d2:cd:5f:55:00:2a:40:a5:6c: e5:86:93:e7:d7:df:a8:42:2f:91:5a:6b:1f:c6:13: b7:39:f8:58:1d:3c:00:60:b1:d0:f1:c0:95:e9:15: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:27:AA:D0:3C:39:A6:9D:BC:7B:4F:8B:A5:EB:92:AC:55:B5:54:7E X509v3 Authority Key Identifier: keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:e6:c3:1c:39:1f:fb:f3:4d:9b:38:06:2f:87:9d:dd:55: 31:1a:1a:c4:98:81:90:c3:be:9b:a0:13:3c:56:9f:8d:99:a3: a5:f7:f8:41:58:bc:ef:59:53:5e:a0:6a:8a:1a:da:b9:fe:f6: b7:4c:9d:16:43:a5:5e:13:13:5f:68:fe:59:19:8d:95:a0:39: c3:b3:24:ff:54:75:5d:9e:06:1d:30:b2:cf:a4:80:f4:bb:5b: 00:ac:92:4b:da:20:03:a8:0c:50:07:55:8b:82:7d:18:bf:06: bf:47:f7:e7:d6:07:7c:36:6e:48:64:62:6b:4e:72:15:53:03: e3:7c:b3:1c:be:15:95:89:79:98:74:82:92:0b:e3:97:12:b0: fe:16:26:f4:73:15:6b:45:9d:5d:9b:44:2c:9b:dc:ce:01:29: 70:da:b4:3f:de:1b:76:50:c9:1a:e6:57:51:6b:6f:35:26:49: 8d:c6:46:a2:9b:98:61:57:cd:27:aa:9e:1c:a7:63:24:b1:8f: 06:24:53:22:c6:49:10:21:56:b4:d7:0e:62:ce:8e:a3:9a:1a: ea:ee:11:44:93:9a:4d:8b:79:fe:a5:9a:9c:9e:42:61:6b:1e: e1:5d:af:2d:dc:fb:c3:1f:18:a8:c8:1e:02:2d:8b:03:0e:45: ce:fb:7c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nBnjLG6HVI/Iz5AYplkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYWYzOGFkNDQwNjliZTY1NGQyZTc4N2Y5NmM0ZThmZDI2 YTUxMzIwHhcNMjYwMjA5MjAwMTE0WhcNMjYwMjEwMjAwMTE0WjAzMTEwLwYDVQQD Eyg5ZjI3YWFkMDNjMzlhNjlkYmM3YjRmOGJhNWViOTJhYzU1YjU1NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshqvGc9gGesBamfOiI2XI7sGDuc5 4XUCoA+bJSvX7h+yvW+CSLMw1nPGnJ+jOVL42i0XvBcen6nZynS8Gbv7cCYfMtqW aEPo0o57D276i0EsJjLV0OK6Qum8cEcj3EIxHGRPInN2mheREBuiU3yJSctfPX/u /3wAHNqozQTqltX+D/Ty2eKyBVleNB+91yj1idif7EiKQvC01rYewpuuLYjPzDwu VPZrhe3PPhRG90RwRnYL+ej9y+ZpbDutbp0m4sBTgEVfGKYMvMqLlANEjtFmsEhw z6DSzV9VACpApWzlhpPn19+oQi+RWmsfxhO3OfhYHTwAYLHQ8cCV6RXFSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8nqtA8OaadvHtPi6XrkqxVtVR+MB8GA1UdIwQY MBaAFPGvOK1EBpvmVNLnh/lsTo/SalEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMt ZDdhMWIzZGY5YTAzLzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMtZDdhMWIzZGY5YTAz LzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVzmwxw5 H/vzTZs4Bi+Hnd1VMRoaxJiBkMO+m6ATPFafjZmjpff4QVi871lTXqBqihrauf72 t0ydFkOlXhMTX2j+WRmNlaA5w7Mk/1R1XZ4GHTCyz6SA9LtbAKySS9ogA6gMUAdV i4J9GL8Gv0f359YHfDZuSGRia05yFVMD43yzHL4VlYl5mHSCkgvjlxKw/hYm9HMV a0WdXZtELJvczgEpcNq0P94bdlDJGuZXUWtvNSZJjcZGopuYYVfNJ6qeHKdjJLGP BiRTIsZJECFWtNcOYs6Oo5oa6u4RRJOaTYt5/qWanJ5CYWse4V2vLdz7wx8YqMge Ai2LAw5Fzvt8yA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:42 2026 by rpki-client