This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json) Hash identifier: 9CTUVKjOVA9cg7N+ItyuHc+MduI/QykveWwT7vlHge8= Subject key identifier: C2:F2:BA:BF:B7:08:F3:E8:FF:CC:74:CC:5A:A6:07:F7:DE:1B:B1:65 Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59 Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59 Certificate serial: 019C4358ECC21451D54B7DB7FCB2889AF65E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft Manifest number: 0BDD Signing time: Mon 09 Feb 2026 17:00:26 +0000 Manifest this update: Mon 09 Feb 2026 17:00:26 +0000 Manifest next update: Tue 10 Feb 2026 17:00:26 +0000 Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: 7eFpM6NhvXzpuHnlQrl278Mv5XD36SquLeZvhUWGUMc=) 2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:ec:c2:14:51:d5:4b:7d:b7:fc:b2:88:9a:f6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59 Validity Not Before: Feb 9 17:00:26 2026 GMT Not After : Feb 10 17:00:26 2026 GMT Subject: CN=c2f2babfb708f3e8ffcc74cc5aa607f7de1bb165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:ec:5f:8a:ff:9d:91:c6:24:04:47:6a:ae: b2:57:f7:83:cc:77:36:f6:98:78:4d:78:ed:5a:83: 2b:10:b0:74:97:98:a6:95:ae:1f:0e:6f:7b:fe:65: bb:2d:82:15:99:d8:ac:3f:a5:a9:a9:61:b5:3b:30: a9:d5:1d:c2:14:bd:9e:4d:9a:c5:02:60:bf:c4:b7: 8f:79:cc:4b:f6:3c:b6:e3:21:52:fb:9e:69:a9:4d: 5e:79:95:0b:cc:b7:86:ab:f2:4b:57:62:b0:ce:9a: 5b:7e:51:57:bd:56:09:65:fc:91:8c:1d:82:9f:83: f2:90:3a:b5:c8:98:87:fb:19:3a:ee:8a:1b:a3:e7: 8a:63:37:c2:08:ae:d6:70:db:be:b4:91:35:a6:b4: cd:dc:27:47:20:41:0f:2d:95:8c:30:3c:79:bf:f1: df:20:6f:03:0a:78:fe:b2:9c:80:65:9d:70:bb:b3: e3:2b:1f:cb:93:16:74:d2:24:c1:f5:f7:5b:2b:2a: 45:2d:e7:1d:28:af:58:0d:73:e9:40:4b:f0:2c:d6: e1:09:9a:65:3a:72:93:41:51:80:fd:4f:d6:9d:c8: bc:c4:3c:8f:97:6a:6a:78:28:48:38:ee:73:d5:f0: 3c:ec:05:d0:d1:27:6f:3d:58:b5:e8:6b:5a:4a:5d: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:BA:BF:B7:08:F3:E8:FF:CC:74:CC:5A:A6:07:F7:DE:1B:B1:65 X509v3 Authority Key Identifier: keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:51:87:fb:dc:5e:a8:a4:e5:5f:2d:17:83:ec:f4:60:89:95: a5:bd:f1:47:e9:ba:93:94:c9:00:23:06:e7:c0:aa:d5:90:0f: 55:dd:08:a3:b8:d9:23:42:26:13:f9:ed:f7:2a:eb:08:7e:14: 84:c0:aa:6e:22:0d:48:95:80:14:d1:a9:3a:41:cc:3a:a4:7d: 16:e5:24:a8:a9:a9:8f:a8:9e:46:1a:cb:d0:9e:22:69:a1:5f: ce:0a:eb:19:67:1d:19:c6:cd:c9:07:0c:98:92:17:37:40:2a: c8:d3:dd:e9:88:3a:d2:52:66:ff:59:05:64:5e:98:33:59:43: e5:4a:df:1e:e5:0f:49:60:9e:42:37:d8:04:bf:22:b9:88:14: 30:40:ee:20:80:0a:82:49:ea:26:72:06:b4:7f:74:1d:77:04: 33:12:84:e6:60:d2:a4:39:1e:b6:ea:0c:d1:d6:b4:56:72:f5: ba:7d:b3:73:5c:79:f5:cd:ce:66:40:f2:06:fa:10:13:1d:b7: 81:1d:e7:60:f6:db:34:a5:3e:9b:a3:0a:41:3c:5f:9e:a2:e6: 66:20:a2:12:c8:4c:dc:e1:2b:ac:3f:8f:f8:65:cc:a3:d8:f6: e8:ab:ee:ba:72:2b:67:27:bd:a5:a0:67:d0:39:0e:bd:d5:63: 56:be:ca:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOzCFFHVS323/LKImvZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjIxOWVjYTU0YWIyNjljOGFhYjliMGZmNDE2ZTcyOTM4 MjliNTkwHhcNMjYwMjA5MTcwMDI2WhcNMjYwMjEwMTcwMDI2WjAzMTEwLwYDVQQD EyhjMmYyYmFiZmI3MDhmM2U4ZmZjYzc0Y2M1YWE2MDdmN2RlMWJiMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofTsX4r/nZHGJARHaq6yV/eDzHc2 9ph4TXjtWoMrELB0l5imla4fDm97/mW7LYIVmdisP6WpqWG1OzCp1R3CFL2eTZrF AmC/xLePecxL9jy24yFS+55pqU1eeZULzLeGq/JLV2KwzppbflFXvVYJZfyRjB2C n4PykDq1yJiH+xk67oobo+eKYzfCCK7WcNu+tJE1prTN3CdHIEEPLZWMMDx5v/Hf IG8DCnj+spyAZZ1wu7PjKx/LkxZ00iTB9fdbKypFLecdKK9YDXPpQEvwLNbhCZpl OnKTQVGA/U/Wnci8xDyPl2pqeChIOO5z1fA87AXQ0SdvPVi16GtaSl11awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLyur+3CPPo/8x0zFqmB/feG7FlMB8GA1UdIwQY MBaAFPIiGeylSrJpyKq5sP9BbnKTgptZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYt NmYzNjNlODNhNzhlLzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYtNmYzNjNlODNhNzhl LzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFGH+9xe qKTlXy0Xg+z0YImVpb3xR+m6k5TJACMG58Cq1ZAPVd0Io7jZI0ImE/nt9yrrCH4U hMCqbiINSJWAFNGpOkHMOqR9FuUkqKmpj6ieRhrL0J4iaaFfzgrrGWcdGcbNyQcM mJIXN0AqyNPd6Yg60lJm/1kFZF6YM1lD5UrfHuUPSWCeQjfYBL8iuYgUMEDuIIAK gknqJnIGtH90HXcEMxKE5mDSpDketuoM0da0VnL1un2zc1x59c3OZkDyBvoQEx23 gR3nYPbbNKU+m6MKQTxfnqLmZiCiEshM3OErrD+P+GXMo9j26KvuunIrZye9paBn 0DkOvdVjVr7KIw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:30 2026 by rpki-client