This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json) Hash identifier: iPDHm49VTEBRyc/fH620VsG4ETF5LhrJj6ma3ffJ2Mo= Subject key identifier: 14:12:35:5E:89:99:6E:28:BB:A0:1B:B6:D8:08:90:44:24:6E:B2:31 Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Certificate serial: 019C438FDE629546F538A78560E27769CD47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 18:00:27 +0000 Manifest this update: Mon 09 Feb 2026 18:00:27 +0000 Manifest next update: Tue 10 Feb 2026 18:00:27 +0000 Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: zkCebOJGA9nNSKN9yA6m9dGoE8RyG0l9Hx/whbRsNQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:de:62:95:46:f5:38:a7:85:60:e2:77:69:cd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Validity Not Before: Feb 9 18:00:27 2026 GMT Not After : Feb 10 18:00:27 2026 GMT Subject: CN=1412355e89996e28bba01bb6d8089044246eb231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:1e:37:43:05:f4:16:01:1a:76:ab:9f:a8: 29:92:76:8e:58:e3:b8:2c:e6:c9:a8:a4:9b:7f:31: 8f:05:fb:5b:82:f9:91:2d:b0:dd:e3:f1:6b:41:03: dc:ab:c0:e6:3a:58:27:30:64:b3:59:69:19:0f:e4: 21:28:6d:65:fa:46:e1:9a:b6:e5:9c:52:56:a1:75: 5c:12:f9:29:66:48:0b:52:dd:47:61:ec:28:3e:a8: d2:b9:5d:19:6d:92:bf:ee:cb:c1:40:64:40:91:40: 31:e5:08:99:f2:c8:e8:9f:2e:e1:27:00:2d:f8:a2: 22:f5:14:5b:37:2a:24:50:82:45:d0:48:54:77:f7: 54:27:f0:69:8e:ed:fe:68:02:01:d9:dd:c3:dd:13: ae:1f:04:05:ab:88:bd:70:6e:3c:88:ca:ac:2d:21: f4:8d:aa:82:5b:37:97:cc:e8:50:a9:fc:07:89:b7: b1:80:29:85:63:ab:45:4c:43:4a:fb:c9:2e:b0:81: 61:91:75:9b:69:17:39:3d:da:11:1a:c9:db:99:9b: 57:65:11:6d:ea:5d:9c:e7:82:85:9a:ac:ba:ae:58: 51:7b:87:cd:b2:b7:a0:c1:73:e7:e4:42:b8:0c:5a: 73:11:c0:bd:21:89:78:58:cf:19:90:3b:7d:04:f3: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:12:35:5E:89:99:6E:28:BB:A0:1B:B6:D8:08:90:44:24:6E:B2:31 X509v3 Authority Key Identifier: keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:19:f2:e9:01:d2:0c:29:1f:b7:0b:ee:4b:3a:15:e5:de:64: 0d:3f:18:61:81:95:55:a9:65:1c:e8:da:d7:21:3d:1b:ab:c3: fe:87:d8:a9:34:2e:bc:b5:d5:bd:96:0c:f9:29:71:ce:1c:7e: a0:d1:2f:b3:ff:0c:56:b3:8f:c1:1a:17:ee:f4:a8:67:e0:70: d0:9f:14:9f:7e:99:ce:40:89:1e:7c:f8:42:fb:5e:d4:d6:cb: 8d:8d:83:f7:25:d3:78:39:fa:1f:65:88:1b:41:43:6e:3f:3e: c6:6d:fd:3a:91:05:65:92:e5:c2:a7:99:cf:de:08:6a:c7:cb: 5b:fe:8c:50:b7:5f:b5:16:82:c8:e8:12:d4:56:17:09:10:a8: 54:e2:e9:89:91:fa:63:f2:91:44:2a:e0:08:34:a8:89:17:c3: 70:e5:65:68:fc:62:dd:2b:ce:39:d8:a4:38:23:9f:50:48:7f: 6b:95:75:07:18:06:3c:01:d2:2c:c5:ba:e6:d0:87:51:5c:86: 65:85:49:6b:5e:30:ed:73:9f:38:8b:16:a6:1a:80:bf:3c:ee: 52:f1:a4:3f:7f:0c:71:f3:f7:76:d4:53:60:3c:ad:37:35:a8: b0:68:e3:f4:d9:b3:92:78:2a:53:1d:cb:23:d6:66:ad:26:ea: 03:75:2e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj95ilUb1OKeFYOJ3ac1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj YTllY2UwHhcNMjYwMjA5MTgwMDI3WhcNMjYwMjEwMTgwMDI3WjAzMTEwLwYDVQQD EygxNDEyMzU1ZTg5OTk2ZTI4YmJhMDFiYjZkODA4OTA0NDI0NmViMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu4eN0MF9BYBGnarn6gpknaOWOO4 LObJqKSbfzGPBftbgvmRLbDd4/FrQQPcq8DmOlgnMGSzWWkZD+QhKG1l+kbhmrbl nFJWoXVcEvkpZkgLUt1HYewoPqjSuV0ZbZK/7svBQGRAkUAx5QiZ8sjony7hJwAt +KIi9RRbNyokUIJF0EhUd/dUJ/Bpju3+aAIB2d3D3ROuHwQFq4i9cG48iMqsLSH0 jaqCWzeXzOhQqfwHibexgCmFY6tFTENK+8kusIFhkXWbaRc5PdoRGsnbmZtXZRFt 6l2c54KFmqy6rlhRe4fNsregwXPn5EK4DFpzEcC9IYl4WM8ZkDt9BPMOjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQSNV6JmW4ou6AbttgIkEQkbrIxMB8GA1UdIwQY MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxny6QHS DCkftwvuSzoV5d5kDT8YYYGVVallHOja1yE9G6vD/ofYqTQuvLXVvZYM+Slxzhx+ oNEvs/8MVrOPwRoX7vSoZ+Bw0J8Un36ZzkCJHnz4Qvte1NbLjY2D9yXTeDn6H2WI G0FDbj8+xm39OpEFZZLlwqeZz94IasfLW/6MULdftRaCyOgS1FYXCRCoVOLpiZH6 Y/KRRCrgCDSoiRfDcOVlaPxi3SvOOdikOCOfUEh/a5V1BxgGPAHSLMW65tCHUVyG ZYVJa14w7XOfOIsWphqAvzzuUvGkP38McfP3dtRTYDytNzWosGjj9NmzkngqUx3L I9ZmrSbqA3UuBQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:31 2026 by rpki-client