This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json) Hash identifier: mGTrAH5YWcL70BJ/uRpLNuU/gIIz6jpLrVPzHimXUs0= Subject key identifier: C9:EA:43:52:01:63:61:74:96:2D:3D:01:17:A1:47:7D:17:37:C5:34 Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c Certificate serial: 019C41D85F9F4A8C37D3DEF764FADE7B0D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft Manifest number: 080F Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: UCEBDpYAKVGOWPe9XfYqEn9L8fFdqtWPdli9Qbpig6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:5f:9f:4a:8c:37:d3:de:f7:64:fa:de:7b:0d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=c9ea435201636174962d3d0117a1477d1737c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:64:a4:0a:1f:7d:b8:b7:d7:73:f6:55:9b: d9:69:94:9e:04:ad:bf:31:32:9b:cb:d2:48:8a:33: c4:0d:cb:7e:be:a8:db:62:f6:32:1e:dd:22:df:4c: ac:05:e5:0b:41:57:74:9a:a2:65:12:4a:b5:e5:0b: 9c:e9:44:80:9c:0b:d0:a6:81:69:f6:b4:39:1d:7f: 78:78:3f:d6:7a:79:88:d8:92:65:ac:19:65:41:22: c8:b3:78:e8:95:6e:0b:bd:8d:e5:33:8d:42:dc:60: 2c:72:f5:3f:06:b8:7c:7e:71:16:0c:56:a9:3a:61: 3b:50:15:b0:a1:c4:b8:bc:6b:9c:ba:1e:af:bb:67: 23:93:e0:d2:a0:35:2f:7a:a7:b9:12:38:6f:32:bf: ce:90:77:60:79:ee:19:3e:eb:05:ed:6f:13:e0:92: b6:f0:3d:b9:0d:e8:77:ed:c5:2f:82:34:5f:ad:c6: c9:48:08:4f:fc:f9:00:e0:c9:92:63:f7:ab:7e:41: e7:7b:05:4d:61:3c:b4:9b:f5:09:c8:d0:13:24:ce: a1:ca:02:3c:80:83:42:a0:ee:0d:20:04:48:38:cd: 95:8c:70:76:54:ee:21:e2:d8:be:69:ff:3b:bf:ac: 2a:c2:90:a2:31:6c:c9:25:af:b1:a1:33:45:1e:6a: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:43:52:01:63:61:74:96:2D:3D:01:17:A1:47:7D:17:37:C5:34 X509v3 Authority Key Identifier: keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:86:c3:12:64:69:3a:be:f5:7c:01:c6:67:cf:95:ea:b6:27: 97:fe:9a:7f:1a:51:70:65:43:bd:d5:62:c4:d0:ae:03:3d:0a: dd:47:0e:76:03:e8:4b:fe:19:77:64:aa:73:44:1d:0f:79:06: 3a:5f:b2:ff:c5:55:8e:cf:3c:42:78:bd:1f:4e:35:08:26:c4: db:1c:59:2b:63:ea:0c:96:62:b2:8d:6f:63:01:f4:89:21:fb: ff:17:ae:10:bb:34:8e:01:50:a7:0d:52:c0:0a:bc:21:6a:7e: 46:f5:b0:eb:3c:13:4c:3c:2f:e9:e9:47:3f:6d:9d:d2:29:c2: 32:1b:ec:98:92:20:9f:d2:20:4b:5f:d6:10:40:2d:11:6a:9b: 44:64:ea:eb:ab:6a:ec:49:c5:3c:9f:b1:1b:a0:8a:25:f0:e6: 13:54:74:1e:1c:24:91:f0:37:23:32:0b:fc:ca:26:73:a1:d5: ca:65:57:7a:9f:b4:58:a3:1e:9d:99:8e:99:1d:31:6a:83:21: 98:07:a3:61:c7:c3:2c:42:e8:4a:5d:e6:41:14:1d:94:94:db: 6f:fc:1a:3d:d5:0d:fe:01:41:70:c9:ed:a9:2f:7d:1c:24:ee: e6:a5:93:35:6e:db:e5:4a:60:65:6b:e5:07:e5:d1:ca:30:50: bc:83:f2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2F+fSow30973ZPreew1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjRjN2YzZjc4Yjg3NmQ2YjA0M2MxNmNkZGJkZGViMWU3 OTViOWMwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD EyhjOWVhNDM1MjAxNjM2MTc0OTYyZDNkMDExN2ExNDc3ZDE3MzdjNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz25kpAoffbi313P2VZvZaZSeBK2/ MTKby9JIijPEDct+vqjbYvYyHt0i30ysBeULQVd0mqJlEkq15Quc6USAnAvQpoFp 9rQ5HX94eD/WenmI2JJlrBllQSLIs3jolW4LvY3lM41C3GAscvU/Brh8fnEWDFap OmE7UBWwocS4vGucuh6vu2cjk+DSoDUveqe5EjhvMr/OkHdgee4ZPusF7W8T4JK2 8D25Deh37cUvgjRfrcbJSAhP/PkA4MmSY/erfkHnewVNYTy0m/UJyNATJM6hygI8 gINCoO4NIARIOM2VjHB2VO4h4ti+af87v6wqwpCiMWzJJa+xoTNFHmqZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnqQ1IBY2F0li09ARehR30XN8U0MB8GA1UdIwQY MBaAFNdkx/P3i4dtawQ8Fs3b3eseeVucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDIt NWUyY2JmOTQyNDA1LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDItNWUyY2JmOTQyNDA1 LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYbDEmRp Or71fAHGZ8+V6rYnl/6afxpRcGVDvdVixNCuAz0K3UcOdgPoS/4Zd2Sqc0QdD3kG Ol+y/8VVjs88Qni9H041CCbE2xxZK2PqDJZiso1vYwH0iSH7/xeuELs0jgFQpw1S wAq8IWp+RvWw6zwTTDwv6elHP22d0inCMhvsmJIgn9IgS1/WEEAtEWqbRGTq66tq 7EnFPJ+xG6CKJfDmE1R0HhwkkfA3IzIL/Momc6HVymVXep+0WKMenZmOmR0xaoMh mAejYcfDLELoSl3mQRQdlJTbb/waPdUN/gFBcMntqS99HCTu5qWTNW7b5UpgZWvl B+XRyjBQvIPyyA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:02 2026 by rpki-client