This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json) Hash identifier: yi5tgLrhNXLRPE6ryVOiv5Tn0x1fNrwdjJXEv0+CetE= Subject key identifier: 02:B2:17:4E:BB:BE:4D:A2:02:A3:6D:F0:8D:12:F8:2F:73:7C:C0:79 Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Certificate serial: 019C424680C5BE64CE4B4D35FCCA426B49AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft Manifest number: 1437 Signing time: Mon 09 Feb 2026 12:00:42 +0000 Manifest this update: Mon 09 Feb 2026 12:00:42 +0000 Manifest next update: Tue 10 Feb 2026 12:00:42 +0000 Files and hashes: 1: 80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa (hash: inbOmLYfTUWv8xqKpQqk0iSMIhKJkA0PbwgWW07QMo4=) 2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: 4SXUKNL+4AQjqaxar0z0pc5sqAGc3bLVXPiPRwX+RNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:80:c5:be:64:ce:4b:4d:35:fc:ca:42:6b:49:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Validity Not Before: Feb 9 12:00:42 2026 GMT Not After : Feb 10 12:00:42 2026 GMT Subject: CN=02b2174ebbbe4da202a36df08d12f82f737cc079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:05:96:52:73:a8:fa:05:97:45:73:4b:ba: 0a:a0:87:ee:07:21:f2:5b:ae:12:b3:f3:35:6f:63: b2:78:f5:22:e6:30:95:7c:02:64:aa:cc:54:ae:7f: 2f:8d:e7:7a:8c:44:39:c9:be:21:b3:6e:05:94:cc: f4:37:46:bc:4f:e1:af:84:5d:76:ea:11:57:9c:c2: e9:82:32:a6:88:9a:07:15:c0:6a:60:2e:72:39:ff: 25:3d:e5:60:13:5b:35:d5:a9:56:24:b0:0e:22:1b: d6:d6:b9:6f:48:24:42:99:0d:09:e7:b9:bb:05:26: aa:b5:2e:4d:43:9e:cc:cf:26:29:45:eb:cb:42:f6: c1:0d:c7:dc:49:25:0b:67:cd:78:52:1d:d3:bf:94: 28:ff:e3:ed:16:f2:f7:0f:5f:6a:f8:84:95:0b:20: e4:8f:c3:4d:ae:9a:31:97:d9:f6:35:31:2c:46:1b: 7c:ca:de:4a:78:6d:74:3f:5d:95:fc:d2:5e:d7:0e: 05:97:d2:b1:d7:0e:79:1a:14:aa:4f:83:55:cc:f8: f1:6a:b8:58:5f:8e:3b:6c:ea:97:a8:64:9b:4e:88: 45:4f:81:4a:bc:59:67:00:4c:d2:b0:13:ff:58:86: 46:3d:4b:2e:a5:29:57:6f:03:a0:2a:2a:67:24:0c: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B2:17:4E:BB:BE:4D:A2:02:A3:6D:F0:8D:12:F8:2F:73:7C:C0:79 X509v3 Authority Key Identifier: keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:88:8e:ba:49:ce:75:06:2f:00:4f:20:37:1b:42:72:6e:56: 80:33:f2:df:b7:a9:e2:8f:35:4e:43:d7:a0:bc:6e:97:dd:33: 8c:96:8e:9e:db:b4:82:dd:e5:6f:cc:da:e2:3b:d8:a6:8b:21: 36:da:fd:91:d8:85:3d:bc:65:88:21:89:0c:1c:6d:03:2f:09: b3:c3:8d:be:39:17:33:e8:a8:cc:97:a5:f6:d6:61:d0:4a:83: f9:04:63:51:ed:46:c6:76:3b:d6:23:40:93:a7:3e:5c:ac:e2: 04:da:6d:ff:92:00:ce:f9:bf:a8:07:c2:17:2d:56:f9:8c:f0: 42:60:ac:84:3b:6f:d6:94:d0:3f:a0:7e:d1:16:98:a6:9b:de: e1:02:d5:9d:5b:1e:fb:c2:0f:aa:0d:e2:ba:f0:dd:43:30:90: f5:03:c8:6d:a4:21:68:34:c8:d7:7f:95:71:30:f2:9d:0d:e6: 92:b5:f1:44:73:61:93:da:90:53:c8:21:4e:22:88:b1:4b:ee: af:54:57:46:3e:b3:0a:fd:17:e2:d6:c6:75:2d:6e:33:87:75: cb:fa:14:5c:22:f2:13:ce:b2:e1:2f:a0:97:df:b7:f8:d0:56: a4:a7:ec:5a:ae:60:8a:92:02:8e:e5:44:e1:9f:50:48:d7:b4: eb:6f:bb:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoDFvmTOS001/MpCa0mvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx MTEyYjYwHhcNMjYwMjA5MTIwMDQyWhcNMjYwMjEwMTIwMDQyWjAzMTEwLwYDVQQD EygwMmIyMTc0ZWJiYmU0ZGEyMDJhMzZkZjA4ZDEyZjgyZjczN2NjMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunwFllJzqPoFl0VzS7oKoIfuByHy W64Ss/M1b2OyePUi5jCVfAJkqsxUrn8vjed6jEQ5yb4hs24FlMz0N0a8T+GvhF12 6hFXnMLpgjKmiJoHFcBqYC5yOf8lPeVgE1s11alWJLAOIhvW1rlvSCRCmQ0J57m7 BSaqtS5NQ57MzyYpRevLQvbBDcfcSSULZ814Uh3Tv5Qo/+PtFvL3D19q+ISVCyDk j8NNrpoxl9n2NTEsRht8yt5KeG10P12V/NJe1w4Fl9Kx1w55GhSqT4NVzPjxarhY X447bOqXqGSbTohFT4FKvFlnAEzSsBP/WIZGPUsupSlXbwOgKipnJAy7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKyF067vk2iAqNt8I0S+C9zfMB5MB8GA1UdIwQY MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt NWNjNGRlZDlhN2QyLzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIiOuknO dQYvAE8gNxtCcm5WgDPy37ep4o81TkPXoLxul90zjJaOntu0gt3lb8za4jvYposh Ntr9kdiFPbxliCGJDBxtAy8Js8ONvjkXM+iozJel9tZh0EqD+QRjUe1GxnY71iNA k6c+XKziBNpt/5IAzvm/qAfCFy1W+YzwQmCshDtv1pTQP6B+0RaYppve4QLVnVse +8IPqg3iuvDdQzCQ9QPIbaQhaDTI13+VcTDynQ3mkrXxRHNhk9qQU8ghTiKIsUvu r1RXRj6zCv0X4tbGdS1uM4d1y/oUXCLyE86y4S+gl9+3+NBWpKfsWq5gipICjuVE 4Z9QSNe062+77A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:33 2026 by rpki-client