This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json) Hash identifier: 9N8Lg1lWPbzSxPwh9cVKVl/knVeYPuD1yXxC/9gygfI= Subject key identifier: 26:56:BF:0E:2D:FC:9A:F6:7F:0A:FD:80:81:11:A7:65:C7:00:F2:8A Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Certificate serial: 019C4322F56C1ED5E5F2AD651F2D3DF1D02B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 16:01:30 +0000 Manifest this update: Mon 09 Feb 2026 16:01:30 +0000 Manifest next update: Tue 10 Feb 2026 16:01:30 +0000 Files and hashes: 1: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (hash: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8=) 2: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: PPPYrWNDv6zmjW0wRNgH5J2lWtq5NLf8xQLVrjE4Z0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f5:6c:1e:d5:e5:f2:ad:65:1f:2d:3d:f1:d0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Validity Not Before: Feb 9 16:01:30 2026 GMT Not After : Feb 10 16:01:30 2026 GMT Subject: CN=2656bf0e2dfc9af67f0afd808111a765c700f28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:b8:4f:44:da:3a:1b:d2:92:09:ec:dc:dc: c7:e9:8a:9f:e5:74:17:36:4c:36:b8:97:0e:39:20: 0e:d1:a6:fa:d8:cd:54:22:31:56:2c:b8:1a:06:85: 03:f3:ab:ba:31:56:f7:e4:5e:5b:fa:50:03:72:66: 94:68:b8:80:e6:d5:eb:4e:b4:6c:e0:cb:91:77:e7: 85:0a:ea:92:88:69:a2:10:e5:a5:61:1b:a8:89:f3: 2e:4c:b5:c2:10:a3:1b:48:62:39:ff:2e:bb:9b:ad: 8b:7c:dd:7a:a2:a7:c0:af:f3:4c:c0:db:2a:5d:92: 5a:f5:db:ac:e7:dd:6a:f6:19:a5:36:81:6e:74:6f: 0d:15:b4:ba:5b:d3:71:09:f7:1d:1f:90:96:62:ed: 0d:61:b7:03:9f:83:38:e6:bb:69:ad:82:01:e2:c1: 26:96:3c:10:43:85:83:c7:9c:a5:90:d4:88:41:8e: 95:4d:36:3c:a9:d3:a2:dc:cc:4f:9b:c3:33:45:91: 5d:1d:6e:45:a9:cf:ac:be:ee:f2:8d:9e:34:d7:12: 62:97:49:fa:09:10:4c:43:c3:19:d5:ce:d5:98:86: 19:a1:a6:01:80:08:cd:e5:34:20:b3:36:d4:23:88: 33:39:db:8d:0c:b6:65:47:5b:7f:63:7c:cc:01:2c: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:56:BF:0E:2D:FC:9A:F6:7F:0A:FD:80:81:11:A7:65:C7:00:F2:8A X509v3 Authority Key Identifier: keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c5:fa:5f:26:0d:5d:e0:4a:85:1d:32:93:75:37:05:f5:fd: c4:06:5c:0b:ec:ec:03:d9:e5:01:0d:ec:eb:35:1e:8e:12:18: 02:b7:a8:25:3d:c5:2b:b3:b4:5e:c3:8e:b4:aa:3b:72:24:db: 29:4a:81:ba:3e:8b:e7:b0:fb:c5:21:67:ed:d7:22:7b:7a:f8: 24:42:d4:b6:4c:b2:45:7f:8a:e3:ea:5c:d8:9f:cc:53:8c:80: 5b:63:78:2e:27:3f:97:1a:19:b0:63:00:0d:ab:c2:53:7b:35: 66:d0:eb:5e:fe:79:de:39:a9:0d:2f:0d:a9:b3:18:16:3c:e1: 75:50:12:dd:03:8a:3d:c2:9a:35:a3:2d:21:0a:e3:05:df:a8: 7a:e0:18:b6:c3:c0:98:19:39:ba:47:9e:21:63:6c:7a:f0:5a: 35:f9:2f:c1:bc:0b:86:e4:29:83:56:ae:b3:2e:fb:1b:75:2a: 36:d2:1f:4b:8b:0c:30:20:1a:fb:78:ab:1c:c5:8c:36:05:93: eb:b0:82:84:1a:dc:4e:09:ad:ed:42:98:09:68:e9:da:ea:ec: da:91:93:1c:43:ff:78:5b:0f:48:4a:03:1e:04:ac:95:c8:73: f7:2f:7f:d4:fc:ae:a9:2d:be:e8:48:eb:bf:97:d1:49:31:77: bd:26:38:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvVsHtXl8q1lHy098dArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz MDViN2EwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD EygyNjU2YmYwZTJkZmM5YWY2N2YwYWZkODA4MTExYTc2NWM3MDBmMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuy4T0TaOhvSkgns3NzH6Yqf5XQX Nkw2uJcOOSAO0ab62M1UIjFWLLgaBoUD86u6MVb35F5b+lADcmaUaLiA5tXrTrRs 4MuRd+eFCuqSiGmiEOWlYRuoifMuTLXCEKMbSGI5/y67m62LfN16oqfAr/NMwNsq XZJa9dus591q9hmlNoFudG8NFbS6W9NxCfcdH5CWYu0NYbcDn4M45rtprYIB4sEm ljwQQ4WDx5ylkNSIQY6VTTY8qdOi3MxPm8MzRZFdHW5Fqc+svu7yjZ401xJil0n6 CRBMQ8MZ1c7VmIYZoaYBgAjN5TQgszbUI4gzOduNDLZlR1t/Y3zMASwL1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZWvw4t/Jr2fwr9gIERp2XHAPKKMB8GA1UdIwQY MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct ZTVkN2YyZGRkNGMyLzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcX6XyYN XeBKhR0yk3U3BfX9xAZcC+zsA9nlAQ3s6zUejhIYAreoJT3FK7O0XsOOtKo7ciTb KUqBuj6L57D7xSFn7dcie3r4JELUtkyyRX+K4+pc2J/MU4yAW2N4Lic/lxoZsGMA DavCU3s1ZtDrXv553jmpDS8NqbMYFjzhdVAS3QOKPcKaNaMtIQrjBd+oeuAYtsPA mBk5ukeeIWNsevBaNfkvwbwLhuQpg1ausy77G3UqNtIfS4sMMCAa+3irHMWMNgWT 67CChBrcTgmt7UKYCWjp2urs2pGTHEP/eFsPSEoDHgSslchz9y9/1PyuqS2+6Ejr v5fRSTF3vSY4xw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:42 2026 by rpki-client