This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json) Hash identifier: 3mMnx/RnQuu4dak2jn5dRz/9HQPU3f4QjfK6ygtzbLs= Subject key identifier: 8D:70:B7:5D:28:68:C9:91:C0:D9:C0:07:F3:C1:67:83:86:57:79:AD Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44 Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44 Certificate serial: 019C4322A44C62B624E3BE3497F97EF719DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft Manifest number: 0405 Signing time: Mon 09 Feb 2026 16:01:09 +0000 Manifest this update: Mon 09 Feb 2026 16:01:09 +0000 Manifest next update: Tue 10 Feb 2026 16:01:09 +0000 Files and hashes: 1: eYhBYhn1wuCIn5V5TxEV1p0ILqc.roa (hash: FZG24wQ0YcAyBA1ki1f3E2aVs82rFBjk71yBp2kTMFo=) 2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: r3HzVOVXWNswsZU//qDUu5pLHriQWH9dsELuvtoI+WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a4:4c:62:b6:24:e3:be:34:97:f9:7e:f7:19:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44 Validity Not Before: Feb 9 16:01:09 2026 GMT Not After : Feb 10 16:01:09 2026 GMT Subject: CN=8d70b75d2868c991c0d9c007f3c16783865779ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:36:ff:ca:6c:4c:36:6f:d0:38:93:33:54: 22:09:01:6c:9b:52:eb:e2:a4:91:43:88:cd:e4:a5: ab:ec:77:aa:33:13:5b:e0:56:5e:57:90:e9:63:eb: 83:bb:70:a7:61:ef:f1:c6:f7:76:22:e2:d2:bc:d0: 3c:eb:33:63:1a:0a:a1:5b:72:6d:d3:6d:df:0b:19: fe:39:3c:72:2f:91:c5:f5:2d:c9:d0:2c:70:cf:58: 5c:d4:2c:a8:60:39:f5:8e:b6:18:fd:b1:e3:c9:d2: a1:f3:43:e4:f2:0d:10:05:64:a1:80:b1:f0:07:3f: 57:ef:c1:5b:b8:9c:9a:3d:45:b8:ec:07:9a:80:5a: ae:07:dc:94:f9:30:61:bb:d3:07:72:de:ca:6a:b0: ce:2a:c0:64:a9:d7:61:64:33:d0:29:33:b1:bb:d0: f9:c3:80:9b:04:99:56:b5:6e:4d:da:b7:9f:df:de: 50:f0:73:75:4b:cb:b3:b3:47:a4:99:20:a9:3b:ec: 97:42:95:5f:33:4d:79:40:f9:2a:8b:52:85:bd:cb: 6f:21:bb:84:9f:6f:e8:2d:bd:a4:a1:0a:c2:c6:f5: a8:01:c0:e4:0e:d4:05:09:72:fa:01:dd:71:cb:52: af:61:cc:f7:ab:52:a1:02:90:70:7f:16:00:b8:5a: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:70:B7:5D:28:68:C9:91:C0:D9:C0:07:F3:C1:67:83:86:57:79:AD X509v3 Authority Key Identifier: keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8b:20:66:c3:45:51:58:eb:07:bf:a1:1e:0a:d0:c1:03:c1: 69:73:b7:30:bf:ba:70:dd:a3:e5:dd:b0:09:24:49:e3:5b:6d: 84:99:96:8b:a9:b9:45:f6:d1:fa:5a:fd:a4:39:38:55:c8:e2: ed:9c:a2:ec:98:08:74:fe:b9:49:87:0a:45:9c:c1:2c:17:83: 53:49:bf:a5:1a:98:61:dd:9f:51:40:29:33:c5:f9:50:a4:fa: 7e:4a:f3:23:72:e6:70:19:c5:ed:0d:bd:c9:de:ca:67:9c:ee: f1:ca:f2:c0:36:69:3d:4b:62:22:91:a6:07:f4:81:df:49:a3: 75:ab:ce:38:0f:59:49:73:65:b1:95:38:73:bc:55:2a:21:96: 85:63:27:3d:72:ba:4e:f7:a9:e7:1c:1a:4e:7d:a5:9d:31:60: db:10:61:58:92:d8:8a:ff:29:ec:15:88:94:58:9f:c5:27:9b: 84:2d:96:22:f1:67:35:5c:51:50:3f:4c:95:e5:f6:f9:7b:8b: 06:9b:1b:31:a7:ee:4d:41:5d:48:e1:04:35:b4:14:1f:2c:01: af:65:24:13:7a:33:9f:f5:b1:ca:94:c2:b8:4d:05:71:42:a4: 42:56:e1:34:80:af:1c:ac:5d:7e:be:c6:49:1b:13:35:20:46: bc:10:27:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqRMYrYk4740l/l+9xndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4 ZjhiNDQwHhcNMjYwMjA5MTYwMTA5WhcNMjYwMjEwMTYwMTA5WjAzMTEwLwYDVQQD Eyg4ZDcwYjc1ZDI4NjhjOTkxYzBkOWMwMDdmM2MxNjc4Mzg2NTc3OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse02/8psTDZv0DiTM1QiCQFsm1Lr 4qSRQ4jN5KWr7HeqMxNb4FZeV5DpY+uDu3CnYe/xxvd2IuLSvNA86zNjGgqhW3Jt 023fCxn+OTxyL5HF9S3J0Cxwz1hc1CyoYDn1jrYY/bHjydKh80Pk8g0QBWShgLHw Bz9X78FbuJyaPUW47AeagFquB9yU+TBhu9MHct7KarDOKsBkqddhZDPQKTOxu9D5 w4CbBJlWtW5N2ref395Q8HN1S8uzs0ekmSCpO+yXQpVfM015QPkqi1KFvctvIbuE n2/oLb2koQrCxvWoAcDkDtQFCXL6Ad1xy1KvYcz3q1KhApBwfxYAuFqA5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1wt10oaMmRwNnAB/PBZ4OGV3mtMB8GA1UdIwQY MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5 LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIsgZsNF UVjrB7+hHgrQwQPBaXO3ML+6cN2j5d2wCSRJ41tthJmWi6m5RfbR+lr9pDk4Vcji 7Zyi7JgIdP65SYcKRZzBLBeDU0m/pRqYYd2fUUApM8X5UKT6fkrzI3LmcBnF7Q29 yd7KZ5zu8crywDZpPUtiIpGmB/SB30mjdavOOA9ZSXNlsZU4c7xVKiGWhWMnPXK6 Tvep5xwaTn2lnTFg2xBhWJLYiv8p7BWIlFifxSebhC2WIvFnNVxRUD9MleX2+XuL BpsbMafuTUFdSOEENbQUHywBr2UkE3ozn/WxypTCuE0FcUKkQlbhNICvHKxdfr7G SRsTNSBGvBAnQg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:56 2026 by rpki-client