This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json) Hash identifier: SxZii2WETnhRhrW8GVlSlfGdiVC2B86/6wYg15Xd3r0= Subject key identifier: C9:62:71:93:9A:29:72:8D:5B:00:E1:70:3A:66:2D:9E:40:E5:8A:43 Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Certificate serial: 019C438FCEF54D8A257ED4A235EED659E266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft Manifest number: 12C2 Signing time: Mon 09 Feb 2026 18:00:23 +0000 Manifest this update: Mon 09 Feb 2026 18:00:23 +0000 Manifest next update: Tue 10 Feb 2026 18:00:23 +0000 Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: pKvYXhIYPCTcdnjohQIO9kB18ex0wPGxWB4V871CzWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ce:f5:4d:8a:25:7e:d4:a2:35:ee:d6:59:e2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Validity Not Before: Feb 9 18:00:23 2026 GMT Not After : Feb 10 18:00:23 2026 GMT Subject: CN=c96271939a29728d5b00e1703a662d9e40e58a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:60:51:f2:be:91:81:62:c1:b2:8a:1f:16: 2a:aa:69:e6:d4:e5:3d:c4:5c:09:cd:ba:ae:18:5e: 54:8b:e0:eb:c4:86:50:ed:bf:f4:18:49:ce:64:f5: 9f:33:e1:ef:09:e2:69:b3:2d:ca:eb:ce:59:b0:11: 92:87:48:6e:26:58:a7:38:75:45:3d:b5:b3:b2:6e: 76:c1:ec:a2:1c:25:bd:f6:69:93:f8:3a:e1:0b:50: 8a:8a:ff:51:3a:fa:e6:fb:e9:de:a5:03:50:16:5c: 71:41:e5:51:71:31:6f:8e:bc:d9:69:59:67:24:af: 22:2e:ec:76:cc:9f:6d:91:bd:15:6c:53:a9:64:5b: 71:8a:7d:b0:b6:be:30:97:85:4d:04:86:23:9f:f5: b1:cb:f5:94:a2:36:8d:da:72:f0:2b:f3:96:4e:53: be:cf:c0:83:c0:07:e5:4e:6e:88:b9:33:cc:8d:7c: c6:51:fa:df:82:a3:96:ca:1e:42:94:30:00:d8:ae: 42:be:31:78:89:60:04:89:0f:ed:5f:05:6c:05:18: 6e:60:f6:4e:3a:19:e6:aa:5b:8d:e9:8b:f4:1f:b1: 0b:31:75:67:5d:01:43:52:8b:04:d1:c2:62:92:d8: b0:5a:7a:6d:09:51:79:14:7e:fe:96:c2:da:6f:f2: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:62:71:93:9A:29:72:8D:5B:00:E1:70:3A:66:2D:9E:40:E5:8A:43 X509v3 Authority Key Identifier: keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:56:65:03:fd:6c:00:9e:4d:9a:76:de:24:7d:57:a4:92: 69:c8:c8:e8:9e:06:38:3f:2f:0b:da:90:09:4b:42:68:ea:30: 02:a2:9d:94:d9:52:e2:59:00:3a:14:5b:90:98:27:31:d5:68: 82:9e:e3:af:50:dc:8f:2b:11:34:bf:84:a5:b2:42:c7:82:74: b9:1e:b8:69:e2:9c:df:2a:9e:60:ed:a3:c7:29:d9:4d:e6:ee: 5a:9f:75:ca:37:1b:fe:63:bf:ac:b1:f4:14:09:91:5a:13:e4: 78:66:34:73:0f:93:2e:00:7f:24:2d:03:47:3e:94:c9:43:c6: 88:4d:56:4b:9c:c7:3b:f7:10:c8:8f:15:07:c0:fd:25:d0:53: cc:16:e2:64:9d:f9:53:1f:a7:68:ae:54:93:cd:8d:8e:52:c6: 15:2c:77:d1:62:73:82:85:79:c3:ad:d4:2c:1a:d6:c4:b9:44: 08:5f:4e:5c:66:c2:24:89:31:0e:92:78:99:ea:5e:87:d8:e3: 38:5d:15:1d:3d:09:fa:48:a3:b5:6b:a3:d2:f2:e7:60:76:43: 7f:6d:dc:20:81:4f:0b:02:42:3e:5c:81:85:12:88:70:02:18: 7f:c6:7c:e0:d4:54:60:f8:1a:8d:85:b3:f1:b3:e5:45:ae:22: f7:9c:40:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj871TYolftSiNe7WWeJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj ZTlkMjkwHhcNMjYwMjA5MTgwMDIzWhcNMjYwMjEwMTgwMDIzWjAzMTEwLwYDVQQD EyhjOTYyNzE5MzlhMjk3MjhkNWIwMGUxNzAzYTY2MmQ5ZTQwZTU4YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq1gUfK+kYFiwbKKHxYqqmnm1OU9 xFwJzbquGF5Ui+DrxIZQ7b/0GEnOZPWfM+HvCeJpsy3K685ZsBGSh0huJlinOHVF PbWzsm52weyiHCW99mmT+DrhC1CKiv9ROvrm++nepQNQFlxxQeVRcTFvjrzZaVln JK8iLux2zJ9tkb0VbFOpZFtxin2wtr4wl4VNBIYjn/Wxy/WUojaN2nLwK/OWTlO+ z8CDwAflTm6IuTPMjXzGUfrfgqOWyh5ClDAA2K5CvjF4iWAEiQ/tXwVsBRhuYPZO OhnmqluN6Yv0H7ELMXVnXQFDUosE0cJiktiwWnptCVF5FH7+lsLab/L6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlicZOaKXKNWwDhcDpmLZ5A5YpDMB8GA1UdIwQY MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0JWZQP9 bACeTZp23iR9V6SSacjI6J4GOD8vC9qQCUtCaOowAqKdlNlS4lkAOhRbkJgnMdVo gp7jr1DcjysRNL+EpbJCx4J0uR64aeKc3yqeYO2jxynZTebuWp91yjcb/mO/rLH0 FAmRWhPkeGY0cw+TLgB/JC0DRz6UyUPGiE1WS5zHO/cQyI8VB8D9JdBTzBbiZJ35 Ux+naK5Uk82NjlLGFSx30WJzgoV5w63ULBrWxLlECF9OXGbCJIkxDpJ4mepeh9jj OF0VHT0J+kijtWuj0vLnYHZDf23cIIFPCwJCPlyBhRKIcAIYf8Z84NRUYPgajYWz 8bPlRa4i95xA7w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:02 2026 by rpki-client