This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json) Hash identifier: i1tVONtD8TfOTzNmHdHSiCS1m2bsssb25nIb9Hc4WiA= Subject key identifier: AE:29:60:B6:F5:16:99:ED:3F:48:8F:84:63:0B:B3:AE:A5:3E:14:64 Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37 Certificate serial: 019C42EB1EB5995721BC23137419CC85BF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft Manifest number: 04F9 Signing time: Mon 09 Feb 2026 15:00:30 +0000 Manifest this update: Mon 09 Feb 2026 15:00:30 +0000 Manifest next update: Tue 10 Feb 2026 15:00:30 +0000 Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: Yx6kOLV1nv21Tvvtul1vNGxWG7zI78CPoDq1W/7esWY=) 2: xXZoIesIsVLnbbFVS6uD0w1QOCY.roa (hash: pEd0VeAjn0hUjIU5aNRKB8vb7ZezOzTftnRZZoX4QL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:1e:b5:99:57:21:bc:23:13:74:19:cc:85:bf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37 Validity Not Before: Feb 9 15:00:30 2026 GMT Not After : Feb 10 15:00:30 2026 GMT Subject: CN=ae2960b6f51699ed3f488f84630bb3aea53e1464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:1d:96:09:b1:91:dc:81:a7:c9:08:7c:94: e7:63:ad:64:13:76:0b:de:e6:e0:c7:79:10:7e:4d: 3c:c8:18:66:17:f7:cf:06:60:16:fd:0e:27:d8:b9: 39:65:42:14:c1:b8:c2:1f:2a:3d:19:f4:a3:e4:5e: bd:c7:8c:7f:c9:06:af:e0:d7:b8:f2:22:2e:02:ad: 20:03:48:6a:89:b6:7a:d2:5e:d1:4e:dc:7f:ce:ab: c3:61:56:55:bc:17:78:82:6a:66:0e:55:e5:43:0f: b0:c3:82:00:0b:cb:5b:cd:ee:cb:82:f7:96:ce:2f: 90:16:49:63:ae:2c:a4:d7:23:c4:20:b5:ac:b4:b5: 1f:f8:cc:18:42:e0:e9:4e:ba:75:80:78:b9:0e:25: c7:2e:b7:12:76:66:0f:78:ea:19:35:54:06:21:41: 08:a0:c5:ca:7f:75:d2:a6:3d:4b:e1:e0:ed:56:1d: ff:1f:56:d9:68:35:68:0c:d7:d3:6a:14:e1:d3:bf: 60:2e:48:b8:45:83:94:e0:c4:45:d8:33:65:0f:fe: 23:cc:14:a6:41:73:cc:33:dd:ac:8e:dd:ef:1d:41: 36:cb:59:06:d1:a1:95:7e:8e:e3:ed:da:b6:d1:b2: a5:dd:99:52:2c:61:ba:85:fe:23:fb:57:b5:15:74: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:29:60:B6:F5:16:99:ED:3F:48:8F:84:63:0B:B3:AE:A5:3E:14:64 X509v3 Authority Key Identifier: keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9f:10:a8:95:ad:61:c0:ee:89:90:d4:06:0f:5b:8e:78:4e: e2:3f:fe:fa:40:7d:f4:08:6b:53:9c:ec:c7:70:c8:c2:59:f3: 3a:07:0a:3c:22:2b:f4:37:16:ad:1c:cd:63:03:c0:d3:06:73: 42:b4:7a:dd:0a:7f:d9:f0:6c:33:c6:0f:21:2b:45:5b:64:c7: 1b:b2:07:08:fd:0a:76:56:7f:4c:ad:d5:17:e6:49:57:51:ef: 63:36:e5:24:2c:26:49:a7:90:21:31:28:55:da:01:0d:80:9f: 69:3b:f7:c3:48:ae:09:30:fd:96:5a:a8:84:3e:79:f5:4a:c5: f2:5d:ca:a3:cf:c5:7c:80:e5:1b:bc:94:88:35:c2:4f:17:d5: 1d:1d:1a:f0:d5:bf:8c:c2:ce:2d:af:91:87:b5:63:92:fc:10: 9f:b5:0d:5e:0c:7d:42:dd:59:9d:e4:57:6b:bc:76:86:ba:6e: c9:67:2d:57:41:43:73:66:b6:c5:7e:45:51:f8:85:c1:49:9f: 10:44:40:32:9f:49:f6:0f:76:80:5d:3f:3d:96:8c:04:59:b3: d8:de:78:17:c7:53:58:2a:53:50:fc:76:dd:72:1c:fc:32:17: ca:fb:7f:6e:18:c7:60:9c:a9:6d:1c:a8:58:37:40:62:a1:60: 7c:2e:2d:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6x61mVchvCMTdBnMhb+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw NzVkMzcwHhcNMjYwMjA5MTUwMDMwWhcNMjYwMjEwMTUwMDMwWjAzMTEwLwYDVQQD EyhhZTI5NjBiNmY1MTY5OWVkM2Y0ODhmODQ2MzBiYjNhZWE1M2UxNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLwdlgmxkdyBp8kIfJTnY61kE3YL 3ubgx3kQfk08yBhmF/fPBmAW/Q4n2Lk5ZUIUwbjCHyo9GfSj5F69x4x/yQav4Ne4 8iIuAq0gA0hqibZ60l7RTtx/zqvDYVZVvBd4gmpmDlXlQw+ww4IAC8tbze7LgveW zi+QFkljriyk1yPEILWstLUf+MwYQuDpTrp1gHi5DiXHLrcSdmYPeOoZNVQGIUEI oMXKf3XSpj1L4eDtVh3/H1bZaDVoDNfTahTh079gLki4RYOU4MRF2DNlD/4jzBSm QXPMM92sjt3vHUE2y1kG0aGVfo7j7dq20bKl3ZlSLGG6hf4j+1e1FXQvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4pYLb1FpntP0iPhGMLs66lPhRkMB8GA1UdIwQY MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt YWVlNTY3MTczNjE1LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1 LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZ8QqJWt YcDuiZDUBg9bjnhO4j/++kB99AhrU5zsx3DIwlnzOgcKPCIr9DcWrRzNYwPA0wZz QrR63Qp/2fBsM8YPIStFW2THG7IHCP0KdlZ/TK3VF+ZJV1HvYzblJCwmSaeQITEo VdoBDYCfaTv3w0iuCTD9llqohD559UrF8l3Ko8/FfIDlG7yUiDXCTxfVHR0a8NW/ jMLOLa+Rh7VjkvwQn7UNXgx9Qt1ZneRXa7x2hrpuyWctV0FDc2a2xX5FUfiFwUmf EERAMp9J9g92gF0/PZaMBFmz2N54F8dTWCpTUPx23XIc/DIXyvt/bhjHYJypbRyo WDdAYqFgfC4taw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:06 2026 by rpki-client