This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json) Hash identifier: kpoONsmGKCM0Ge7Pir+Xnqln5ljWkVgPtjHyh3mKnXw= Subject key identifier: 47:4C:9A:22:2E:3C:C5:15:0D:84:7A:02:59:9B:73:97:0B:8B:F4:49 Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b Certificate serial: 019C446B91D876B6F34C527ACFFB88505F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft Manifest number: 068E Signing time: Mon 09 Feb 2026 22:00:26 +0000 Manifest this update: Mon 09 Feb 2026 22:00:26 +0000 Manifest next update: Tue 10 Feb 2026 22:00:26 +0000 Files and hashes: 1: TXQWqwg-_fg03GSnLtq9K2P-qXo.roa (hash: Ax0Uac+SRfpjnik5CivlZoRajYWhAEb1KtSZ4OnL+e0=) 2: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: B2o1JZGhXBzyb2/ajEl/InSao5Zblel9CZn2r1c+vE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:91:d8:76:b6:f3:4c:52:7a:cf:fb:88:50:5f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b Validity Not Before: Feb 9 22:00:26 2026 GMT Not After : Feb 10 22:00:26 2026 GMT Subject: CN=474c9a222e3cc5150d847a02599b73970b8bf449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:95:e7:9f:ee:d6:6d:73:36:66:ec:dc:0e: 0e:36:25:c7:0e:f5:8c:32:01:45:39:4e:a2:99:84: 76:bf:24:07:1d:e0:81:01:68:99:02:49:b5:1e:a0: ce:96:a7:7b:7c:51:0d:a3:46:2a:f3:2a:4c:f7:2e: c4:f4:3e:c5:9d:8f:ef:0f:40:59:0e:b0:8f:e5:2c: b5:da:4b:03:46:b3:e4:f6:e2:bf:d2:47:ad:85:a7: 8a:1c:e1:23:c8:a7:96:b0:b2:aa:00:40:2d:b9:73: c2:76:1a:6d:78:aa:62:97:da:3a:13:52:bd:0a:fc: 1b:c4:87:68:a0:3e:e4:31:74:c7:8b:80:4f:77:f7: 38:49:d8:9e:bb:2b:77:1a:c9:9d:a6:e6:cd:76:78: 8d:c0:bf:5f:70:81:ee:e8:82:5d:04:6f:d5:45:03: 46:eb:03:55:6c:dd:1c:c2:a8:a8:42:94:2a:22:cc: d3:b6:77:d8:d9:91:b7:25:4c:4b:5d:19:bd:0a:a1: 83:2a:37:4e:8a:3a:87:7f:0b:e4:96:20:03:d5:3e: 1b:46:b9:91:65:c1:4f:0d:e9:5d:22:8f:cc:0c:c0: 60:5c:53:5c:d1:f1:58:c9:68:53:9a:dc:bc:30:fa: 29:72:ac:f1:80:b2:2c:51:f4:0f:38:e4:58:16:f2: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4C:9A:22:2E:3C:C5:15:0D:84:7A:02:59:9B:73:97:0B:8B:F4:49 X509v3 Authority Key Identifier: keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:2b:8f:95:b4:b1:32:9b:29:cd:34:30:c1:69:49:23:98: b6:75:7f:17:d8:92:41:71:c9:e4:f0:9f:95:44:01:86:c1:31: b4:b7:1a:6e:8e:fd:2e:1e:71:08:42:53:58:3e:b5:1b:28:33: d0:2b:8b:ee:e3:c3:82:9b:9c:0d:81:20:03:e1:0d:f6:fc:e4: a2:83:cd:2b:35:2f:c4:28:2f:3e:1c:08:66:66:71:61:bb:aa: e0:fe:31:d6:74:74:b4:f8:23:6d:b0:4b:25:71:3d:e0:2c:03: 27:ec:61:05:f7:2f:ce:d5:5c:99:71:e5:3c:a9:12:a3:1d:1c: 2a:7c:1e:b2:e8:ac:31:60:54:ca:3b:63:4f:30:5d:9e:1c:f4: 5f:73:b0:48:1f:41:84:76:09:05:f3:b4:b3:1d:00:7e:43:f0: 9f:42:48:83:23:38:94:18:c2:22:a0:f7:21:af:aa:58:8a:33: db:cc:c0:05:d9:e8:37:30:eb:ca:f0:e9:ff:d0:65:c0:99:dd: 0f:f8:bf:8d:1f:22:d0:48:1f:1b:3d:3e:5a:49:2b:3c:f3:cf: ac:16:74:fb:75:12:09:bd:22:af:34:c8:7b:1f:e0:ed:9a:ec: 0e:2e:0f:96:47:8a:41:c9:c7:fb:96:d8:54:9a:4e:48:67:ee: 4d:59:9f:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5HYdrbzTFJ6z/uIUF8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzg5NzJiNGRiYTBkMjA0OWQzN2M4NDhhNGEyMWQ0YTQz YjJlM2IwHhcNMjYwMjA5MjIwMDI2WhcNMjYwMjEwMjIwMDI2WjAzMTEwLwYDVQQD Eyg0NzRjOWEyMjJlM2NjNTE1MGQ4NDdhMDI1OTliNzM5NzBiOGJmNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKGV55/u1m1zNmbs3A4ONiXHDvWM MgFFOU6imYR2vyQHHeCBAWiZAkm1HqDOlqd7fFENo0Yq8ypM9y7E9D7FnY/vD0BZ DrCP5Sy12ksDRrPk9uK/0kethaeKHOEjyKeWsLKqAEAtuXPCdhpteKpil9o6E1K9 CvwbxIdooD7kMXTHi4BPd/c4Sdieuyt3GsmdpubNdniNwL9fcIHu6IJdBG/VRQNG 6wNVbN0cwqioQpQqIszTtnfY2ZG3JUxLXRm9CqGDKjdOijqHfwvkliAD1T4bRrmR ZcFPDeldIo/MDMBgXFNc0fFYyWhTmty8MPopcqzxgLIsUfQPOORYFvK+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdMmiIuPMUVDYR6Almbc5cLi/RJMB8GA1UdIwQY MBaAFI3IlytNug0gSdN8hIpKIdSkOy47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNpWEswMjZEU0JKMDN5RWlrb2gxS1E3TGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NzE2ZDEtZWVkYS00NTA1LWEwYzkt MDc4ZmQzOTU4NTlmLzEvamNpWEswMjZEU0JKMDN5RWlrb2gxS1E3TGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NzE2ZDEtZWVkYS00NTA1LWEwYzktMDc4ZmQzOTU4NTlm LzEvamNpWEswMjZEU0JKMDN5RWlrb2gxS1E3TGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2krj5W0 sTKbKc00MMFpSSOYtnV/F9iSQXHJ5PCflUQBhsExtLcabo79Lh5xCEJTWD61Gygz 0CuL7uPDgpucDYEgA+EN9vzkooPNKzUvxCgvPhwIZmZxYbuq4P4x1nR0tPgjbbBL JXE94CwDJ+xhBfcvztVcmXHlPKkSox0cKnwesuisMWBUyjtjTzBdnhz0X3OwSB9B hHYJBfO0sx0AfkPwn0JIgyM4lBjCIqD3Ia+qWIoz28zABdnoNzDryvDp/9BlwJnd D/i/jR8i0EgfGz0+WkkrPPPPrBZ0+3USCb0irzTIex/g7ZrsDi4PlkeKQcnH+5bY VJpOSGfuTVmfjA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:10 2026 by rpki-client