This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json) Hash identifier: tDAMJXOHk19Ri1QW8ebAVKArsw130aqgNdCoRm/eNNw= Subject key identifier: 38:04:BB:D3:E6:39:59:0B:CF:15:55:AE:32:F1:6F:1D:72:08:DF:40 Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Certificate serial: 019C427DCE6DECB6702A6414269A12879BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft Manifest number: 13B3 Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa (hash: gTefC/kLKJlQRjCqhwo1qEZQvhe2YWlgNO1XB76+Uz8=) 2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: Z95S4fWd6/3lshPHbnElzwUavT0JFsl/5ww52qcuAKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ce:6d:ec:b6:70:2a:64:14:26:9a:12:87:9b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=3804bbd3e639590bcf1555ae32f16f1d7208df40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:82:78:32:72:a7:b8:71:b1:1b:71:21:47: f7:cd:ef:fa:a3:38:62:66:de:df:fb:61:01:16:3e: ed:3a:62:22:62:26:59:49:f9:dc:21:c8:d0:91:92: 6a:9f:5f:c9:b0:f0:73:3b:0c:b9:fb:0d:02:69:b1: 9a:63:6f:35:86:79:83:b8:41:79:e4:7a:bb:47:68: a6:f6:77:ee:f9:0f:96:af:65:e2:9a:21:f9:16:f7: 22:a6:80:08:c7:60:f0:ac:28:10:5c:bc:73:2e:f6: 09:1b:4d:64:b7:b1:ae:96:c7:04:24:62:fb:63:df: c0:b9:51:15:e1:53:61:41:16:d6:c1:1d:d6:65:ce: bc:3c:9b:4f:88:94:10:b3:38:27:cc:88:aa:b5:30: 8a:78:cb:a8:fa:ba:b7:ed:94:be:5d:85:7d:be:83: 8c:cd:6d:0a:9a:78:29:43:5c:4f:dc:85:54:f9:df: b6:58:a0:34:50:2e:99:ec:30:ba:7f:e6:1f:cb:2b: e8:db:8a:43:5f:2d:44:5e:e7:45:e6:e5:19:4e:50: ee:d4:4f:0e:69:3a:25:45:b8:53:3e:56:35:28:53: 3b:13:5f:1f:c2:3a:44:03:fc:11:03:91:c4:73:dd: c4:e1:47:5e:c2:93:49:8d:74:82:94:8d:80:a7:7e: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:BB:D3:E6:39:59:0B:CF:15:55:AE:32:F1:6F:1D:72:08:DF:40 X509v3 Authority Key Identifier: keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b2:87:15:fe:53:69:36:ef:bc:4b:1f:a9:f6:ec:b3:9c:e4: bf:02:d5:9e:d1:c0:29:33:d2:47:62:4a:d5:bc:7f:7e:dd:7c: 4a:e8:ec:13:df:13:99:f3:cf:93:51:47:38:f4:9e:65:4b:3b: 17:51:cc:2a:d9:81:51:84:c6:f3:17:df:94:4d:1a:bf:5d:07: cd:6a:5d:5f:c8:08:2f:55:db:15:e4:1c:a9:a5:ca:ba:9c:8e: 7b:87:7f:b2:7e:d9:fc:71:c9:84:69:ba:59:88:b2:38:88:a8: 91:ef:84:90:16:08:2d:fa:08:b0:de:d1:7b:c2:35:65:12:1a: aa:73:a9:78:6b:5d:d3:fe:6c:d8:5f:4b:ea:43:b9:12:c1:1b: 8e:be:d7:bd:9c:ba:16:be:07:42:4b:a6:c6:31:de:7b:eb:93: 96:96:0a:23:f2:cc:60:51:1a:4f:2b:35:6f:bf:12:72:da:3a: b8:4f:85:b1:09:66:b2:2a:7c:e8:1e:d2:4d:71:b2:97:1d:7c: 8f:65:3f:ca:d5:a4:59:bd:b3:b4:e5:01:24:01:cf:16:64:68: cf:0b:9a:85:6d:de:00:1b:d8:e5:bd:98:78:2e:76:e7:04:21: 50:69:4d:45:3a:e5:24:6d:bc:9c:83:c8:ed:5e:b3:34:62:22: dd:e1:07:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfc5t7LZwKmQUJpoSh5uuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy ZTEyNjkwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD EygzODA0YmJkM2U2Mzk1OTBiY2YxNTU1YWUzMmYxNmYxZDcyMDhkZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR2CeDJyp7hxsRtxIUf3ze/6ozhi Zt7f+2EBFj7tOmIiYiZZSfncIcjQkZJqn1/JsPBzOwy5+w0CabGaY281hnmDuEF5 5Hq7R2im9nfu+Q+Wr2XimiH5FvcipoAIx2DwrCgQXLxzLvYJG01kt7GulscEJGL7 Y9/AuVEV4VNhQRbWwR3WZc68PJtPiJQQszgnzIiqtTCKeMuo+rq37ZS+XYV9voOM zW0KmngpQ1xP3IVU+d+2WKA0UC6Z7DC6f+Yfyyvo24pDXy1EXudF5uUZTlDu1E8O aTolRbhTPlY1KFM7E18fwjpEA/wRA5HEc93E4UdewpNJjXSClI2Ap35RBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgEu9PmOVkLzxVVrjLxbx1yCN9AMB8GA1UdIwQY MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt OGYxODFkM2EzZThmLzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLKHFf5T aTbvvEsfqfbss5zkvwLVntHAKTPSR2JK1bx/ft18SujsE98TmfPPk1FHOPSeZUs7 F1HMKtmBUYTG8xfflE0av10HzWpdX8gIL1XbFeQcqaXKupyOe4d/sn7Z/HHJhGm6 WYiyOIioke+EkBYILfoIsN7Re8I1ZRIaqnOpeGtd0/5s2F9L6kO5EsEbjr7XvZy6 Fr4HQkumxjHee+uTlpYKI/LMYFEaTys1b78Scto6uE+FsQlmsip86B7STXGylx18 j2U/ytWkWb2ztOUBJAHPFmRozwuahW3eABvY5b2YeC525wQhUGlNRTrlJG28nIPI 7V6zNGIi3eEHLw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:30 2026 by rpki-client