This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json) Hash identifier: fRzc6GkGXNqE5zzR+rpyHwr9sAdbYwH4gLx5h4h8tXE= Subject key identifier: 9A:34:AA:FE:68:55:2D:B4:9B:4B:03:F3:7B:A2:0F:05:72:C2:91:ED Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Certificate serial: 019C420FE884D1EBF638BCD6408CD2EDE011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:01:04 +0000 Manifest this update: Mon 09 Feb 2026 11:01:04 +0000 Manifest next update: Tue 10 Feb 2026 11:01:04 +0000 Files and hashes: 1: AySsPboe2PxrB1Gyq1W06Px76LY.roa (hash: YaBT4lmGzSO4QjZLhswASZb2ScD2t8fau691sPdnGM4=) 2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: Bp2/4S+MOn+/uVaPz1qfFB0szUQLN26ialgYryc7EVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e8:84:d1:eb:f6:38:bc:d6:40:8c:d2:ed:e0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8 Validity Not Before: Feb 9 11:01:04 2026 GMT Not After : Feb 10 11:01:04 2026 GMT Subject: CN=9a34aafe68552db49b4b03f37ba20f0572c291ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:1f:e4:43:05:74:1d:4d:77:a4:f5:d0:1f: c9:a8:1c:ae:09:3e:4f:96:76:e8:b0:2b:40:ed:36: ea:0b:38:ff:fc:2c:71:ea:52:c6:05:fe:5b:1d:b2: a0:d5:75:c1:01:c2:89:38:0b:6d:7b:c6:cb:92:5f: 27:ac:78:78:c9:ee:a8:d9:c0:ac:29:2f:aa:1b:9b: f7:10:6d:c7:dc:55:47:75:c7:37:39:4a:b3:90:c7: a4:82:91:07:e0:78:a2:4d:04:f5:cc:58:5a:90:ba: 40:be:3a:70:78:0a:9f:09:db:61:76:d6:0f:77:56: 1c:0e:85:9d:7d:4a:7d:af:0b:79:25:38:da:a2:b4: c3:b2:80:5d:d3:47:19:13:16:9f:3d:bc:5b:84:ec: 46:1d:a2:86:9d:e7:ef:13:68:90:82:c3:e5:50:46: b9:c2:e0:77:d7:da:f0:4f:ac:be:72:69:2a:78:b6: 02:c2:ea:b6:da:dd:8d:22:b7:69:00:ee:dd:92:5c: db:b2:7c:31:e9:31:8d:6b:74:3e:33:12:65:d0:04: e4:e0:bb:f1:16:22:a4:22:96:fb:48:66:13:0f:48: 3e:0b:02:bf:41:90:1e:18:e7:b0:b1:25:a1:b7:c4: 1c:9f:53:5c:48:14:8a:f7:f8:25:14:e6:59:d7:d2: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:34:AA:FE:68:55:2D:B4:9B:4B:03:F3:7B:A2:0F:05:72:C2:91:ED X509v3 Authority Key Identifier: keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bd:7a:f1:ce:74:62:9f:2d:9a:63:d2:67:e1:b9:9c:32:bb: 75:2e:b3:5c:c4:9b:fd:99:5c:d6:38:fb:56:ee:f3:26:b9:08: cf:2c:a7:b0:8e:e6:a6:e0:28:fe:df:5f:eb:30:be:3a:4f:12: 5d:d7:50:c6:ca:08:4b:4d:f7:8c:c9:e1:7a:c1:26:cd:9f:0a: f1:b5:44:bb:57:b9:82:8c:52:74:db:e3:2e:58:be:08:5c:2e: ad:7f:a1:57:67:93:d4:af:bb:e6:6c:44:a6:fa:d6:f4:71:12: 18:2f:eb:7e:92:d5:68:c3:47:d5:ed:8d:8e:51:8b:64:8f:1f: 75:64:95:97:f4:7a:02:b7:98:a5:d1:36:44:1b:cc:19:0c:31: 34:0e:23:57:e7:49:9b:54:64:70:f8:02:9f:3d:d4:ab:f2:db: b1:b1:11:c2:05:5d:d3:a5:e7:8a:45:16:2f:ed:c1:40:ba:81: 4c:27:9e:0e:9e:43:98:cf:49:0b:0c:f1:08:8e:e9:d7:1a:7a: 4e:3c:0e:d4:28:e5:63:ad:b6:af:36:d5:05:a9:58:06:8b:bc: 5d:24:7a:d0:2e:2a:d7:03:59:0c:3d:67:6c:08:a6:40:f9:d3: 71:79:2e:86:50:96:7b:7a:0b:33:79:28:08:e2:85:07:2e:f2: af:0a:85:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+iE0ev2OLzWQIzS7eARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0 NjVjYjgwHhcNMjYwMjA5MTEwMTA0WhcNMjYwMjEwMTEwMTA0WjAzMTEwLwYDVQQD Eyg5YTM0YWFmZTY4NTUyZGI0OWI0YjAzZjM3YmEyMGYwNTcyYzI5MWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYEf5EMFdB1Nd6T10B/JqByuCT5P lnbosCtA7TbqCzj//Cxx6lLGBf5bHbKg1XXBAcKJOAtte8bLkl8nrHh4ye6o2cCs KS+qG5v3EG3H3FVHdcc3OUqzkMekgpEH4HiiTQT1zFhakLpAvjpweAqfCdthdtYP d1YcDoWdfUp9rwt5JTjaorTDsoBd00cZExafPbxbhOxGHaKGnefvE2iQgsPlUEa5 wuB319rwT6y+cmkqeLYCwuq22t2NIrdpAO7dklzbsnwx6TGNa3Q+MxJl0ATk4Lvx FiKkIpb7SGYTD0g+CwK/QZAeGOewsSWht8Qcn1NcSBSK9/glFOZZ19L38wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo0qv5oVS20m0sD83uiDwVywpHtMB8GA1UdIwQY MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb168c50 Yp8tmmPSZ+G5nDK7dS6zXMSb/Zlc1jj7Vu7zJrkIzyynsI7mpuAo/t9f6zC+Ok8S XddQxsoIS033jMnhesEmzZ8K8bVEu1e5goxSdNvjLli+CFwurX+hV2eT1K+75mxE pvrW9HESGC/rfpLVaMNH1e2NjlGLZI8fdWSVl/R6AreYpdE2RBvMGQwxNA4jV+dJ m1RkcPgCnz3Uq/LbsbERwgVd06XnikUWL+3BQLqBTCeeDp5DmM9JCwzxCI7p1xp6 TjwO1CjlY622rzbVBalYBou8XSR60C4q1wNZDD1nbAimQPnTcXkuhlCWe3oLM3ko COKFBy7yrwqFGw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:31 2026 by rpki-client