This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json) Hash identifier: UtSnTMtiZToJHvMavEl89VWl5RwSRdX5qBENOD13KKg= Subject key identifier: 72:ED:81:9D:32:92:B3:A9:4E:3D:34:F0:B4:2E:AB:07:21:C2:CA:D6 Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Certificate serial: 019C41A1B688009EEADAA3C7DDE0FABC1BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft Manifest number: 1750 Signing time: Mon 09 Feb 2026 09:00:42 +0000 Manifest this update: Mon 09 Feb 2026 09:00:42 +0000 Manifest next update: Tue 10 Feb 2026 09:00:42 +0000 Files and hashes: 1: YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa (hash: NxSxMzYasyCjB5BO8JzAFcBo/KBnMoapQAl4A8Q+rNU=) 2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: gubKCev3jAKzO457EkaoBMXOdJn+gIPqYEL51HOrszo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:b6:88:00:9e:ea:da:a3:c7:dd:e0:fa:bc:1b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Validity Not Before: Feb 9 09:00:42 2026 GMT Not After : Feb 10 09:00:42 2026 GMT Subject: CN=72ed819d3292b3a94e3d34f0b42eab0721c2cad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:33:c8:29:7b:ef:77:1c:7d:70:df:8b:49: f9:04:67:e6:97:64:26:f2:7c:e7:07:c3:0d:e7:af: 09:0e:b5:aa:17:cf:28:89:3d:5f:1c:56:05:85:ce: ba:ec:cf:b2:b2:27:57:b8:db:e7:c1:ca:6c:45:ad: eb:c9:d4:44:35:8b:32:b7:1d:35:ac:f4:45:eb:80: d2:38:0c:d5:fe:1d:07:08:d3:0b:a9:bc:cb:a1:b0: a7:64:46:bb:64:67:b8:c5:a7:ef:34:e1:a3:45:22: 07:95:69:5c:9a:4f:a8:aa:58:2f:3d:9d:85:10:c1: cb:d3:c7:87:bb:e2:54:ef:68:58:30:1c:26:1c:ab: 2f:6f:9d:76:dc:12:2c:a0:9a:20:51:86:73:7f:ef: 12:1d:69:72:2a:56:aa:0f:5b:ba:e6:c9:52:84:63: 6a:06:db:c8:4e:73:da:fa:93:c0:d1:37:b5:b2:43: 72:9b:04:05:87:d8:11:87:3d:7f:16:0a:57:35:39: 4c:56:a7:6b:c7:6d:4f:89:3f:50:b6:30:96:51:d4: 7b:d5:57:e6:cb:c3:f9:39:2a:94:0b:04:8a:0f:7f: ef:be:cf:37:a7:a4:b3:4c:f9:38:ba:29:e2:7b:f0: 2e:53:51:9c:23:64:0c:90:d9:f3:15:81:a9:8a:6d: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:ED:81:9D:32:92:B3:A9:4E:3D:34:F0:B4:2E:AB:07:21:C2:CA:D6 X509v3 Authority Key Identifier: keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:33:62:94:51:58:b9:51:ca:ee:7e:fb:6b:35:44:f4:d3:ca: ba:85:f4:47:81:05:ce:26:7b:5b:08:f2:b6:ca:7a:11:f0:76: d0:4d:16:6f:10:2e:54:56:2d:06:f6:f4:2c:23:53:df:ba:01: 69:63:75:e8:50:da:15:65:b3:f6:5a:eb:37:ff:3c:3a:30:ed: af:53:e1:3c:69:44:13:68:40:ac:6f:72:ff:24:c5:58:68:a6: f4:36:21:b6:45:f4:97:cf:c6:09:e5:89:47:7d:66:f6:d2:31: 7e:22:0a:db:16:71:46:0a:a8:96:0d:36:a2:9a:e3:e4:ce:23: 8f:bf:72:43:47:a9:2a:d4:db:b9:3f:ae:c6:1e:76:0b:19:cb: 8e:70:c5:d6:73:aa:bf:ce:0f:76:2b:37:ec:ca:49:63:d9:3c: 3d:70:0d:c7:98:13:63:74:b0:05:83:9d:23:70:7c:82:aa:4d: 6b:f4:47:77:03:8d:2e:f3:38:7e:b1:35:48:5b:1c:33:c3:37: bd:b0:0d:2a:74:3d:b1:22:f9:bb:7e:bf:b8:dc:6f:fb:7c:f9: bc:1a:85:05:95:8f:64:c1:df:fe:1d:d0:48:6f:04:98:e9:8d: 3a:15:f7:28:c9:bb:de:92:79:06:2d:78:51:1a:2d:ed:70:c2: 5d:c0:4a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobaIAJ7q2qPH3eD6vBvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2 NWE4MDkwHhcNMjYwMjA5MDkwMDQyWhcNMjYwMjEwMDkwMDQyWjAzMTEwLwYDVQQD Eyg3MmVkODE5ZDMyOTJiM2E5NGUzZDM0ZjBiNDJlYWIwNzIxYzJjYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqawzyCl773ccfXDfi0n5BGfml2Qm 8nznB8MN568JDrWqF88oiT1fHFYFhc667M+ysidXuNvnwcpsRa3rydRENYsytx01 rPRF64DSOAzV/h0HCNMLqbzLobCnZEa7ZGe4xafvNOGjRSIHlWlcmk+oqlgvPZ2F EMHL08eHu+JU72hYMBwmHKsvb5123BIsoJogUYZzf+8SHWlyKlaqD1u65slShGNq BtvITnPa+pPA0Te1skNymwQFh9gRhz1/FgpXNTlMVqdrx21PiT9QtjCWUdR71Vfm y8P5OSqUCwSKD3/vvs83p6SzTPk4uinie/AuU1GcI2QMkNnzFYGpim3IbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLtgZ0ykrOpTj008LQuqwchwsrWMB8GA1UdIwQY MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4 LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazNilFFY uVHK7n77azVE9NPKuoX0R4EFziZ7Wwjytsp6EfB20E0WbxAuVFYtBvb0LCNT37oB aWN16FDaFWWz9lrrN/88OjDtr1PhPGlEE2hArG9y/yTFWGim9DYhtkX0l8/GCeWJ R31m9tIxfiIK2xZxRgqolg02oprj5M4jj79yQ0epKtTbuT+uxh52CxnLjnDF1nOq v84Pdis37MpJY9k8PXANx5gTY3SwBYOdI3B8gqpNa/RHdwONLvM4frE1SFscM8M3 vbANKnQ9sSL5u36/uNxv+3z5vBqFBZWPZMHf/h3QSG8EmOmNOhX3KMm73pJ5Bi14 URot7XDCXcBKeg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:55 2026 by rpki-client