This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json) Hash identifier: gSU5uVITyt4C7IgC9LuY9wgPB9SS/CPqKMPO37GFwAk= Subject key identifier: 22:56:A8:4B:02:1E:91:12:07:B8:C7:B3:F3:79:84:4E:23:B1:AD:B9 Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73 Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73 Certificate serial: 019C427D8D58486CD6669B585B5FF5CAB2D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft Manifest number: 0D18 Signing time: Mon 09 Feb 2026 13:00:50 +0000 Manifest this update: Mon 09 Feb 2026 13:00:50 +0000 Manifest next update: Tue 10 Feb 2026 13:00:50 +0000 Files and hashes: 1: dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa (hash: X1YBtggX7sXN/XI659Z7sShfySUKcJ9Z3YnMpVPGY7o=) 2: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: DMVcuk9ZdrrKf8IK9nqjdwOkdbmK+XvdYzSU7cbaU0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:8d:58:48:6c:d6:66:9b:58:5b:5f:f5:ca:b2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73 Validity Not Before: Feb 9 13:00:50 2026 GMT Not After : Feb 10 13:00:50 2026 GMT Subject: CN=2256a84b021e911207b8c7b3f379844e23b1adb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:bc:d6:ae:91:6a:88:cc:e5:78:7d:c5:53: 09:b0:47:34:29:9e:37:b8:2c:21:83:20:a4:4a:3b: 6f:86:fc:d4:bb:52:2a:4e:27:8f:b0:04:4c:4f:b9: f7:21:2b:80:ba:14:3c:eb:2e:16:cc:76:e5:6f:07: 81:fa:d9:93:55:07:e5:ac:a3:f3:6a:da:a8:28:ee: fa:fe:54:f4:03:87:eb:25:05:2e:ae:53:27:7c:d1: 15:5a:a5:f4:bd:da:99:99:f4:c3:22:c1:5f:9b:9a: 88:e3:a3:cb:d7:81:14:41:f1:30:77:de:44:70:e8: b5:b1:8d:c8:6d:ad:bc:e5:d0:0e:32:28:34:02:08: a8:da:89:73:72:86:98:8b:c3:5e:29:b3:ac:ea:d0: a0:8c:aa:4a:37:f3:5c:ec:15:0f:ee:96:d2:99:4e: 4c:21:84:ea:ea:8a:6d:7e:e8:a1:7f:fe:c4:7f:de: 81:f7:31:18:59:e5:17:ea:b0:e3:e5:60:a2:a6:d2: 7f:f3:6a:6a:01:dc:e4:88:27:83:7e:c6:c6:a3:96: fb:dc:d5:b6:6b:88:3d:ad:03:40:4f:75:cf:0d:dd: 54:a5:02:e5:3f:07:f4:45:40:60:52:63:52:0d:84: b1:b0:81:a5:95:91:14:bf:48:07:ed:dd:ca:c8:b1: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:56:A8:4B:02:1E:91:12:07:B8:C7:B3:F3:79:84:4E:23:B1:AD:B9 X509v3 Authority Key Identifier: keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ae:28:af:8e:32:7a:34:11:41:68:ae:0d:b5:f5:0c:1f:5e: d6:be:c0:87:42:77:11:40:26:4f:4c:c8:bf:82:06:40:b6:93: 1d:78:4a:9a:b0:b4:83:3c:bb:db:94:d1:19:d5:0e:f6:3f:37: c1:25:88:24:28:9d:eb:5f:46:36:a5:e7:b4:e6:02:58:2e:1e: 5c:9e:fd:f6:14:ac:32:2a:79:c4:a0:eb:8c:ad:3b:fb:8f:2f: c9:c8:54:d1:01:da:97:9e:33:2a:78:d6:11:10:a0:60:43:bf: ca:5f:e3:fd:34:41:78:e2:2b:39:fb:08:48:6f:d2:6a:b2:2c: 99:11:87:70:22:fc:be:9a:95:e7:d4:89:a6:0c:fe:95:49:38: 68:1d:7e:62:56:00:03:bb:88:82:e4:09:b6:06:86:37:16:34: 17:e2:12:15:fb:a7:3b:ce:f5:d7:37:8c:20:55:01:e1:d5:c6: 10:44:76:1b:9b:02:95:57:a6:55:59:0b:e4:ad:30:13:0b:4f: 01:9d:50:5d:ab:cb:91:72:b3:b8:bc:93:e3:68:f4:f8:e4:ab: 32:66:5f:56:0e:25:63:30:a1:43:ae:ac:d0:e0:e5:d2:f5:3c: 45:0e:95:83:28:c8:b8:10:02:0c:81:3a:51:b3:e8:c9:d1:b9: 66:df:f2:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfY1YSGzWZptYW1/1yrLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2NlZDMwYjI4NTJlNTUyYzc4Mzc0NjcwMDNmMTc1ZWE1 OWRlNzMwHhcNMjYwMjA5MTMwMDUwWhcNMjYwMjEwMTMwMDUwWjAzMTEwLwYDVQQD EygyMjU2YTg0YjAyMWU5MTEyMDdiOGM3YjNmMzc5ODQ0ZTIzYjFhZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKm81q6RaojM5Xh9xVMJsEc0KZ43 uCwhgyCkSjtvhvzUu1IqTiePsARMT7n3ISuAuhQ86y4WzHblbweB+tmTVQflrKPz atqoKO76/lT0A4frJQUurlMnfNEVWqX0vdqZmfTDIsFfm5qI46PL14EUQfEwd95E cOi1sY3Iba285dAOMig0Agio2olzcoaYi8NeKbOs6tCgjKpKN/Nc7BUP7pbSmU5M IYTq6optfuihf/7Ef96B9zEYWeUX6rDj5WCiptJ/82pqAdzkiCeDfsbGo5b73NW2 a4g9rQNAT3XPDd1UpQLlPwf0RUBgUmNSDYSxsIGllZEUv0gH7d3KyLE93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJWqEsCHpESB7jHs/N5hE4jsa25MB8GA1UdIwQY MBaAFI887TCyhS5VLHg3RnAD8XXqWd5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kZjllMmQtYTAzMy00MGMwLWEwMGYt ZTM0NGZkYjcyMmEzLzEvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kZjllMmQtYTAzMy00MGMwLWEwMGYtZTM0NGZkYjcyMmEz LzEvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq4or44y ejQRQWiuDbX1DB9e1r7Ah0J3EUAmT0zIv4IGQLaTHXhKmrC0gzy725TRGdUO9j83 wSWIJCid619GNqXntOYCWC4eXJ799hSsMip5xKDrjK07+48vychU0QHal54zKnjW ERCgYEO/yl/j/TRBeOIrOfsISG/SarIsmRGHcCL8vpqV59SJpgz+lUk4aB1+YlYA A7uIguQJtgaGNxY0F+ISFfunO8711zeMIFUB4dXGEER2G5sClVemVVkL5K0wEwtP AZ1QXavLkXKzuLyT42j0+OSrMmZfVg4lYzChQ66s0ODl0vU8RQ6VgyjIuBACDIE6 UbPoydG5Zt/y1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:08 2026 by rpki-client