This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json) Hash identifier: UbLn0kpmRZ45XbI02UY1s4JaB7B6+uUp5QlOLQCGlUI= Subject key identifier: D1:79:01:6B:47:69:40:05:81:59:37:B3:F0:73:D8:E7:18:7E:C2:9C Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Certificate serial: 019C427D1D87F8EE27B1DF544CC35A85DA60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft Manifest number: 0AD9 Signing time: Mon 09 Feb 2026 13:00:21 +0000 Manifest this update: Mon 09 Feb 2026 13:00:21 +0000 Manifest next update: Tue 10 Feb 2026 13:00:21 +0000 Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=) 2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: JV8iCTfGIz0vgiuvbtllF8aLri2oOQ0TEsxvqMw0GMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:1d:87:f8:ee:27:b1:df:54:4c:c3:5a:85:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Validity Not Before: Feb 9 13:00:21 2026 GMT Not After : Feb 10 13:00:21 2026 GMT Subject: CN=d179016b47694005815937b3f073d8e7187ec29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:d9:3f:4c:66:e3:1f:b6:38:94:df:1a:9d: 17:1b:ee:68:6e:73:ac:58:af:a7:e3:7d:ce:6d:8e: 09:34:f0:10:32:4c:64:70:83:2e:d5:ab:86:1e:96: 16:80:aa:e8:58:a2:f8:9b:34:b1:46:46:8f:0c:bc: 20:23:1a:eb:da:82:1a:c0:aa:07:52:7b:f8:40:5b: a7:f9:6d:8c:2e:c5:99:39:51:99:84:e8:fb:06:de: a4:84:49:74:4c:d0:b4:be:59:44:fb:55:46:cc:29: a4:f4:8b:2d:0c:54:f8:2e:57:c8:22:c2:57:82:94: 44:b2:33:b5:02:c1:08:8b:29:95:43:40:71:2f:ae: 81:e8:0c:b3:22:49:9a:f5:2a:56:fd:ca:45:ea:b0: 48:f0:f0:e9:a9:e0:1e:e7:3e:ef:f5:34:b2:76:3b: f3:d0:9a:97:32:10:4f:fe:c0:6d:37:1a:b2:65:71: 7f:2f:8c:69:d7:4b:de:1f:da:e5:e3:ec:b1:63:96: 9c:21:e5:1f:65:69:31:d3:38:45:0a:a0:55:79:33: 36:e1:a9:be:07:b1:eb:b3:4f:ce:e9:c5:4c:b9:d4: cc:32:1a:be:06:01:f0:3d:39:ad:22:90:ef:bd:c3: 78:29:fa:27:19:ce:a3:1a:a2:72:9e:6d:33:42:ea: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:79:01:6B:47:69:40:05:81:59:37:B3:F0:73:D8:E7:18:7E:C2:9C X509v3 Authority Key Identifier: keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:63:47:02:ed:a9:21:b9:52:50:d8:25:16:a5:28:b4:c3:8f: 8e:d2:4b:e7:38:03:c7:0a:8e:13:b4:b5:46:32:15:26:b6:4e: b9:f8:bd:f3:3a:39:b6:38:63:ca:2b:97:5e:0a:13:69:a7:fa: 79:e4:e6:65:b4:8f:5e:10:6e:3e:5d:70:8f:d8:2b:1c:93:5a: 96:84:74:00:1a:19:e2:f5:97:fc:75:ae:6e:83:57:61:ed:8f: ca:ff:91:56:f4:10:a6:cd:38:2e:7b:c5:da:13:f2:26:7b:c0: f4:b8:d9:6b:ed:88:8e:30:26:a4:04:43:c1:cb:75:a8:db:9a: 69:b0:c0:20:0e:8e:f4:61:af:10:d5:b7:49:84:0f:cc:6e:a9: 43:ad:d8:7a:d5:ed:5f:13:e1:47:15:e2:94:bc:80:16:ec:68: 0b:e3:a3:85:9b:56:94:35:0e:ad:92:d2:d9:7e:80:1b:e0:5b: cc:cd:ba:48:0b:02:47:4f:b1:2b:41:af:72:23:3a:8b:c8:9a: 74:5a:05:d5:d5:61:37:3b:be:1b:76:da:7d:26:c3:2b:b0:ef: 7c:b4:a8:52:10:5c:28:76:75:26:a9:fb:c8:4e:0f:c5:29:82: 37:e3:b5:11:ed:2c:87:fb:ce:9c:e2:a0:87:d0:5d:ae:0b:ed: e9:bf:b6:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfR2H+O4nsd9UTMNahdpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk OWRhNWYwHhcNMjYwMjA5MTMwMDIxWhcNMjYwMjEwMTMwMDIxWjAzMTEwLwYDVQQD EyhkMTc5MDE2YjQ3Njk0MDA1ODE1OTM3YjNmMDczZDhlNzE4N2VjMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv87ZP0xm4x+2OJTfGp0XG+5obnOs WK+n433ObY4JNPAQMkxkcIMu1auGHpYWgKroWKL4mzSxRkaPDLwgIxrr2oIawKoH Unv4QFun+W2MLsWZOVGZhOj7Bt6khEl0TNC0vllE+1VGzCmk9IstDFT4LlfIIsJX gpREsjO1AsEIiymVQ0BxL66B6AyzIkma9SpW/cpF6rBI8PDpqeAe5z7v9TSydjvz 0JqXMhBP/sBtNxqyZXF/L4xp10veH9rl4+yxY5acIeUfZWkx0zhFCqBVeTM24am+ B7Hrs0/O6cVMudTMMhq+BgHwPTmtIpDvvcN4KfonGc6jGqJynm0zQuqrsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF5AWtHaUAFgVk3s/Bz2OcYfsKcMB8GA1UdIwQY MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2NHAu2p IblSUNglFqUotMOPjtJL5zgDxwqOE7S1RjIVJrZOufi98zo5tjhjyiuXXgoTaaf6 eeTmZbSPXhBuPl1wj9grHJNaloR0ABoZ4vWX/HWuboNXYe2Pyv+RVvQQps04LnvF 2hPyJnvA9LjZa+2IjjAmpARDwct1qNuaabDAIA6O9GGvENW3SYQPzG6pQ63YetXt XxPhRxXilLyAFuxoC+OjhZtWlDUOrZLS2X6AG+BbzM26SAsCR0+xK0GvciM6i8ia dFoF1dVhNzu+G3bafSbDK7DvfLSoUhBcKHZ1Jqn7yE4PxSmCN+O1Ee0sh/vOnOKg h9Bdrgvt6b+2dA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:09 2026 by rpki-client