This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json) Hash identifier: vTs2ic6P1oHSV0+VfOiuEaQ1RLzHsOyUaRGlEDgMgJo= Subject key identifier: 6C:4F:7C:33:ED:DE:86:15:C1:A9:9B:B0:FC:4C:05:70:20:92:C2:8F Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Certificate serial: 019C42EBA4A432E1BA572006A074C3F4A691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:01:05 +0000 Manifest this update: Mon 09 Feb 2026 15:01:05 +0000 Manifest next update: Tue 10 Feb 2026 15:01:05 +0000 Files and hashes: 1: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: 7gXZ0GDzGGL9RZuiKTg8Y6zP16SNuusrtsKC/gAVz1w=) 2: p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa (hash: V5+8Cu1ZSU54lkDzthadhaeHWXQzx9+t4lsqXq/ECiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:a4:a4:32:e1:ba:57:20:06:a0:74:c3:f4:a6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Validity Not Before: Feb 9 15:01:05 2026 GMT Not After : Feb 10 15:01:05 2026 GMT Subject: CN=6c4f7c33edde8615c1a99bb0fc4c05702092c28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:4f:33:c4:cd:19:c9:45:fc:f0:ab:3e:ef: c0:33:d9:90:bf:7b:63:68:88:df:94:13:48:38:74: a6:9c:22:3f:52:47:f9:39:f6:f9:21:4a:f5:ac:ca: 79:ba:19:d4:4d:2a:80:1f:34:c9:bf:89:6d:f9:2c: 64:dc:79:d9:0e:74:5f:f6:41:f0:2a:1c:9f:49:a9: cc:02:1b:a9:d1:90:48:33:f2:89:63:f5:b3:c0:d8: 4e:b5:4d:55:cd:b3:07:4a:2f:6a:b3:46:68:68:4a: 5d:c8:27:6c:b1:98:c3:a0:86:24:9c:b6:3a:61:80: 96:96:60:23:17:df:39:d8:dc:df:43:90:2f:a8:12: 32:0d:2e:49:3f:f7:61:2e:e3:40:5d:22:9d:bd:a4: 11:88:5a:50:b8:1b:d0:2f:c9:54:d2:15:de:ea:31: e7:23:8a:e0:29:7e:70:7e:5d:f5:05:f2:54:39:d2: 1a:16:4e:84:9e:ad:2b:83:62:97:22:b8:5a:11:2a: a9:b9:af:03:a8:0e:36:41:02:99:36:10:3f:bc:bb: e6:77:99:96:c6:8d:17:25:70:00:36:71:5c:52:9f: dd:5d:e4:0f:f2:c8:99:e9:bb:2d:63:05:e6:be:37: e2:b5:bb:e0:50:bd:25:b0:93:52:ef:68:b0:5a:d7: 84:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:7C:33:ED:DE:86:15:C1:A9:9B:B0:FC:4C:05:70:20:92:C2:8F X509v3 Authority Key Identifier: keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:48:4a:94:1b:6b:3b:4f:c7:92:f7:93:42:fb:62:88:17: 93:5e:3e:8c:83:42:f9:5f:e7:8b:4a:9e:80:5b:3f:2c:72:28: 97:1c:55:1c:6a:e4:27:52:fb:69:f7:c0:6f:4c:f0:72:f0:cc: b2:f0:c6:b1:d4:b4:d4:1b:12:68:be:64:e8:b9:08:f1:86:dc: 50:83:79:3a:16:81:6f:0e:f0:6b:54:48:cc:97:b0:d2:4e:10: cc:c9:98:61:0c:30:a9:70:96:49:e2:49:20:b7:51:dd:29:88: f0:18:bb:d5:18:2d:9b:8b:b6:1f:bb:b5:01:15:4c:d0:62:23: f4:9b:f6:75:c4:e6:bd:e2:92:d2:27:13:7c:ef:37:02:64:5d: 35:25:23:43:cf:ea:2c:9d:94:5c:9e:ba:90:97:ca:9e:a4:56: 58:f9:80:9d:db:4a:21:48:c3:80:e4:b5:6a:84:e8:ae:d6:09: 6e:02:26:99:2c:34:11:0a:f9:75:74:a1:5b:5e:1d:1d:c7:5f: 5c:42:2f:20:85:a5:ad:4b:ac:38:69:7e:2f:60:a0:73:85:e1: 88:2c:87:2c:5b:06:eb:bd:4b:80:6a:72:f1:b7:7b:69:6f:92: 53:08:e3:d4:21:e7:06:7e:5c:95:b0:31:8b:4a:8f:df:d3:63: 6c:83:e5:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66SkMuG6VyAGoHTD9KaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx NDhiNTQwHhcNMjYwMjA5MTUwMTA1WhcNMjYwMjEwMTUwMTA1WjAzMTEwLwYDVQQD Eyg2YzRmN2MzM2VkZGU4NjE1YzFhOTliYjBmYzRjMDU3MDIwOTJjMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLFPM8TNGclF/PCrPu/AM9mQv3tj aIjflBNIOHSmnCI/Ukf5Ofb5IUr1rMp5uhnUTSqAHzTJv4lt+Sxk3HnZDnRf9kHw KhyfSanMAhup0ZBIM/KJY/WzwNhOtU1VzbMHSi9qs0ZoaEpdyCdssZjDoIYknLY6 YYCWlmAjF9852NzfQ5AvqBIyDS5JP/dhLuNAXSKdvaQRiFpQuBvQL8lU0hXe6jHn I4rgKX5wfl31BfJUOdIaFk6Enq0rg2KXIrhaESqpua8DqA42QQKZNhA/vLvmd5mW xo0XJXAANnFcUp/dXeQP8siZ6bstYwXmvjfitbvgUL0lsJNS72iwWteESwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxPfDPt3oYVwambsPxMBXAgksKPMB8GA1UdIwQY MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDxISpQb aztPx5L3k0L7YogXk14+jINC+V/ni0qegFs/LHIolxxVHGrkJ1L7affAb0zwcvDM svDGsdS01BsSaL5k6LkI8YbcUIN5OhaBbw7wa1RIzJew0k4QzMmYYQwwqXCWSeJJ ILdR3SmI8Bi71Rgtm4u2H7u1ARVM0GIj9Jv2dcTmveKS0icTfO83AmRdNSUjQ8/q LJ2UXJ66kJfKnqRWWPmAndtKIUjDgOS1aoTortYJbgImmSw0EQr5dXShW14dHcdf XEIvIIWlrUusOGl+L2Cgc4XhiCyHLFsG671LgGpy8bd7aW+SUwjj1CHnBn5clbAx i0qP39NjbIPlOQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:06 2026 by rpki-client