This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json) Hash identifier: 7xsQUmIH2YFre2KBRKHeOhPOIVtFUQ35gbgu6PGZD1o= Subject key identifier: 8B:E7:2A:B8:14:49:B9:85:9A:12:CD:8A:B9:D7:EE:EC:4E:93:FF:5B Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Certificate serial: 019C42B4409CD96F0B64B38C72FAE7D9A5E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft Manifest number: 02C3 Signing time: Mon 09 Feb 2026 14:00:35 +0000 Manifest this update: Mon 09 Feb 2026 14:00:35 +0000 Manifest next update: Tue 10 Feb 2026 14:00:35 +0000 Files and hashes: 1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: Pia9iy8XNq4BxYX+MIe6My2UtoyC/Chka5GjsqLEYHw=) 2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:40:9c:d9:6f:0b:64:b3:8c:72:fa:e7:d9:a5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196 Validity Not Before: Feb 9 14:00:35 2026 GMT Not After : Feb 10 14:00:35 2026 GMT Subject: CN=8be72ab81449b9859a12cd8ab9d7eeec4e93ff5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:84:f1:48:ec:6d:28:f9:e6:b5:43:11:9e: 00:57:0e:79:1e:dd:2c:cc:fa:a2:e8:f8:28:08:28: b8:52:4c:1a:02:8c:ea:a0:f1:64:71:c8:2e:86:0f: 93:2e:d2:2c:f1:d8:d2:d5:3b:41:fa:31:a1:82:93: 1c:09:38:13:ea:1a:75:7c:1b:1f:1c:16:c1:01:66: 2e:e6:62:90:de:50:d1:ec:1e:48:3c:a6:2b:24:70: b1:34:a4:1e:92:7b:21:41:5b:55:ec:c3:4f:e4:c6: 7e:17:e6:96:30:22:8f:13:6f:8b:e5:f7:aa:bb:3e: da:3b:40:d8:f4:ac:f2:58:cc:ac:9e:8f:f5:e7:86: d3:7f:99:13:fb:c1:fa:5e:d0:32:d6:92:33:01:bf: 1f:5d:46:e0:85:7d:94:10:02:37:e7:1c:a8:5d:8e: 58:70:40:9e:df:73:70:4e:ab:01:0b:a8:85:cd:d0: c1:e4:e7:4c:b8:94:c5:25:23:48:de:f6:60:a7:2b: 95:2c:91:c8:e0:8a:79:61:ce:0b:fd:34:22:f7:1c: f0:d7:7d:11:68:a9:9a:44:ee:99:e9:fd:6b:f6:49: 6c:fa:3e:d5:2f:b1:2c:f1:b0:52:53:95:80:7d:e0: 10:f2:d2:e8:b0:4a:f5:10:77:12:c6:ca:47:a0:e3: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E7:2A:B8:14:49:B9:85:9A:12:CD:8A:B9:D7:EE:EC:4E:93:FF:5B X509v3 Authority Key Identifier: keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ff:23:7d:13:23:ab:97:65:ba:18:4a:70:e4:96:ee:97:22: 04:8f:05:e0:9c:cb:8e:c6:e6:18:00:47:5a:1b:a6:96:35:ef: 39:f6:c1:e1:1d:30:00:02:ee:87:9d:9a:2e:9e:52:d2:5a:27: c8:f2:8a:7e:f6:08:85:0c:d6:e7:2c:a7:6a:69:cc:11:32:3d: cb:0d:2e:cc:99:7c:d5:93:49:eb:c4:f5:a2:f6:e7:20:98:42: 5b:af:54:2a:ba:fd:35:7b:be:2c:6e:a0:5b:1a:ad:3d:5f:6a: 44:4c:b8:e1:de:16:2e:dc:b5:9e:fd:18:5c:f7:f5:25:ab:ce: 3d:cb:a1:22:6d:1e:ec:03:6c:d3:37:be:3a:26:1d:18:c4:d0: 02:4e:1f:30:be:d8:fe:37:0f:36:f6:00:07:21:cc:18:e6:2f: c6:08:d0:37:fd:99:d4:d4:ff:3e:34:39:f8:db:0a:92:a6:60: 26:4b:91:64:a1:7b:66:b8:8c:34:83:87:d9:b6:0d:c4:0a:01: 5c:6d:57:b2:d1:7e:25:75:7b:18:92:a1:d2:20:f4:2b:4e:c0: 91:5f:09:64:02:17:b5:50:2a:23:06:32:d3:db:b9:a9:a6:f5: 1e:9b:5c:22:90:9e:23:c6:e3:f6:6d:47:23:0c:20:00:a9:bf: e8:da:36:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtECc2W8LZLOMcvrn2aXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm MDkxOTYwHhcNMjYwMjA5MTQwMDM1WhcNMjYwMjEwMTQwMDM1WjAzMTEwLwYDVQQD Eyg4YmU3MmFiODE0NDliOTg1OWExMmNkOGFiOWQ3ZWVlYzRlOTNmZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUeE8UjsbSj55rVDEZ4AVw55Ht0s zPqi6PgoCCi4UkwaAozqoPFkccguhg+TLtIs8djS1TtB+jGhgpMcCTgT6hp1fBsf HBbBAWYu5mKQ3lDR7B5IPKYrJHCxNKQeknshQVtV7MNP5MZ+F+aWMCKPE2+L5feq uz7aO0DY9KzyWMysno/154bTf5kT+8H6XtAy1pIzAb8fXUbghX2UEAI35xyoXY5Y cECe33NwTqsBC6iFzdDB5OdMuJTFJSNI3vZgpyuVLJHI4Ip5Yc4L/TQi9xzw130R aKmaRO6Z6f1r9kls+j7VL7Es8bBSU5WAfeAQ8tLosEr1EHcSxspHoOPIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvnKrgUSbmFmhLNirnX7uxOk/9bMB8GA1UdIwQY MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP8jfRMj q5dluhhKcOSW7pciBI8F4JzLjsbmGABHWhumljXvOfbB4R0wAALuh52aLp5S0lon yPKKfvYIhQzW5yynamnMETI9yw0uzJl81ZNJ68T1ovbnIJhCW69UKrr9NXu+LG6g WxqtPV9qREy44d4WLty1nv0YXPf1JavOPcuhIm0e7ANs0ze+OiYdGMTQAk4fML7Y /jcPNvYAByHMGOYvxgjQN/2Z1NT/PjQ5+NsKkqZgJkuRZKF7ZriMNIOH2bYNxAoB XG1XstF+JXV7GJKh0iD0K07AkV8JZAIXtVAqIwYy09u5qab1HptcIpCeI8bj9m1H IwwgAKm/6No2JA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:54 2026 by rpki-client