This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft File: jaArHaSqceZbb7m-I6ayCMJcV9g.mft (raw, json) Hash identifier: CPPxXJ7eQLNyiys70AvlNCqQ5rNu4s66y9YM9aSqXOs= Subject key identifier: 2C:1E:2A:7C:56:AF:90:E7:05:61:02:69:05:D7:37:45:46:64:01:BF Authority key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 Certificate issuer: /CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Certificate serial: 019C420FA4D81BF9E264C7E572246D7A5F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft Manifest number: 02D0 Signing time: Mon 09 Feb 2026 11:00:47 +0000 Manifest this update: Mon 09 Feb 2026 11:00:47 +0000 Manifest next update: Tue 10 Feb 2026 11:00:47 +0000 Files and hashes: 1: jaArHaSqceZbb7m-I6ayCMJcV9g.crl (hash: RRjZXsdIHLnzYLT2+e15IE/UjGeZR2VPnk+5od8qdB4=) 2: u6E8pL8xTaRGWfi-RDxX4w8Xbpk.roa (hash: 9QQeKURrORfbCSgK0HygRpzrFwuV2YJ2NlIlJcaVFzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a4:d8:1b:f9:e2:64:c7:e5:72:24:6d:7a:5f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Validity Not Before: Feb 9 11:00:47 2026 GMT Not After : Feb 10 11:00:47 2026 GMT Subject: CN=2c1e2a7c56af90e70561026905d73745466401bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:47:36:c3:c2:77:62:68:9c:06:82:4c:05: 75:2c:46:bd:ee:66:46:80:1f:2b:99:7b:1b:f0:9e: b9:82:90:ab:8e:e3:1e:99:f3:85:cb:77:22:4b:f3: 8b:3c:5d:0a:ba:a1:07:3e:87:fb:ba:40:18:c1:2c: 93:e1:44:f7:62:26:d9:d2:27:ae:db:f8:fb:e1:2d: a4:8d:c9:f7:cf:e5:fa:55:c5:b6:7e:c8:e8:2c:b1: 51:59:f1:d4:e8:2b:b5:c3:60:e5:cd:d5:ea:24:93: 9b:1a:6b:c1:88:99:7a:65:22:05:2f:9c:1a:10:fe: de:02:63:22:7c:2f:17:80:cf:a7:e8:e3:94:15:e6: b1:a9:b3:9e:fb:85:01:77:69:79:9c:08:e1:9f:80: 14:e7:dd:d6:80:66:0f:ff:21:2a:9c:36:b5:5e:7d: 21:51:b6:c3:a7:4c:29:15:56:bf:71:42:72:92:ae: d6:fc:f4:c1:56:1a:86:b5:3b:89:5b:4e:85:12:97: 2a:7d:c2:cc:2a:10:e8:c4:a6:5a:a7:1b:d6:22:8e: 5a:30:15:a2:c5:e4:8e:54:6c:09:48:be:d4:d2:ec: 92:6c:61:4b:69:73:d2:50:cb:3a:fb:52:04:f0:8a: 1b:6d:89:b0:1b:7c:df:c8:c6:58:ce:de:50:9b:26: ab:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1E:2A:7C:56:AF:90:E7:05:61:02:69:05:D7:37:45:46:64:01:BF X509v3 Authority Key Identifier: keyid:8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:07:0f:0d:d3:7c:b7:97:14:25:76:d0:84:cb:84:1f:93:1a: e9:c4:e6:6d:f1:ce:fd:e5:1a:a4:10:56:ef:61:6e:d5:43:01: db:42:06:a4:fc:1d:7d:c6:b0:80:ef:66:24:b2:c7:55:4a:33: 8b:4b:ae:f0:21:27:c4:13:ea:27:53:6e:0d:8f:cc:7d:0f:f2: 2e:ed:51:da:bc:e5:3e:cc:d6:13:8d:7e:ea:3a:40:d8:1f:87: c9:d0:14:24:46:88:6d:13:ce:3d:29:86:96:e1:ed:c8:0e:73: 1b:59:4b:1d:48:30:28:bc:e3:a7:72:ca:99:b1:06:9b:b0:be: 86:db:75:15:9b:7a:ec:42:a3:28:4b:4f:cb:8c:ce:82:b6:db: d5:89:d0:40:81:0a:0d:e0:7b:54:ea:fb:83:a4:2f:0a:84:a5: 48:a1:d0:04:f3:4e:2c:cd:d6:1d:63:11:93:af:b9:78:85:de: be:12:c7:81:1d:3c:97:07:ec:87:40:80:2e:0b:7a:f7:c1:33: a7:b9:a8:d2:9f:02:f6:57:ab:07:7f:66:54:43:1b:e6:bd:61: 1b:59:96:a0:0b:ba:9e:1f:02:28:06:7e:8d:d2:dc:88:65:c4: 50:9d:0f:12:71:58:23:0e:1f:ca:fc:ca:4f:83:85:d9:2c:88: 77:83:32:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6TYG/niZMflciRtel+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTAyYjFkYTRhYTcxZTY1YjZmYjliZTIzYTZiMjA4YzI1 YzU3ZDgwHhcNMjYwMjA5MTEwMDQ3WhcNMjYwMjEwMTEwMDQ3WjAzMTEwLwYDVQQD EygyYzFlMmE3YzU2YWY5MGU3MDU2MTAyNjkwNWQ3Mzc0NTQ2NjQwMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3BHNsPCd2JonAaCTAV1LEa97mZG gB8rmXsb8J65gpCrjuMemfOFy3ciS/OLPF0KuqEHPof7ukAYwSyT4UT3YibZ0ieu 2/j74S2kjcn3z+X6VcW2fsjoLLFRWfHU6Cu1w2DlzdXqJJObGmvBiJl6ZSIFL5wa EP7eAmMifC8XgM+n6OOUFeaxqbOe+4UBd2l5nAjhn4AU593WgGYP/yEqnDa1Xn0h UbbDp0wpFVa/cUJykq7W/PTBVhqGtTuJW06FEpcqfcLMKhDoxKZapxvWIo5aMBWi xeSOVGwJSL7U0uySbGFLaXPSUMs6+1IE8IobbYmwG3zfyMZYzt5QmyarqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCweKnxWr5DnBWECaQXXN0VGZAG/MB8GA1UdIwQY MBaAFI2gKx2kqnHmW2+5viOmsgjCXFfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kYmE2YzUtMjBlNS00MDczLTg1M2Et YzllMjlkZWJhMjQ0LzEvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kYmE2YzUtMjBlNS00MDczLTg1M2EtYzllMjlkZWJhMjQ0 LzEvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogcPDdN8 t5cUJXbQhMuEH5Ma6cTmbfHO/eUapBBW72Fu1UMB20IGpPwdfcawgO9mJLLHVUoz i0uu8CEnxBPqJ1NuDY/MfQ/yLu1R2rzlPszWE41+6jpA2B+HydAUJEaIbRPOPSmG luHtyA5zG1lLHUgwKLzjp3LKmbEGm7C+htt1FZt67EKjKEtPy4zOgrbb1YnQQIEK DeB7VOr7g6QvCoSlSKHQBPNOLM3WHWMRk6+5eIXevhLHgR08lwfsh0CALgt698Ez p7mo0p8C9lerB39mVEMb5r1hG1mWoAu6nh8CKAZ+jdLciGXEUJ0PEnFYIw4fyvzK T4OF2SyId4Mypg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:54 2026 by rpki-client