This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json) Hash identifier: W4V86QNyVYwOU9IOhTydM1I7DovmAVcd+a26G8G9P2E= Subject key identifier: 9D:9E:D6:87:5E:3D:49:0E:E2:51:07:60:CB:60:8E:22:B9:07:4A:75 Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Certificate serial: 019C2DE3D97FC182F4B8352A5E54702974F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft Manifest number: 03C2 Signing time: Thu 05 Feb 2026 13:00:32 +0000 Manifest this update: Thu 05 Feb 2026 13:00:32 +0000 Manifest next update: Fri 06 Feb 2026 13:00:32 +0000 Files and hashes: 1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=) 2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: BMDkLIf8VocX4u5G+MIct37mlMN0BwkAumqyrQJigmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:e3:d9:7f:c1:82:f4:b8:35:2a:5e:54:70:29:74:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Validity Not Before: Feb 5 13:00:32 2026 GMT Not After : Feb 6 13:00:32 2026 GMT Subject: CN=9d9ed6875e3d490ee2510760cb608e22b9074a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b9:af:a1:aa:21:72:21:2a:18:be:98:60:c8: 5e:16:bf:3c:5d:59:c1:13:1f:a8:02:b0:db:29:36: 2f:ff:85:d1:1b:17:03:49:b1:2c:89:18:4a:de:ad: fc:67:c4:c0:98:71:c9:32:a6:56:09:54:fc:90:e1: 5d:a8:4a:f2:6f:3f:36:f2:b0:de:b9:04:16:ee:c9: 76:39:36:98:fc:95:28:3d:5c:fa:97:90:32:22:37: 66:d4:b9:83:dc:5f:0e:a0:24:a4:38:76:92:7a:57: 53:d6:d9:1e:34:47:72:4e:77:fb:cf:8c:88:8f:c7: de:f5:91:db:1d:22:cd:59:25:59:82:bc:7e:07:7d: c7:f6:56:f4:ea:cb:4b:6c:12:c3:8a:8a:75:7f:60: c0:0b:03:df:cb:5b:33:e1:ac:d7:e3:8b:a6:8a:9d: 0e:ce:0a:9f:c8:16:15:00:c4:72:a0:6b:76:a0:be: 9e:89:cd:25:95:4e:0e:d7:96:77:7f:9b:4b:5b:15: 98:d7:cd:ef:31:31:24:e0:5f:c0:38:0a:d2:3f:1a: cc:3f:8e:b1:e5:4b:de:4b:f6:7c:d0:2f:1c:e4:dd: e2:e3:62:98:77:be:75:87:c1:d3:be:cf:a8:89:2b: ac:6a:87:74:de:79:9f:29:d1:75:98:df:0d:06:3b: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9E:D6:87:5E:3D:49:0E:E2:51:07:60:CB:60:8E:22:B9:07:4A:75 X509v3 Authority Key Identifier: keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:af:0f:8f:87:3a:87:ec:00:c0:89:61:bd:dc:0b:3b:2a:93: bf:2d:e1:22:ab:84:4b:70:6b:10:8c:d6:f9:7d:d3:fe:85:10: 30:6e:1d:8b:d9:8c:63:af:cf:1a:51:e1:d4:61:19:42:05:b6: c2:4c:71:26:0d:3c:29:5f:18:22:34:4d:22:ec:76:18:88:15: 3e:7f:ba:bd:4b:91:a0:ac:65:d9:8b:25:4b:67:bb:a0:82:57: 5f:ac:ed:df:f0:15:e7:ea:d9:ee:fa:0b:c9:42:00:44:67:cb: b0:fd:42:0d:a9:ea:9d:ed:f3:d1:1f:cb:16:56:c9:7e:e5:b2: 0b:27:73:6c:ac:70:86:3b:9c:60:47:75:b1:4b:12:55:5f:74: e8:33:cb:3d:1f:51:1b:2b:4c:10:49:59:23:92:ad:e3:6a:a7: ac:1e:2b:37:7b:d8:71:9b:36:90:fc:93:d4:df:37:82:d5:f5: 6f:c2:37:11:32:7a:e9:92:d6:3d:af:05:bc:88:e8:ae:cb:65: 6a:f6:9c:af:85:59:19:ec:2a:c8:bc:ee:1b:5d:af:a6:c5:55: 48:8a:53:8b:0d:0b:5a:d8:e1:96:b7:da:23:a9:08:bb:6c:c0: 3e:04:9b:b4:7f:00:69:59:b5:0d:5d:09:b9:c4:da:9f:10:16: b5:4c:40:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwt49l/wYL0uDUqXlRwKXT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi YmM5NmQwHhcNMjYwMjA1MTMwMDMyWhcNMjYwMjA2MTMwMDMyWjAzMTEwLwYDVQQD Eyg5ZDllZDY4NzVlM2Q0OTBlZTI1MTA3NjBjYjYwOGUyMmI5MDc0YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bmvoaohciEqGL6YYMheFr88XVnB Ex+oArDbKTYv/4XRGxcDSbEsiRhK3q38Z8TAmHHJMqZWCVT8kOFdqErybz828rDe uQQW7sl2OTaY/JUoPVz6l5AyIjdm1LmD3F8OoCSkOHaSeldT1tkeNEdyTnf7z4yI j8fe9ZHbHSLNWSVZgrx+B33H9lb06stLbBLDiop1f2DACwPfy1sz4azX44umip0O zgqfyBYVAMRyoGt2oL6eic0llU4O15Z3f5tLWxWY183vMTEk4F/AOArSPxrMP46x 5UveS/Z80C8c5N3i42KYd751h8HTvs+oiSusaod03nmfKdF1mN8NBjvTRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2e1odePUkO4lEHYMtgjiK5B0p1MB8GA1UdIwQY MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt MTIxNjQ1ZDk4ZTk0LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0 LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa68Pj4c6 h+wAwIlhvdwLOyqTvy3hIquES3BrEIzW+X3T/oUQMG4di9mMY6/PGlHh1GEZQgW2 wkxxJg08KV8YIjRNIux2GIgVPn+6vUuRoKxl2YslS2e7oIJXX6zt3/AV5+rZ7voL yUIARGfLsP1CDanqne3z0R/LFlbJfuWyCydzbKxwhjucYEd1sUsSVV906DPLPR9R GytMEElZI5Kt42qnrB4rN3vYcZs2kPyT1N83gtX1b8I3ETJ66ZLWPa8FvIjorstl avacr4VZGewqyLzuG12vpsVVSIpTiw0LWtjhlrfaI6kIu2zAPgSbtH8AaVm1DV0J ucTanxAWtUxACA== -----END CERTIFICATE-----Generated at Thu Feb 5 19:41:08 2026 by rpki-client