This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json) Hash identifier: In3LYH8FMQmpRhWAHFNF+NoK32HPw1ozlQPBIZUjd48= Subject key identifier: 8B:50:13:48:A1:20:19:D6:5C:F1:75:43:9B:1F:23:E7:AE:E6:72:F0 Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Certificate serial: 019C420F529C45A09BE4C4892217073CFDAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft Manifest number: 0B81 Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=) 2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: 0k83uPByVXyYWd7wB5elaYyN9rSn78LUBrtvJECnih0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:52:9c:45:a0:9b:e4:c4:89:22:17:07:3c:fd:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=8b501348a12019d65cf175439b1f23e7aee672f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:77:bb:aa:7b:de:08:dc:6e:96:6a:b2:92: 76:b4:68:d0:8e:33:94:a2:bf:b5:9e:ab:70:68:9c: 40:99:0e:13:4e:ef:af:fc:36:c7:f8:de:45:89:f8: 37:55:08:98:37:09:5d:0b:92:05:7e:17:96:10:18: 63:f0:1e:7e:8e:21:8d:61:75:fe:68:bc:34:20:1a: 6a:9d:1b:b3:16:59:ec:b6:fd:d5:d9:97:fb:f1:15: de:6f:f4:42:79:98:30:18:a8:34:82:ba:53:1b:e9: 9d:0d:2b:91:ec:c8:4e:bc:3c:8a:83:37:11:d4:7d: ef:7e:92:33:a1:2b:cc:21:66:f1:39:6e:52:dd:1f: b6:c9:dc:6e:f1:98:ed:c5:d8:d7:ba:ef:1d:14:08: 89:5a:ff:60:c0:7c:c2:38:77:6b:88:8e:99:11:0e: 53:58:92:5c:fe:53:b9:72:45:4b:31:47:72:db:18: fa:50:5b:ac:22:a1:f1:07:81:7d:98:79:c9:87:43: fc:1a:59:ca:90:ed:31:5d:7e:5d:1b:28:0b:f0:1c: c8:a3:d0:76:58:79:31:19:d6:6b:be:fb:12:23:db: e0:18:a5:ae:c0:a1:9d:86:cf:d3:00:b5:46:4a:90: 4f:f6:6d:9e:20:52:23:51:7e:7d:53:f7:b8:70:da: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:13:48:A1:20:19:D6:5C:F1:75:43:9B:1F:23:E7:AE:E6:72:F0 X509v3 Authority Key Identifier: keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c2:05:84:87:c0:04:e0:91:9c:bb:69:c0:3d:e8:e3:52:cb: e5:70:82:ae:54:a5:6e:ef:cf:69:c4:f0:f6:74:56:86:d1:4f: b3:36:5e:ff:01:63:65:d7:79:82:6d:1e:00:1a:44:da:1f:11: f8:c9:1a:a9:79:d9:d1:15:a3:c2:bf:b6:2d:ec:22:b0:4a:ba: 89:ad:ce:2f:36:7e:0d:74:a6:47:c1:50:5a:29:13:fb:ed:bf: 8b:12:7a:39:5b:40:14:35:dd:b0:1b:c3:a6:be:59:be:9a:d6: 17:84:e0:38:91:fa:d2:1f:86:f6:df:90:ca:22:86:13:10:7f: 3e:4e:e7:74:bd:cd:5f:fb:ea:b5:de:ab:e4:18:01:63:ed:d9: 77:ad:2f:40:83:78:04:3f:0f:1b:da:2b:45:b1:4f:ad:a8:87: 96:5f:5c:99:6e:cb:cb:3e:c4:45:09:82:0a:12:ab:60:8c:ba: 1b:10:e2:09:87:04:bb:10:a8:f0:91:07:26:c0:47:5d:17:02: f5:05:4e:89:39:2d:91:82:65:53:dd:17:b0:e4:c9:08:41:5d: 5e:14:1b:08:b8:47:6e:9d:5f:a3:73:95:b9:40:33:ea:a3:c7: 2e:e7:e4:9e:24:15:ef:4b:8e:2e:40:81:88:a1:3f:f4:ce:6f: 3e:55:ac:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1KcRaCb5MSJIhcHPP2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4 MjFiZDIwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD Eyg4YjUwMTM0OGExMjAxOWQ2NWNmMTc1NDM5YjFmMjNlN2FlZTY3MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3t3u6p73gjcbpZqspJ2tGjQjjOU or+1nqtwaJxAmQ4TTu+v/DbH+N5Fifg3VQiYNwldC5IFfheWEBhj8B5+jiGNYXX+ aLw0IBpqnRuzFlnstv3V2Zf78RXeb/RCeZgwGKg0grpTG+mdDSuR7MhOvDyKgzcR 1H3vfpIzoSvMIWbxOW5S3R+2ydxu8ZjtxdjXuu8dFAiJWv9gwHzCOHdriI6ZEQ5T WJJc/lO5ckVLMUdy2xj6UFusIqHxB4F9mHnJh0P8GlnKkO0xXX5dGygL8BzIo9B2 WHkxGdZrvvsSI9vgGKWuwKGdhs/TALVGSpBP9m2eIFIjUX59U/e4cNrtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItQE0ihIBnWXPF1Q5sfI+eu5nLwMB8GA1UdIwQY MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2 LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8IFhIfA BOCRnLtpwD3o41LL5XCCrlSlbu/PacTw9nRWhtFPszZe/wFjZdd5gm0eABpE2h8R +MkaqXnZ0RWjwr+2LewisEq6ia3OLzZ+DXSmR8FQWikT++2/ixJ6OVtAFDXdsBvD pr5ZvprWF4TgOJH60h+G9t+QyiKGExB/Pk7ndL3NX/vqtd6r5BgBY+3Zd60vQIN4 BD8PG9orRbFPraiHll9cmW7Lyz7ERQmCChKrYIy6GxDiCYcEuxCo8JEHJsBHXRcC 9QVOiTktkYJlU90XsOTJCEFdXhQbCLhHbp1fo3OVuUAz6qPHLufkniQV70uOLkCB iKE/9M5vPlWsRg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:18 2026 by rpki-client