This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json) Hash identifier: zR/CLdw9dc4Nxaf6sNa0xORtCI1NGm7QhbweOi6gDnY= Subject key identifier: CF:B7:36:66:7B:D9:7B:5E:FB:6A:E1:26:75:71:30:8E:6F:A8:EB:90 Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71 Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471 Certificate serial: 019C420F7115CFDF8324C852FA452871BB6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:00:34 +0000 Manifest this update: Mon 09 Feb 2026 11:00:34 +0000 Manifest next update: Tue 10 Feb 2026 11:00:34 +0000 Files and hashes: 1: AyrzSBhcVdLjrtpgaPtvfCo2cgk.roa (hash: FPSdxwJlvKxB9usaAhQQLpbdSK3miP+bPkK1Uge0pAo=) 2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: DDZtEZOTBjJa4vM3yD/rcwewIWu9Dwdj+TQJps+phG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:71:15:cf:df:83:24:c8:52:fa:45:28:71:bb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471 Validity Not Before: Feb 9 11:00:34 2026 GMT Not After : Feb 10 11:00:34 2026 GMT Subject: CN=cfb736667bd97b5efb6ae1267571308e6fa8eb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:50:21:95:34:d1:f8:84:ef:e7:3b:fe:d9: 54:71:4a:39:67:dc:ba:06:c9:83:10:1b:67:bb:dc: c7:67:23:51:35:ba:03:8a:61:41:fd:46:70:d0:a8: de:46:d6:58:64:c4:5f:b8:da:ca:44:29:43:3a:f9: 0c:09:49:f5:2d:97:32:77:0b:74:44:a0:73:de:41: 3b:d4:db:5b:30:95:92:9a:98:64:59:5d:e3:ee:94: 6e:4b:a9:b4:f8:30:7d:14:8f:71:fc:a0:87:af:a9: f3:8a:b2:fe:18:79:68:42:17:fa:75:4f:95:75:4e: f8:f7:de:34:66:6e:27:a9:f9:3b:8c:01:f0:5d:c3: 19:c6:ef:03:1e:72:f0:68:98:ae:d4:17:e6:8c:7f: 9b:d9:9d:92:9c:e5:7e:50:71:3f:6d:16:26:58:81: 13:26:6b:f5:c4:eb:25:9c:8e:85:5e:4a:57:2f:fb: 71:df:3e:54:e2:08:e8:4d:b6:f0:e5:f0:18:98:bf: 7a:a7:71:ed:88:8c:27:43:38:27:55:3f:c7:d1:9c: 3d:0e:b1:58:7f:1a:45:09:4a:f1:a9:4d:ab:3c:56: da:f2:b4:fd:11:b0:55:31:d1:1c:77:62:e4:5e:7a: 68:39:fa:3d:89:36:aa:70:09:f6:90:d6:49:1f:c5: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:36:66:7B:D9:7B:5E:FB:6A:E1:26:75:71:30:8E:6F:A8:EB:90 X509v3 Authority Key Identifier: keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a7:4e:8e:83:20:c4:31:5e:3a:82:53:b8:82:c2:22:13:6a: 34:83:4c:60:34:9e:a7:0b:b7:47:6f:bc:56:58:1f:20:2f:67: 67:9d:26:62:55:b6:69:bd:73:41:03:6f:f0:1b:cb:a8:70:61: 58:f5:aa:a7:25:f3:31:71:91:77:84:f3:a2:66:9f:59:5e:1c: d0:ba:fa:b2:d7:af:95:43:e8:f1:1b:71:f1:db:98:bb:21:2a: a5:21:cb:01:c6:54:f0:3e:5b:f3:27:d9:72:75:9f:61:2f:74: 51:a7:fc:ea:39:e1:a8:ea:20:99:2a:8b:05:49:7a:b8:5e:42: ab:15:5a:e3:22:b4:85:26:a9:c6:da:23:65:3a:5d:9c:40:4a: 29:4c:3a:13:01:61:85:77:62:dc:b2:7c:c1:de:52:16:95:0a: bb:23:6f:0e:ab:9c:d2:c7:2e:de:52:6a:84:4f:c2:89:19:2f: 28:1c:eb:a1:16:60:a8:03:9f:02:3c:b2:c2:e7:94:5f:db:e6: 73:92:c0:df:4c:1f:01:48:e6:01:53:69:6c:88:be:97:c8:ec: 40:c8:80:c9:21:02:20:39:7e:e9:e6:a2:07:96:de:5d:96:3c: de:4f:46:2d:c3:0a:29:11:98:c5:04:03:fd:ad:36:7d:4c:af: 6e:a7:32:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3EVz9+DJMhS+kUocbttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWU0MjUyYmNiMjJlYTJjNmNmYjM5MjRjOGY4NGJkZGU3 YTc0NzEwHhcNMjYwMjA5MTEwMDM0WhcNMjYwMjEwMTEwMDM0WjAzMTEwLwYDVQQD EyhjZmI3MzY2NjdiZDk3YjVlZmI2YWUxMjY3NTcxMzA4ZTZmYThlYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuilQIZU00fiE7+c7/tlUcUo5Z9y6 BsmDEBtnu9zHZyNRNboDimFB/UZw0KjeRtZYZMRfuNrKRClDOvkMCUn1LZcydwt0 RKBz3kE71NtbMJWSmphkWV3j7pRuS6m0+DB9FI9x/KCHr6nzirL+GHloQhf6dU+V dU749940Zm4nqfk7jAHwXcMZxu8DHnLwaJiu1BfmjH+b2Z2SnOV+UHE/bRYmWIET Jmv1xOslnI6FXkpXL/tx3z5U4gjoTbbw5fAYmL96p3HtiIwnQzgnVT/H0Zw9DrFY fxpFCUrxqU2rPFba8rT9EbBVMdEcd2LkXnpoOfo9iTaqcAn2kNZJH8VRBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+3NmZ72Xte+2rhJnVxMI5vqOuQMB8GA1UdIwQY MBaAFESeQlK8si6ixs+zkkyPhL3eenRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMt NjhmMjE3NGM3OWVlLzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMtNjhmMjE3NGM3OWVl LzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKdOjoMg xDFeOoJTuILCIhNqNINMYDSepwu3R2+8VlgfIC9nZ50mYlW2ab1zQQNv8BvLqHBh WPWqpyXzMXGRd4TzomafWV4c0Lr6stevlUPo8Rtx8duYuyEqpSHLAcZU8D5b8yfZ cnWfYS90Uaf86jnhqOogmSqLBUl6uF5CqxVa4yK0hSapxtojZTpdnEBKKUw6EwFh hXdi3LJ8wd5SFpUKuyNvDquc0scu3lJqhE/CiRkvKBzroRZgqAOfAjyywueUX9vm c5LA30wfAUjmAVNpbIi+l8jsQMiAySECIDl+6eaiB5beXZY83k9GLcMKKRGYxQQD /a02fUyvbqcyLw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:33 2026 by rpki-client