This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json) Hash identifier: xB0i+7CtDlDBonJa8aKPYiSA+NLwenaQ2xtbJSW+YFg= Subject key identifier: F0:FC:7C:4B:A0:ED:B4:42:68:B9:01:9B:24:62:F1:EA:2F:52:AE:51 Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Certificate serial: 019C427E0A225F46D810BE8F0B1025C344E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft Manifest number: 1325 Signing time: Mon 09 Feb 2026 13:01:22 +0000 Manifest this update: Mon 09 Feb 2026 13:01:22 +0000 Manifest next update: Tue 10 Feb 2026 13:01:22 +0000 Files and hashes: 1: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (hash: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc=) 2: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: fESmMBdE6RfpGbspmsJ+fW3jhb3Ip2UnZyWSb3hgK3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0a:22:5f:46:d8:10:be:8f:0b:10:25:c3:44:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Validity Not Before: Feb 9 13:01:22 2026 GMT Not After : Feb 10 13:01:22 2026 GMT Subject: CN=f0fc7c4ba0edb44268b9019b2462f1ea2f52ae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:2f:3a:06:98:fc:ad:3d:f3:57:95:0d:1d: 49:8e:41:f3:ea:28:3b:f8:31:f8:55:b4:cf:99:f6: d6:29:76:50:f9:42:77:41:18:30:96:3f:02:ca:19: e5:08:fe:ae:24:ea:99:d2:f9:0e:50:bc:57:5f:42: d5:12:db:57:e1:76:f9:c6:66:ae:1b:82:77:16:6a: de:44:c9:40:da:3d:23:5c:9c:65:7a:e3:18:5c:cf: 76:59:89:39:d8:6b:45:01:d6:6e:bc:71:e3:d8:05: ee:6d:96:3d:28:fb:99:fe:45:e3:4a:bc:25:43:e6: 20:69:f6:26:ec:1f:ac:b7:07:57:a7:cd:9b:21:5a: 25:5f:90:14:ac:6f:e1:43:f1:d1:c9:23:41:c9:c7: ba:ec:27:44:b4:8e:99:6b:33:78:21:b8:d2:ae:3d: 56:ce:b5:5d:b7:46:97:5c:ba:0e:ae:46:ac:90:e9: d8:2b:20:ce:68:69:66:d6:28:96:f8:84:a0:ab:f3: cd:c3:c2:b1:92:98:cf:ad:7a:1e:4a:52:3c:e8:26: 6f:54:46:2d:3f:ef:39:e2:1a:22:a2:21:2c:bf:fc: 78:aa:5f:ad:9c:28:9c:83:d1:7f:2a:58:49:67:ab: 63:53:66:20:b0:5f:e3:4c:f9:ca:90:26:3f:25:e4: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FC:7C:4B:A0:ED:B4:42:68:B9:01:9B:24:62:F1:EA:2F:52:AE:51 X509v3 Authority Key Identifier: keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:22:4b:37:6e:f6:73:79:c4:ee:65:79:3f:07:62:77:0a:d4: c6:8c:64:22:6b:fa:05:c5:50:23:e7:1c:55:98:8f:7c:fd:24: 38:8c:87:c2:33:2f:d5:05:e0:c0:b0:9e:18:a4:87:7d:18:e2: 03:50:6c:d6:98:f9:49:42:5e:ac:03:ff:a0:e2:ac:7e:39:3f: 64:91:d8:73:18:f0:4c:f7:92:01:e6:7e:77:83:27:40:e2:d5: 90:4a:c5:a9:03:5d:86:3a:35:7a:a2:b7:3c:13:d7:a9:eb:ec: 71:28:aa:7b:f2:5c:2b:08:5c:c4:ef:1b:a9:57:fc:26:54:df: ae:90:92:77:a1:d5:fd:ff:69:87:24:f4:f1:78:e9:34:b3:7b: ca:6b:7c:d9:ea:c9:a7:53:2d:c6:7d:3f:45:5d:11:71:2e:2d: b3:f1:4e:d1:cf:40:c7:ab:87:6a:92:24:b1:30:54:86:42:50: 2d:04:19:67:44:f0:8e:6c:08:68:38:97:b9:f3:1e:ed:6f:96: 97:8c:3c:b9:22:bf:b5:32:0f:91:3e:42:76:2f:76:66:cc:68: 7d:e4:fd:23:da:da:cf:09:ec:00:9c:a1:53:ef:5a:d5:8f:a3: ed:d2:e0:79:6b:73:d8:35:bb:7c:21:30:bd:21:ef:8d:55:19: b3:2b:5e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgoiX0bYEL6PCxAlw0TkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWRjNzMyY2EyODM0OTczNTQ3Yzc4MGUxYzNhNWFiNDc4 MDViZTAwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD EyhmMGZjN2M0YmEwZWRiNDQyNjhiOTAxOWIyNDYyZjFlYTJmNTJhZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21YvOgaY/K0981eVDR1JjkHz6ig7 +DH4VbTPmfbWKXZQ+UJ3QRgwlj8CyhnlCP6uJOqZ0vkOULxXX0LVEttX4Xb5xmau G4J3FmreRMlA2j0jXJxleuMYXM92WYk52GtFAdZuvHHj2AXubZY9KPuZ/kXjSrwl Q+YgafYm7B+stwdXp82bIVolX5AUrG/hQ/HRySNByce67CdEtI6ZazN4IbjSrj1W zrVdt0aXXLoOrkaskOnYKyDOaGlm1iiW+ISgq/PNw8KxkpjPrXoeSlI86CZvVEYt P+854hoioiEsv/x4ql+tnCicg9F/KlhJZ6tjU2YgsF/jTPnKkCY/JeQE3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD8fEug7bRCaLkBmyRi8eovUq5RMB8GA1UdIwQY MBaAFI5dxzLKKDSXNUfHgOHDpatHgFvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgt NGVlNjlhNzc3YmJlLzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgtNGVlNjlhNzc3YmJl LzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyJLN272 c3nE7mV5PwdidwrUxoxkImv6BcVQI+ccVZiPfP0kOIyHwjMv1QXgwLCeGKSHfRji A1Bs1pj5SUJerAP/oOKsfjk/ZJHYcxjwTPeSAeZ+d4MnQOLVkErFqQNdhjo1eqK3 PBPXqevscSiqe/JcKwhcxO8bqVf8JlTfrpCSd6HV/f9phyT08XjpNLN7ymt82erJ p1Mtxn0/RV0RcS4ts/FO0c9Ax6uHapIksTBUhkJQLQQZZ0TwjmwIaDiXufMe7W+W l4w8uSK/tTIPkT5Cdi92ZsxofeT9I9razwnsAJyhU+9a1Y+j7dLgeWtz2DW7fCEw vSHvjVUZsyteMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:47 2026 by rpki-client