This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json) Hash identifier: YpQlEJC4MEI5Q8WhrAL77Jn/DFDLIy/jaFax43/rkm0= Subject key identifier: 90:6C:C8:6B:AF:1F:7D:87:44:F9:E2:06:C5:C9:18:E6:68:E2:CD:DF Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34 Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34 Certificate serial: 019C4133AB7DFC418DF6769DC5E6440B48FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft Manifest number: 0EC8 Signing time: Mon 09 Feb 2026 07:00:30 +0000 Manifest this update: Mon 09 Feb 2026 07:00:30 +0000 Manifest next update: Tue 10 Feb 2026 07:00:30 +0000 Files and hashes: 1: 3VHOGWRwmc9du8vgvTyHkD4whcQ.roa (hash: zfJOErgD6Xi0BNPu8uVtHESEfkX9qIYO5teB3ir0WRo=) 2: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: YBX6zxdS/PE21VztJ4cuGN3khYaRdabwKZFeW2p3bj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:ab:7d:fc:41:8d:f6:76:9d:c5:e6:44:0b:48:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34 Validity Not Before: Feb 9 07:00:30 2026 GMT Not After : Feb 10 07:00:30 2026 GMT Subject: CN=906cc86baf1f7d8744f9e206c5c918e668e2cddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ef:4d:ec:0d:70:34:40:c7:03:93:09:e8:fc: a4:fc:43:3f:dd:b9:c5:f7:2d:1e:a9:74:d8:4c:d1: 99:b9:a3:37:7f:ef:55:a0:87:d7:86:ed:3d:94:27: ae:40:ef:8e:27:61:d6:0a:7e:19:54:27:0b:1b:63: 64:bd:c2:98:74:c9:01:aa:1e:f5:e3:7b:bb:4b:cb: dd:af:dd:f0:67:e4:f6:98:fd:88:a0:da:ec:51:8b: 37:3a:1c:1a:c8:e3:a4:c4:b4:10:52:40:db:55:36: 3f:86:bd:74:23:58:25:f0:fc:6f:0b:e6:98:9e:ed: dc:57:ca:86:39:79:99:38:40:4a:76:4a:8e:27:6b: 6c:ef:36:cc:d8:8d:54:f2:8b:c0:d9:4a:1d:82:3f: af:ce:ab:f1:bb:9d:54:99:e4:6e:f0:41:40:d7:27: 4f:9f:9d:8f:45:44:f2:50:c9:bf:02:0f:a1:79:7c: b9:5b:5a:25:77:41:1d:81:f6:07:a0:e3:7a:29:bf: fb:f7:a9:a2:5f:25:82:d6:00:29:83:b4:09:e4:0e: 7d:0a:aa:79:6a:a5:93:79:77:02:2b:bf:c2:38:36: f3:0f:86:a5:88:d5:85:8a:ec:91:f7:4f:7f:e8:73: 40:06:5b:2d:e0:c2:f6:2d:db:84:29:cd:67:dc:39: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6C:C8:6B:AF:1F:7D:87:44:F9:E2:06:C5:C9:18:E6:68:E2:CD:DF X509v3 Authority Key Identifier: keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:95:72:1a:54:58:a6:22:9c:d6:4e:ec:e4:2d:a0:09:c3:b4: 3b:dc:50:b7:7c:c8:56:4b:16:ca:6a:c2:71:8c:c6:2d:a8:08: cb:6b:ab:e9:26:df:c2:f7:1b:3e:ad:12:33:4d:71:39:74:7a: 28:a7:a1:0b:17:96:a4:da:d6:33:53:96:97:be:22:c9:50:44: a4:13:51:47:6f:97:1c:68:8b:f7:f1:69:44:b4:f2:dc:1c:b6: 66:c1:ce:6a:d5:91:b7:4a:85:46:41:80:e8:f4:ad:de:10:ed: c0:d3:bd:e1:b4:81:34:24:a0:b6:3b:5b:f5:22:4a:c4:3e:ef: 6f:bc:03:fe:1d:96:01:a7:90:68:fb:50:89:68:5d:46:f2:39: af:48:2a:bb:c3:0e:60:f8:c0:39:56:67:cc:c0:8d:46:8f:1a: 77:cc:28:5e:7a:08:93:f7:68:9b:da:73:8e:e1:0f:d9:0a:30: 6f:10:36:19:d4:1f:79:70:c1:28:9e:40:f6:96:ee:66:36:db: 48:cf:8b:8d:42:1d:e9:41:12:74:5a:29:d1:d5:92:b2:11:c6: 1b:29:ed:29:d0:61:15:ba:59:c9:06:88:2b:9a:57:c9:b0:d5: e5:bb:d2:77:92:d8:62:89:f5:21:6a:5b:e1:2d:32:58:bd:9a: d2:75:0a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM6t9/EGN9nadxeZEC0j9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzY3NGFiMTgwNmRkNmFmZTIxM2JlMzhlOTJhMzVmYmM2 NGNlMzQwHhcNMjYwMjA5MDcwMDMwWhcNMjYwMjEwMDcwMDMwWjAzMTEwLwYDVQQD Eyg5MDZjYzg2YmFmMWY3ZDg3NDRmOWUyMDZjNWM5MThlNjY4ZTJjZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e9N7A1wNEDHA5MJ6Pyk/EM/3bnF 9y0eqXTYTNGZuaM3f+9VoIfXhu09lCeuQO+OJ2HWCn4ZVCcLG2NkvcKYdMkBqh71 43u7S8vdr93wZ+T2mP2IoNrsUYs3OhwayOOkxLQQUkDbVTY/hr10I1gl8PxvC+aY nu3cV8qGOXmZOEBKdkqOJ2ts7zbM2I1U8ovA2Uodgj+vzqvxu51UmeRu8EFA1ydP n52PRUTyUMm/Ag+heXy5W1old0EdgfYHoON6Kb/796miXyWC1gApg7QJ5A59Cqp5 aqWTeXcCK7/CODbzD4aliNWFiuyR909/6HNABlst4ML2LduEKc1n3DkLYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBsyGuvH32HRPniBsXJGOZo4s3fMB8GA1UdIwQY MBaAFCXGdKsYBt1q/iE7446So1+8ZM40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81NmJlOGEtYzhiZS00OGY5LWE2N2Mt ZjVjZDBkNzExNmViLzEvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS81NmJlOGEtYzhiZS00OGY5LWE2N2MtZjVjZDBkNzExNmVi LzEvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZVyGlRY piKc1k7s5C2gCcO0O9xQt3zIVksWymrCcYzGLagIy2ur6SbfwvcbPq0SM01xOXR6 KKehCxeWpNrWM1OWl74iyVBEpBNRR2+XHGiL9/FpRLTy3By2ZsHOatWRt0qFRkGA 6PSt3hDtwNO94bSBNCSgtjtb9SJKxD7vb7wD/h2WAaeQaPtQiWhdRvI5r0gqu8MO YPjAOVZnzMCNRo8ad8woXnoIk/dom9pzjuEP2QowbxA2GdQfeXDBKJ5A9pbuZjbb SM+LjUId6UESdFop0dWSshHGGyntKdBhFbpZyQaIK5pXybDV5bvSd5LYYon1IWpb 4S0yWL2a0nUKKA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:00 2026 by rpki-client