This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json) Hash identifier: h/Q/jyqUb66jR0zP5J9NYV11G1LzPiuQTF3xul90/XM= Subject key identifier: 58:A7:5A:B4:60:31:23:22:DD:DA:D7:65:DC:86:42:71:AB:42:04:3D Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Certificate serial: 019C43FE79753889596E9B66163D91C84F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft Manifest number: 16C5 Signing time: Mon 09 Feb 2026 20:01:16 +0000 Manifest this update: Mon 09 Feb 2026 20:01:16 +0000 Manifest next update: Tue 10 Feb 2026 20:01:16 +0000 Files and hashes: 1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=) 2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: tmmtiJ8QnCp5xJ4ikhGahc4f4JVF/4Zqy1rAGvErByY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:79:75:38:89:59:6e:9b:66:16:3d:91:c8:4f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Validity Not Before: Feb 9 20:01:16 2026 GMT Not After : Feb 10 20:01:16 2026 GMT Subject: CN=58a75ab460312322dddad765dc864271ab42043d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:90:7c:04:62:75:6e:7a:cb:3f:16:cd:7d: 4c:8f:6d:3b:1b:4d:4c:10:be:70:65:d1:fa:19:58: 08:0c:e0:bb:3b:15:a4:35:ba:9a:15:57:af:ed:b9: d5:b8:ad:7c:45:47:99:8e:8d:4e:87:45:7f:7a:f3: a8:97:26:47:0f:c9:50:ef:31:ba:32:24:21:e7:8f: 61:6e:ad:28:12:4a:f7:64:e2:5a:bf:c7:ed:0d:81: e7:09:52:86:3e:c0:13:25:35:aa:fe:92:9d:37:eb: 68:d9:cb:f0:67:fc:77:e3:51:3b:f6:6f:34:e3:f9: 43:72:d9:ca:9e:8a:19:92:58:88:e7:25:4f:2f:6a: fd:33:a8:9f:1c:2a:ca:37:66:75:48:4f:23:47:ed: 33:d7:42:15:1d:72:a1:4e:7e:38:a8:0b:27:44:8a: df:18:46:38:5d:d1:d1:d5:a3:bc:38:ed:cb:2c:95: 8e:07:39:b9:3c:17:2a:86:4b:1f:59:b7:63:42:be: 23:a5:af:52:4c:9e:6e:ae:6c:00:2f:63:cc:d9:81: b9:b1:ac:56:bc:26:4b:7b:88:98:b2:df:41:ad:8d: b8:d2:73:a1:3c:13:df:15:9b:a8:a3:b2:64:ee:63: a1:c2:c7:52:be:84:98:84:3c:49:4e:2c:93:14:02: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:5A:B4:60:31:23:22:DD:DA:D7:65:DC:86:42:71:AB:42:04:3D X509v3 Authority Key Identifier: keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:db:b0:ba:34:e0:cc:52:ba:9f:68:0b:bc:6d:3c:a1:10:17: 11:58:26:f7:cf:93:3a:cb:b6:fd:60:55:cb:2e:f7:f8:dd:46: 35:de:62:1b:76:f7:b9:a0:73:f7:bf:4e:fc:81:7e:93:91:7a: 07:ad:8a:54:d1:3f:c4:b8:c3:6b:73:fd:45:64:96:71:a9:d0: 93:b6:15:7d:27:4a:53:04:4f:dc:d1:6a:88:9d:8e:c5:99:3d: d9:aa:28:7a:f8:8f:64:c1:fb:e3:a3:bd:b7:f9:f2:0b:6a:71: 82:8f:60:8b:85:7a:a8:8c:f8:cc:09:ac:5b:5c:fc:b3:9a:72: a7:93:2f:e5:d3:ba:2b:e7:88:52:5d:08:0a:b1:19:81:cb:60: a4:c7:d1:fe:96:f7:ed:cf:b4:a9:48:ef:83:93:0f:88:83:d2: b0:fe:95:73:57:c9:0b:e5:ae:40:2c:aa:35:b3:08:cf:f0:ba: 9b:08:be:91:bd:db:a3:2f:b6:a7:bd:f3:9a:8f:a3:38:05:ae: 2a:55:42:ec:85:05:fb:d4:5c:e2:f3:e8:ed:00:e1:d5:a9:8b: 88:56:c2:4b:b8:51:0e:d9:18:3b:b2:37:d9:4c:9b:ae:57:b6: a8:41:5a:10:7a:be:c7:b7:e0:8f:52:26:9f:89:b1:2f:d7:41: 57:d3:28:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nl1OIlZbptmFj2RyE8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4 YWQwYTgwHhcNMjYwMjA5MjAwMTE2WhcNMjYwMjEwMjAwMTE2WjAzMTEwLwYDVQQD Eyg1OGE3NWFiNDYwMzEyMzIyZGRkYWQ3NjVkYzg2NDI3MWFiNDIwNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJKQfARidW56yz8WzX1Mj207G01M EL5wZdH6GVgIDOC7OxWkNbqaFVev7bnVuK18RUeZjo1Oh0V/evOolyZHD8lQ7zG6 MiQh549hbq0oEkr3ZOJav8ftDYHnCVKGPsATJTWq/pKdN+to2cvwZ/x341E79m80 4/lDctnKnooZkliI5yVPL2r9M6ifHCrKN2Z1SE8jR+0z10IVHXKhTn44qAsnRIrf GEY4XdHR1aO8OO3LLJWOBzm5PBcqhksfWbdjQr4jpa9STJ5urmwAL2PM2YG5saxW vCZLe4iYst9BrY240nOhPBPfFZuoo7Jk7mOhwsdSvoSYhDxJTiyTFAIuqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFinWrRgMSMi3drXZdyGQnGrQgQ9MB8GA1UdIwQY MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9uwujTg zFK6n2gLvG08oRAXEVgm98+TOsu2/WBVyy73+N1GNd5iG3b3uaBz979O/IF+k5F6 B62KVNE/xLjDa3P9RWSWcanQk7YVfSdKUwRP3NFqiJ2OxZk92aooeviPZMH746O9 t/nyC2pxgo9gi4V6qIz4zAmsW1z8s5pyp5Mv5dO6K+eIUl0ICrEZgctgpMfR/pb3 7c+0qUjvg5MPiIPSsP6Vc1fJC+WuQCyqNbMIz/C6mwi+kb3boy+2p73zmo+jOAWu KlVC7IUF+9Rc4vPo7QDh1amLiFbCS7hRDtkYO7I32Uybrle2qEFaEHq+x7fgj1Im n4mxL9dBV9MoDA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:56 2026 by rpki-client