This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json) Hash identifier: Z87d0EJNOezN5uFZDyr5F7EuQDFTUIwVNR8I0kGhHGc= Subject key identifier: 89:64:EE:8D:A0:E7:33:36:14:4A:BA:98:CF:7A:94:B6:AE:0A:B8:41 Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Certificate serial: 019C34F8C5C826C60DD9E769D69C23EBF746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft Manifest number: 1808 Signing time: Fri 06 Feb 2026 22:00:44 +0000 Manifest this update: Fri 06 Feb 2026 22:00:44 +0000 Manifest next update: Sat 07 Feb 2026 22:00:44 +0000 Files and hashes: 1: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=) 2: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: ouTOyDZtkNp25qG9ycYKwv6+tu2FHP+rV4E3qd0Ujno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:34:f8:c5:c8:26:c6:0d:d9:e7:69:d6:9c:23:eb:f7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Validity Not Before: Feb 6 22:00:44 2026 GMT Not After : Feb 7 22:00:44 2026 GMT Subject: CN=8964ee8da0e73336144aba98cf7a94b6ae0ab841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:d2:05:1c:6a:7a:a9:2c:84:49:52:65:c3: 2b:5a:4d:41:5d:51:bf:96:2c:7f:37:66:a2:c5:d7: 70:1e:45:53:05:2f:dd:6a:6a:b5:ad:62:d6:76:b7: bf:6c:3a:88:43:38:cd:b8:d7:ea:e5:77:9c:8a:37: 3b:f4:2e:ca:6d:06:e0:83:48:2a:51:b6:73:b1:1c: 76:33:2d:2f:c3:b1:0f:30:86:d2:4f:44:c4:0b:34: ef:14:2e:72:e5:02:65:8d:37:37:5c:2c:38:ea:56: e8:4d:ad:ec:5c:94:ba:8a:14:75:4e:8a:02:84:79: e2:9c:4e:f8:77:b5:d6:9d:3a:7f:7b:51:b3:64:36: 5d:13:01:3c:ae:6a:50:25:a0:2f:3a:3d:1e:d8:b2: 14:bd:61:e8:ab:9f:d4:b7:d4:59:f7:74:64:75:ad: 27:6f:59:75:de:8d:fe:87:a4:6f:af:f2:12:ac:97: d1:7c:ce:be:09:f0:06:54:b6:40:12:24:cc:18:f9: ab:be:6a:0d:42:d1:b8:84:09:46:91:1c:c1:5c:6d: db:e4:f4:3d:63:33:db:b5:97:a4:5c:2b:17:22:60: 1e:f6:c7:ca:f5:b5:83:0e:39:2f:17:e8:b6:f5:58: 90:73:fb:a3:0a:c8:bb:7c:0f:fa:d2:da:d6:a0:84: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:EE:8D:A0:E7:33:36:14:4A:BA:98:CF:7A:94:B6:AE:0A:B8:41 X509v3 Authority Key Identifier: keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cb:1c:2a:0c:cf:d6:09:ff:bf:79:a3:71:6a:4f:e2:82:dc: 2b:86:67:0f:9a:35:82:6d:85:fc:02:c8:dd:b6:2a:0f:df:9a: 5a:ac:c0:0a:c6:13:05:01:87:3f:f7:81:48:cf:96:1f:1b:af: 8d:3d:6b:d3:d0:25:c9:cf:93:03:67:09:38:4c:3d:34:f6:3f: 56:a4:87:b2:b9:32:c2:5c:b7:c6:3c:ab:73:c8:5d:be:c8:d6: b0:f4:7e:15:a5:c9:f2:d5:e4:cd:14:a1:df:c3:5a:68:f9:ba: 2a:be:60:b0:d4:c8:5e:08:c6:5c:1c:c5:af:e1:4d:57:bb:21: 95:4c:ba:50:2b:41:db:c8:58:19:bf:82:d3:69:60:64:a1:ae: 66:4e:33:58:2c:c6:e8:3d:8a:fe:d7:ac:54:33:48:2e:48:93: 45:81:95:b6:c8:f4:28:bf:7a:6d:41:96:a3:74:16:fa:dc:d6: 01:f9:2a:53:4e:a9:9c:f4:59:45:54:87:89:34:bc:0e:a4:8b: 72:33:c1:3d:b9:9b:c7:3f:3d:a4:a7:58:c9:9c:8f:8a:19:15: dc:eb:52:76:d6:df:82:1f:12:8e:24:5d:84:2c:6c:54:04:3b: be:eb:34:7e:51:e8:85:99:8f:c6:6d:7c:69:d0:4a:b1:78:e1: 58:58:c0:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw0+MXIJsYN2edp1pwj6/dGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0 MDFhMzcwHhcNMjYwMjA2MjIwMDQ0WhcNMjYwMjA3MjIwMDQ0WjAzMTEwLwYDVQQD Eyg4OTY0ZWU4ZGEwZTczMzM2MTQ0YWJhOThjZjdhOTRiNmFlMGFiODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydHSBRxqeqkshElSZcMrWk1BXVG/ lix/N2aixddwHkVTBS/damq1rWLWdre/bDqIQzjNuNfq5Xecijc79C7KbQbgg0gq UbZzsRx2My0vw7EPMIbST0TECzTvFC5y5QJljTc3XCw46lboTa3sXJS6ihR1TooC hHninE74d7XWnTp/e1GzZDZdEwE8rmpQJaAvOj0e2LIUvWHoq5/Ut9RZ93Rkda0n b1l13o3+h6Rvr/ISrJfRfM6+CfAGVLZAEiTMGPmrvmoNQtG4hAlGkRzBXG3b5PQ9 YzPbtZekXCsXImAe9sfK9bWDDjkvF+i29ViQc/ujCsi7fA/60trWoITMOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlk7o2g5zM2FEq6mM96lLauCrhBMB8GA1UdIwQY MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5 LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMscKgzP 1gn/v3mjcWpP4oLcK4ZnD5o1gm2F/ALI3bYqD9+aWqzACsYTBQGHP/eBSM+WHxuv jT1r09Alyc+TA2cJOEw9NPY/VqSHsrkywly3xjyrc8hdvsjWsPR+FaXJ8tXkzRSh 38NaaPm6Kr5gsNTIXgjGXBzFr+FNV7shlUy6UCtB28hYGb+C02lgZKGuZk4zWCzG 6D2K/tesVDNILkiTRYGVtsj0KL96bUGWo3QW+tzWAfkqU06pnPRZRVSHiTS8DqSL cjPBPbmbxz89pKdYyZyPihkV3OtSdtbfgh8SjiRdhCxsVAQ7vus0flHohZmPxm18 adBKsXjhWFjAaA== -----END CERTIFICATE-----Generated at Sat Feb 7 05:48:25 2026 by rpki-client