This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json) Hash identifier: nkfW5G+WZIBIW9PA2PnnzlvVkpJUR6MUfNWuxQ0GKz4= Subject key identifier: A8:14:A3:8C:65:54:A6:2F:EC:88:6D:5C:53:CE:04:CC:80:B2:13:41 Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58 Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58 Certificate serial: 019C43FDEA6A038711FB1366958F1583E8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft Manifest number: 0206 Signing time: Mon 09 Feb 2026 20:00:39 +0000 Manifest this update: Mon 09 Feb 2026 20:00:39 +0000 Manifest next update: Tue 10 Feb 2026 20:00:39 +0000 Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: YxcmtIQuh8fjHiaaRe/gmfn0mGFOLhHyI37QdpInl/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:ea:6a:03:87:11:fb:13:66:95:8f:15:83:e8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58 Validity Not Before: Feb 9 20:00:39 2026 GMT Not After : Feb 10 20:00:39 2026 GMT Subject: CN=a814a38c6554a62fec886d5c53ce04cc80b21341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:0c:5a:fd:8f:9b:29:c9:9d:e5:4d:ce:00: ed:89:97:49:f0:78:b5:a3:b1:d8:5a:3e:2b:3e:67: 5f:ff:10:b9:c3:22:88:cb:4b:a2:51:36:36:7e:1c: 41:9e:44:7b:b0:44:06:f8:1c:07:7b:3d:9b:65:ec: 01:2b:ca:15:d5:22:99:c5:57:71:96:47:c7:80:1d: 95:9b:8d:70:f8:20:79:dc:54:06:33:ca:af:29:e1: 30:31:76:ff:7e:6d:9a:27:3a:e4:77:b8:fa:77:3e: 92:90:69:3d:05:85:75:5d:31:1a:60:65:34:7a:57: d2:8b:56:0e:d8:c9:b7:eb:fe:0d:78:16:47:a2:bf: 59:08:57:89:79:fb:ba:a5:7a:3f:42:65:65:ed:c3: 64:be:8e:9f:37:b6:74:af:7a:32:9f:f8:f2:92:b7: ba:4c:af:7a:73:5c:58:0a:a2:7f:c1:e7:d8:31:d8: fa:36:be:5a:79:36:a4:c8:80:17:03:c9:1e:48:e8: f8:e8:6b:08:34:d2:16:ed:5a:34:27:fc:e1:2d:0f: 44:54:0c:39:92:16:a1:7d:7b:6a:86:b0:9a:89:dd: 15:47:5e:96:e8:36:d9:a7:5a:6c:4e:ac:e5:ab:ad: ea:04:62:c6:52:c5:67:f8:9c:71:d4:c1:4d:d2:f1: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:A3:8C:65:54:A6:2F:EC:88:6D:5C:53:CE:04:CC:80:B2:13:41 X509v3 Authority Key Identifier: keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7c:28:b1:e5:64:25:0f:2b:d0:61:a9:65:aa:ce:ed:e7:c5: 74:a4:25:ba:9c:61:cb:48:a0:a4:08:c6:ab:54:97:ac:08:43: 5d:3b:c4:94:c5:26:9b:59:39:7e:e8:2c:61:9d:61:97:c1:00: 3a:e2:ff:45:f3:7d:8a:64:70:52:b1:20:91:b4:02:0d:27:10: 9a:59:95:c7:75:ef:d9:ad:83:90:36:ab:ba:37:67:cf:f7:eb: ce:94:a9:50:66:6a:b2:d5:c0:16:6b:10:d9:19:ab:1c:e1:a0: 1d:90:79:0f:3f:3b:7d:f4:63:38:d3:ab:04:1f:b7:75:b6:59: 5c:f1:10:d4:ff:f7:fb:3a:9f:1f:34:f0:26:c7:f2:b5:6e:88: 3b:14:20:f5:25:5b:18:a2:78:a9:0d:24:04:e6:29:b8:33:50: 37:c9:aa:23:9a:84:b7:3b:18:c8:d6:77:43:8e:e5:a2:82:7d: 95:b8:75:81:2a:37:a6:7f:45:62:18:68:fc:7d:f7:4e:45:a3: 85:fc:88:da:c6:ef:78:b7:c7:af:67:88:59:2f:86:a3:a9:b7: e5:3a:b3:d4:ba:1c:ec:60:c7:34:81:6b:04:d6:fa:9b:a2:4c: 16:b3:4b:3a:24:99:b4:c2:43:cc:96:34:1d:8e:0e:0d:7f:3b: 3a:60:4c:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/epqA4cR+xNmlY8Vg+jxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOWI1OThjMWIyYjk3YTBlM2E5YWE2MDkzODAzMDkyY2Ex YjdiNTgwHhcNMjYwMjA5MjAwMDM5WhcNMjYwMjEwMjAwMDM5WjAzMTEwLwYDVQQD EyhhODE0YTM4YzY1NTRhNjJmZWM4ODZkNWM1M2NlMDRjYzgwYjIxMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcMWv2PmynJneVNzgDtiZdJ8Hi1 o7HYWj4rPmdf/xC5wyKIy0uiUTY2fhxBnkR7sEQG+BwHez2bZewBK8oV1SKZxVdx lkfHgB2Vm41w+CB53FQGM8qvKeEwMXb/fm2aJzrkd7j6dz6SkGk9BYV1XTEaYGU0 elfSi1YO2Mm36/4NeBZHor9ZCFeJefu6pXo/QmVl7cNkvo6fN7Z0r3oyn/jykre6 TK96c1xYCqJ/wefYMdj6Nr5aeTakyIAXA8keSOj46GsINNIW7Vo0J/zhLQ9EVAw5 khahfXtqhrCaid0VR16W6DbZp1psTqzlq63qBGLGUsVn+Jxx1MFN0vHrsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgUo4xlVKYv7IhtXFPOBMyAshNBMB8GA1UdIwQY MBaAFI2bWYwbK5eg46mqYJOAMJLKG3tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMt NzQ1ZWNhNmQ5NThmLzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMtNzQ1ZWNhNmQ5NThm LzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3woseVk JQ8r0GGpZarO7efFdKQlupxhy0igpAjGq1SXrAhDXTvElMUmm1k5fugsYZ1hl8EA OuL/RfN9imRwUrEgkbQCDScQmlmVx3Xv2a2DkDarujdnz/frzpSpUGZqstXAFmsQ 2RmrHOGgHZB5Dz87ffRjONOrBB+3dbZZXPEQ1P/3+zqfHzTwJsfytW6IOxQg9SVb GKJ4qQ0kBOYpuDNQN8mqI5qEtzsYyNZ3Q47looJ9lbh1gSo3pn9FYhho/H33TkWj hfyI2sbveLfHr2eIWS+Go6m35Tqz1Loc7GDHNIFrBNb6m6JMFrNLOiSZtMJDzJY0 HY4ODX87OmBMuA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:58 2026 by rpki-client