This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json) Hash identifier: ovnXnPXd12rBPNfTTkwpxYz2h8HCOb3lYq1zQknCGM4= Subject key identifier: 2C:33:DA:AB:89:D5:3B:C5:CA:2D:D9:2A:F0:51:42:F9:13:0C:B0:FD Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159 Certificate serial: 019C427CFCD0ACF7616389A8EB67D48F846F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft Manifest number: 1351 Signing time: Mon 09 Feb 2026 13:00:13 +0000 Manifest this update: Mon 09 Feb 2026 13:00:13 +0000 Manifest next update: Tue 10 Feb 2026 13:00:13 +0000 Files and hashes: 1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=) 2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: fbbDELntzPw9UFv8pFxXjXAgjSwQCtItXKu/lxhmREw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7c:fc:d0:ac:f7:61:63:89:a8:eb:67:d4:8f:84:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092425ab7d66bab711fbaa22757377807834159 Validity Not Before: Feb 9 13:00:13 2026 GMT Not After : Feb 10 13:00:13 2026 GMT Subject: CN=2c33daab89d53bc5ca2dd92af05142f9130cb0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:9c:68:14:0d:20:87:0b:d6:92:76:d0:e8: dc:87:84:38:b5:d5:72:22:fb:ff:77:64:d6:b7:79: f8:2e:20:85:f2:dc:ba:d5:6c:e3:35:d9:5e:e1:77: a4:78:44:81:bb:a3:9a:ad:9c:5d:46:19:60:be:bf: 99:ad:97:0c:3c:41:8e:ad:55:b9:af:a0:b8:d8:af: d8:a2:f5:ec:af:45:6b:7d:2e:9d:4e:51:66:a5:85: 73:a4:87:b8:0d:d9:a4:04:42:f1:26:8e:62:19:3e: 76:82:da:d3:2a:1c:ac:9f:f6:b0:00:18:e3:1c:67: 2f:6b:76:eb:ca:20:0b:0e:49:3b:58:b7:c7:fc:7c: 2b:18:ab:cd:a6:2b:4d:60:dc:46:39:f7:ad:f3:57: b0:f8:cc:82:fc:89:9b:99:b6:7f:fc:b6:30:fe:27: 50:74:09:8a:2c:18:b6:6d:23:76:c3:f7:b6:06:e2: dd:ff:b6:b9:7a:b7:24:03:38:7b:3f:8c:1f:6f:75: 2e:89:1f:7d:19:f6:8b:cf:0c:99:69:cf:b8:ca:f9: ce:a4:bb:8c:2e:d4:94:40:e0:f4:08:83:c8:19:36: 8b:d7:fa:5c:37:ed:47:6f:00:f0:d2:f4:d0:92:a4: a3:ad:87:fe:e6:0e:fd:2d:65:90:11:65:92:18:ab: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:33:DA:AB:89:D5:3B:C5:CA:2D:D9:2A:F0:51:42:F9:13:0C:B0:FD X509v3 Authority Key Identifier: keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f5:99:4b:28:69:67:44:95:cb:db:0b:94:06:d7:e2:15:75: bd:d9:2a:e2:b5:bd:59:72:d7:2c:04:e6:9c:11:b3:89:4a:ae: c9:4d:03:75:19:53:c3:91:0a:3d:f2:a4:e0:b9:59:98:9f:a0: 43:8a:11:01:71:a4:e8:a1:1b:d2:f9:ed:b4:09:54:70:77:c0: 03:68:f4:a9:3f:86:93:dc:51:41:0b:9a:8c:84:fe:30:f0:89: 64:4b:ea:9a:e0:55:c3:b2:bb:c3:7b:cb:94:df:f2:18:a4:24: d1:4d:99:9b:9b:60:fc:17:2b:1a:ca:47:83:21:30:48:1d:a7: ed:b8:28:e7:c4:f4:04:30:87:5a:40:a0:dc:ab:e2:2c:33:97: e1:7c:10:49:71:04:cf:83:c8:2b:7c:9b:28:2a:f3:57:a0:c5: 33:f9:98:98:2d:e8:9a:d9:15:3b:9a:47:f2:a4:83:b6:05:e3: af:7c:cc:8e:2a:e9:11:69:84:00:48:23:96:a2:41:d6:fd:12: 16:e4:21:41:dd:6e:37:00:5b:51:99:26:84:db:2e:be:46:53: a9:cf:f9:0b:fe:e4:96:a8:32:e9:3c:2d:e5:d2:a2:03:b5:80: 3c:99:cd:32:cb:c7:5a:37:4a:fc:60:ac:1a:be:02:a7:23:74: e2:2e:21:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfPzQrPdhY4mo62fUj4RvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4 MzQxNTkwHhcNMjYwMjA5MTMwMDEzWhcNMjYwMjEwMTMwMDEzWjAzMTEwLwYDVQQD EygyYzMzZGFhYjg5ZDUzYmM1Y2EyZGQ5MmFmMDUxNDJmOTEzMGNiMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslWcaBQNIIcL1pJ20Ojch4Q4tdVy Ivv/d2TWt3n4LiCF8ty61WzjNdle4XekeESBu6OarZxdRhlgvr+ZrZcMPEGOrVW5 r6C42K/YovXsr0VrfS6dTlFmpYVzpIe4DdmkBELxJo5iGT52gtrTKhysn/awABjj HGcva3bryiALDkk7WLfH/HwrGKvNpitNYNxGOfet81ew+MyC/ImbmbZ//LYw/idQ dAmKLBi2bSN2w/e2BuLd/7a5erckAzh7P4wfb3UuiR99GfaLzwyZac+4yvnOpLuM LtSUQOD0CIPIGTaL1/pcN+1HbwDw0vTQkqSjrYf+5g79LWWQEWWSGKtc6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwz2quJ1TvFyi3ZKvBRQvkTDLD9MB8GA1UdIwQY MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2 LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvWZSyhp Z0SVy9sLlAbX4hV1vdkq4rW9WXLXLATmnBGziUquyU0DdRlTw5EKPfKk4LlZmJ+g Q4oRAXGk6KEb0vnttAlUcHfAA2j0qT+Gk9xRQQuajIT+MPCJZEvqmuBVw7K7w3vL lN/yGKQk0U2Zm5tg/BcrGspHgyEwSB2n7bgo58T0BDCHWkCg3KviLDOX4XwQSXEE z4PIK3ybKCrzV6DFM/mYmC3omtkVO5pH8qSDtgXjr3zMjirpEWmEAEgjlqJB1v0S FuQhQd1uNwBbUZkmhNsuvkZTqc/5C/7klqgy6Twt5dKiA7WAPJnNMsvHWjdK/GCs Gr4CpyN04i4hMg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:28 2026 by rpki-client