This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json) Hash identifier: 1z/0wCsj0PmL+juq4gpCZ6z1StbzhUh1JePody7gWss= Subject key identifier: A7:F4:D1:1B:DE:26:A2:E5:59:A7:0D:FD:F5:61:1A:18:4D:24:1F:2C Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7 Certificate serial: 019C1C4BC1C70D41BBFD402362E26009EB21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft Manifest number: 048F Signing time: Mon 02 Feb 2026 03:00:52 +0000 Manifest this update: Mon 02 Feb 2026 03:00:52 +0000 Manifest next update: Tue 03 Feb 2026 03:00:52 +0000 Files and hashes: 1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=) 2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: ia6phHIU1CV7fSkNDlrvKw50SC04C4O2NGs4OsZ/3n4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4b:c1:c7:0d:41:bb:fd:40:23:62:e2:60:09:eb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7 Validity Not Before: Feb 2 03:00:52 2026 GMT Not After : Feb 3 03:00:52 2026 GMT Subject: CN=a7f4d11bde26a2e559a70dfdf5611a184d241f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:84:22:42:d2:89:f5:4f:e8:e3:23:97:6d: cb:6d:20:21:a5:19:41:cc:5c:b4:b6:a3:09:3b:08: ff:9d:27:e6:7a:7c:65:48:c7:21:aa:60:4d:1a:ef: 80:01:a4:e5:a4:6b:06:e5:fd:32:5f:f2:b2:01:5f: ba:c1:ba:54:5a:c6:26:7c:dc:44:70:82:71:88:ef: a3:ca:f6:7f:16:3e:35:b8:28:6a:6a:3e:2d:fb:89: e3:66:4d:5a:86:50:7f:31:64:37:f1:56:0c:1b:fc: 4d:83:93:4e:5e:5d:ec:40:de:04:4a:5f:74:d6:3f: 5b:0b:17:0a:fd:59:99:89:a3:3f:41:34:de:86:18: 8a:c6:7a:0b:79:00:d6:b7:c8:2c:7a:3c:d1:02:5a: 35:3a:20:33:4d:62:d4:73:59:f2:34:7c:c4:7d:3a: e8:58:b3:93:95:3f:10:d2:df:38:ad:1e:5c:63:02: 01:5b:b5:db:bc:69:ef:ca:41:7e:19:7d:99:73:4b: 35:89:61:4d:e9:4d:25:09:d2:b8:e2:ce:90:1c:31: 1f:3e:d2:11:b0:07:6c:33:b4:47:95:6c:9a:57:36: 4b:eb:4e:24:61:5b:b9:90:05:cb:f6:f9:92:ad:ea: 6e:25:ac:f1:e8:45:36:48:42:95:ff:d0:25:88:73: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:D1:1B:DE:26:A2:E5:59:A7:0D:FD:F5:61:1A:18:4D:24:1F:2C X509v3 Authority Key Identifier: keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:74:1f:3e:78:65:b4:c0:71:14:3e:21:99:c9:b2:42:81:eb: d3:a4:9e:c7:e3:7e:7a:bc:09:fa:2e:f8:3d:41:96:a1:80:d4: 55:55:7b:bf:92:60:a3:43:20:39:01:e7:64:d1:ad:6e:da:b9: f5:13:60:5e:be:ae:5d:c6:ae:20:80:d2:2f:b1:a5:66:c0:39: 75:05:1d:65:7d:53:bc:ab:f5:fc:89:77:32:5c:da:f7:53:0a: 86:7f:18:66:1f:b7:83:48:c3:a2:39:b1:1e:6d:54:80:1b:6b: 5e:ca:5e:18:aa:95:e0:07:ad:84:54:de:a0:20:9f:9a:05:96: 00:8f:c1:7c:ea:08:06:b6:d5:85:1d:a4:0c:f0:66:17:ea:e9: 88:e1:6e:58:c0:b7:50:b2:71:ab:4a:5c:18:91:d6:af:7b:b6: 59:54:9f:64:ed:c3:87:8c:37:f6:21:d7:2c:07:3d:a4:ee:d0: 94:35:ba:ed:d0:2b:12:2a:82:f7:98:69:eb:66:6a:44:cb:4c: 62:d6:97:f8:a5:a1:71:b0:d9:d9:2f:46:9a:f7:17:eb:20:d7: 00:e6:94:83:61:e4:0a:5f:b7:27:08:7d:6f:7f:ad:d5:c4:39: ab:d9:d4:2a:0f:51:49:af:bd:65:93:bc:bf:e2:ec:8b:10:d3: b1:57:f9:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcS8HHDUG7/UAjYuJgCeshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk NzQ0YjcwHhcNMjYwMjAyMDMwMDUyWhcNMjYwMjAzMDMwMDUyWjAzMTEwLwYDVQQD EyhhN2Y0ZDExYmRlMjZhMmU1NTlhNzBkZmRmNTYxMWExODRkMjQxZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibGEIkLSifVP6OMjl23LbSAhpRlB zFy0tqMJOwj/nSfmenxlSMchqmBNGu+AAaTlpGsG5f0yX/KyAV+6wbpUWsYmfNxE cIJxiO+jyvZ/Fj41uChqaj4t+4njZk1ahlB/MWQ38VYMG/xNg5NOXl3sQN4ESl90 1j9bCxcK/VmZiaM/QTTehhiKxnoLeQDWt8gsejzRAlo1OiAzTWLUc1nyNHzEfTro WLOTlT8Q0t84rR5cYwIBW7XbvGnvykF+GX2Zc0s1iWFN6U0lCdK44s6QHDEfPtIR sAdsM7RHlWyaVzZL604kYVu5kAXL9vmSrepuJazx6EU2SEKV/9AliHOO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf00RveJqLlWacN/fVhGhhNJB8sMB8GA1UdIwQY MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2 LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnQfPnhl tMBxFD4hmcmyQoHr06Sex+N+erwJ+i74PUGWoYDUVVV7v5Jgo0MgOQHnZNGtbtq5 9RNgXr6uXcauIIDSL7GlZsA5dQUdZX1TvKv1/Il3Mlza91MKhn8YZh+3g0jDojmx Hm1UgBtrXspeGKqV4AethFTeoCCfmgWWAI/BfOoIBrbVhR2kDPBmF+rpiOFuWMC3 ULJxq0pcGJHWr3u2WVSfZO3Dh4w39iHXLAc9pO7QlDW67dArEiqC95hp62ZqRMtM YtaX+KWhcbDZ2S9GmvcX6yDXAOaUg2HkCl+3Jwh9b3+t1cQ5q9nUKg9RSa+9ZZO8 v+LsixDTsVf5Aw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:36:25 2026 by rpki-client