This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json) Hash identifier: bctUy/oQ0M+Ldm2MjyVitDbAaye/u/If7KLEQqDJ9xc= Subject key identifier: E4:7E:34:B5:92:CC:1E:2A:E2:76:D9:2A:1B:42:36:D7:B6:5B:FB:FD Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Certificate serial: 019C43592CBAF3E456A2A8084CA9262C05EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft Manifest number: 0EB8 Signing time: Mon 09 Feb 2026 17:00:43 +0000 Manifest this update: Mon 09 Feb 2026 17:00:43 +0000 Manifest next update: Tue 10 Feb 2026 17:00:43 +0000 Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=) 2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: 5StcbhS9PZoBj1PfuEFTGSIgRlfJzdY5xo2oTWnOFgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2c:ba:f3:e4:56:a2:a8:08:4c:a9:26:2c:05:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Validity Not Before: Feb 9 17:00:43 2026 GMT Not After : Feb 10 17:00:43 2026 GMT Subject: CN=e47e34b592cc1e2ae276d92a1b4236d7b65bfbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:8d:77:9d:c7:f3:34:d0:91:f8:8c:52:db: fb:98:1b:58:1d:61:75:d8:0a:4a:e2:e6:ad:04:09: 82:3f:f0:8f:b6:85:88:ca:b4:3b:1f:d4:69:77:71: b7:59:46:f5:9f:39:e3:6f:94:69:99:3f:fa:e8:fe: 39:1d:74:55:c5:9d:c0:44:ca:c5:4c:2c:d2:ed:ca: 28:46:c3:bd:7c:11:9e:a4:8a:5e:78:cf:5e:d9:c7: fc:84:b3:c6:e8:db:43:8a:79:a1:4d:ab:dd:d5:cf: bd:6d:e7:e0:e5:82:ae:f6:60:00:32:39:64:86:4b: 27:40:59:ce:2f:ad:3a:ce:e7:45:21:73:a5:6a:d0: 89:f0:4a:da:a1:3d:8c:07:32:02:92:e3:1d:39:f4: d9:82:96:48:8a:24:65:11:a0:bd:71:71:9f:96:80: 5b:08:c1:0d:01:44:53:27:c2:91:08:be:f5:aa:9e: 74:0a:6d:3f:71:01:a8:fa:ff:7b:83:31:c0:4a:66: bb:7e:c1:a0:eb:e0:7f:24:e5:4f:bc:d6:a6:2c:db: 70:93:58:54:3d:70:f3:48:c4:ae:d3:4c:77:a0:36: b9:c9:c5:19:84:90:f9:0a:62:83:41:64:71:17:aa: 9e:70:de:48:09:f9:32:46:5c:89:4f:04:f4:c6:a6: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7E:34:B5:92:CC:1E:2A:E2:76:D9:2A:1B:42:36:D7:B6:5B:FB:FD X509v3 Authority Key Identifier: keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ac:0b:92:7d:56:af:bc:57:13:cd:c7:da:34:7e:40:93:46: b8:b2:07:ff:bd:aa:27:79:18:86:5e:19:5d:e6:c5:95:72:50: 1e:19:8a:64:33:dd:74:7c:df:13:6b:97:8f:5e:69:91:46:d1: e2:0e:1b:28:24:ed:6c:0f:a1:23:5d:0e:b0:f6:ec:9e:89:ce: a0:32:65:28:0c:3c:fb:83:02:16:37:76:18:61:c9:ce:af:f8: 08:d9:ba:b5:cf:d1:8b:83:92:27:77:2b:b1:bd:dc:54:e7:58: ef:84:7c:3a:a6:2f:fb:84:a4:6a:64:39:00:57:09:fb:f0:6b: 81:b8:fc:56:be:bf:68:9a:da:74:13:39:e5:a2:0e:a3:fd:7c: a9:24:65:da:bf:bf:80:ed:98:2b:4b:ea:f3:8b:6d:9c:5d:0d: 7e:ee:8c:d1:ce:36:3b:9f:da:91:07:e9:73:58:f1:b3:2d:9b: 44:d8:59:63:dd:dd:a9:cb:af:f3:ff:63:dc:e4:0a:92:b0:97: 05:64:bb:59:28:84:a6:3d:bc:4f:92:d1:11:fb:e7:c5:75:c2: e7:e6:41:9e:e9:63:c7:04:0a:c7:13:ca:d6:3b:b8:1c:e7:b2: 9a:42:35:3d:00:67:3f:f7:1a:09:18:3a:a9:42:cb:77:56:60: fa:4a:27:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSy68+RWoqgITKkmLAXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy NzFmMjQwHhcNMjYwMjA5MTcwMDQzWhcNMjYwMjEwMTcwMDQzWjAzMTEwLwYDVQQD EyhlNDdlMzRiNTkyY2MxZTJhZTI3NmQ5MmExYjQyMzZkN2I2NWJmYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthqNd53H8zTQkfiMUtv7mBtYHWF1 2ApK4uatBAmCP/CPtoWIyrQ7H9Rpd3G3WUb1nznjb5RpmT/66P45HXRVxZ3ARMrF TCzS7cooRsO9fBGepIpeeM9e2cf8hLPG6NtDinmhTavd1c+9befg5YKu9mAAMjlk hksnQFnOL606zudFIXOlatCJ8EraoT2MBzICkuMdOfTZgpZIiiRlEaC9cXGfloBb CMENAURTJ8KRCL71qp50Cm0/cQGo+v97gzHASma7fsGg6+B/JOVPvNamLNtwk1hU PXDzSMSu00x3oDa5ycUZhJD5CmKDQWRxF6qecN5ICfkyRlyJTwT0xqZngwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOR+NLWSzB4q4nbZKhtCNte2W/v9MB8GA1UdIwQY MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2 LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqwLkn1W r7xXE83H2jR+QJNGuLIH/72qJ3kYhl4ZXebFlXJQHhmKZDPddHzfE2uXj15pkUbR 4g4bKCTtbA+hI10OsPbsnonOoDJlKAw8+4MCFjd2GGHJzq/4CNm6tc/Ri4OSJ3cr sb3cVOdY74R8OqYv+4SkamQ5AFcJ+/Brgbj8Vr6/aJradBM55aIOo/18qSRl2r+/ gO2YK0vq84ttnF0Nfu6M0c42O5/akQfpc1jxsy2bRNhZY93dqcuv8/9j3OQKkrCX BWS7WSiEpj28T5LREfvnxXXC5+ZBnuljxwQKxxPK1ju4HOeymkI1PQBnP/caCRg6 qULLd1Zg+konzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:28 2026 by rpki-client