This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json) Hash identifier: klzYnVkoGS14K1WZEztZ70YbxFo49sH+JTHlE6tJ6PU= Subject key identifier: CB:85:88:80:0B:6E:39:49:2C:7F:99:20:2A:0A:91:41:56:B6:20:F7 Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Certificate serial: 019C42EB89399FDF55BB9BB14DE5FA0E2C8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft Manifest number: 0EE2 Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: JYjW-QeIcYRWKin5Cm85fHuAnLg.roa (hash: wT0Z0IE6rXGq31xtB0HPl9NnDaewEv+R19XnkN3Ujm8=) 2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: 5QzAqcONtJgGqhP2ZyhAyFbBc2MR22zD86c9LhAKsew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:89:39:9f:df:55:bb:9b:b1:4d:e5:fa:0e:2c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=cb8588800b6e39492c7f99202a0a914156b620f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:c0:4f:97:0d:88:2f:99:08:03:e8:e0:7d: 1a:cf:d1:b9:ca:d9:70:93:1b:f4:91:6f:53:6f:d7: 2f:c1:a1:86:8f:c8:b8:0a:3b:cb:1b:d1:1a:ba:4f: 38:7d:a2:f4:75:8d:2b:82:45:58:bb:bb:2a:0f:3e: 69:22:f3:c5:4f:20:df:79:6f:48:51:99:79:4a:ae: 20:f2:f7:6e:f7:99:aa:f5:e3:3a:1b:f2:a7:18:ba: df:95:ed:b6:f1:c7:b4:f0:de:06:bd:7f:cc:79:b1: 2c:aa:cf:30:1f:5d:a9:ae:9a:a3:05:62:8b:db:fa: 5e:97:31:5c:6c:d6:5b:d6:90:38:2b:c3:50:95:12: 7e:21:66:34:77:92:a7:57:7c:fa:cd:d8:ea:f3:5b: 09:5c:6a:d5:c5:e7:b6:c3:5f:3c:e5:11:2f:7e:28: 08:0e:16:82:ba:eb:06:13:71:15:ba:9c:a0:74:39: 85:1a:37:05:74:af:59:5f:b9:47:9b:17:64:1f:4e: d0:78:b1:b5:ed:3c:a0:c4:be:5c:9b:ff:a2:df:06: 0d:06:a7:e4:d0:00:53:94:c2:9e:de:a9:21:4a:3d: 9e:f7:06:58:56:e5:85:7c:95:c1:ab:80:31:6e:cb: c2:b2:3f:ab:3c:00:d9:83:2b:57:3b:55:c0:05:04: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:85:88:80:0B:6E:39:49:2C:7F:99:20:2A:0A:91:41:56:B6:20:F7 X509v3 Authority Key Identifier: keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:18:0d:ef:e9:15:ff:f3:cc:09:ef:2e:28:cd:d8:8d:d3:a4: 91:36:4e:e1:3a:1c:50:e2:4b:86:44:28:47:10:cb:51:a7:ae: b7:e3:0b:20:5e:bb:93:6e:47:ae:28:e5:cf:41:cc:a7:c4:5f: 70:fc:f7:0b:43:92:68:83:d1:7e:d1:4b:67:23:88:9a:e5:65: 98:f9:ae:30:5e:48:c7:98:e0:4d:d6:c1:aa:58:a3:f4:d5:9f: 14:93:ef:f0:d3:b6:89:21:51:3a:2c:d7:91:a9:58:26:33:40: 53:af:2c:9a:89:e9:20:f1:23:76:f2:7a:af:29:75:73:95:d2: 9d:63:d8:d8:dc:18:81:b8:d9:78:6b:e3:cf:02:be:96:c3:e1: 1e:40:91:de:50:51:c8:5e:1e:29:0e:fd:2e:80:4a:c5:23:e9: 9c:a0:08:2e:7c:94:9e:27:11:73:2d:40:2d:37:69:78:4a:ea: 93:f4:aa:ef:ff:bb:38:51:83:94:5c:b5:89:7a:0d:5e:65:a8: 5a:c3:2a:ea:44:19:19:d4:8a:00:5c:42:7c:cc:aa:9e:80:56: 0b:ca:7c:ff:38:12:28:48:24:a4:7d:fb:63:6d:6f:28:95:d0: 66:28:81:88:24:cb:74:a4:be:e1:ff:f2:03:c0:2d:7a:be:8c: 9a:fb:c7:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64k5n99Vu5uxTeX6DiyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzBjODIxODFiOTBkZjZjNDk2OTE0YzMxOWQzMWZmOGIy YTQwODIwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD EyhjYjg1ODg4MDBiNmUzOTQ5MmM3Zjk5MjAyYTBhOTE0MTU2YjYyMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncHAT5cNiC+ZCAPo4H0az9G5ytlw kxv0kW9Tb9cvwaGGj8i4CjvLG9Eauk84faL0dY0rgkVYu7sqDz5pIvPFTyDfeW9I UZl5Sq4g8vdu95mq9eM6G/KnGLrfle228ce08N4GvX/MebEsqs8wH12prpqjBWKL 2/pelzFcbNZb1pA4K8NQlRJ+IWY0d5KnV3z6zdjq81sJXGrVxee2w1885REvfigI DhaCuusGE3EVupygdDmFGjcFdK9ZX7lHmxdkH07QeLG17TygxL5cm/+i3wYNBqfk 0ABTlMKe3qkhSj2e9wZYVuWFfJXBq4AxbsvCsj+rPADZgytXO1XABQSWywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuFiIALbjlJLH+ZICoKkUFWtiD3MB8GA1UdIwQY MBaAFI3AyCGBuQ32xJaRTDGdMf+LKkCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUt ZGMwMWFjMjI4NDUxLzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUtZGMwMWFjMjI4NDUx LzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBgN7+kV //PMCe8uKM3YjdOkkTZO4TocUOJLhkQoRxDLUaeut+MLIF67k25Hrijlz0HMp8Rf cPz3C0OSaIPRftFLZyOImuVlmPmuMF5Ix5jgTdbBqlij9NWfFJPv8NO2iSFROizX kalYJjNAU68smonpIPEjdvJ6ryl1c5XSnWPY2NwYgbjZeGvjzwK+lsPhHkCR3lBR yF4eKQ79LoBKxSPpnKAILnyUnicRcy1ALTdpeErqk/Sq7/+7OFGDlFy1iXoNXmWo WsMq6kQZGdSKAFxCfMyqnoBWC8p8/zgSKEgkpH37Y21vKJXQZiiBiCTLdKS+4f/y A8Ater6MmvvHmg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:43 2026 by rpki-client