This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json) Hash identifier: 0FNul8L2USVoBt4PDQrpBuWPZxJNX6KQ8hjYa1rrydM= Subject key identifier: 94:4C:DC:87:B4:08:40:8A:E6:FB:8E:CC:7C:72:C5:EF:CE:70:25:82 Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea Certificate serial: 019C41A1FAC076CA584AE6848187D30D4D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft Manifest number: 0A37 Signing time: Mon 09 Feb 2026 09:01:00 +0000 Manifest this update: Mon 09 Feb 2026 09:01:00 +0000 Manifest next update: Tue 10 Feb 2026 09:01:00 +0000 Files and hashes: 1: UwIChmxo9QDoLv2cZqzGPfCrUQU.roa (hash: iViSnyemk7R4QbC75JFUXVWz8URlQ9KGxcWEibF4T+E=) 2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: 5YNDRPpfAFGkn+MxCrwJK0jSvdtVbANG8FcJUbnpSgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:fa:c0:76:ca:58:4a:e6:84:81:87:d3:0d:4d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea Validity Not Before: Feb 9 09:01:00 2026 GMT Not After : Feb 10 09:01:00 2026 GMT Subject: CN=944cdc87b408408ae6fb8ecc7c72c5efce702582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:55:1c:8f:9a:82:cf:c6:57:ce:70:f6:61: 43:64:ce:40:c2:77:90:10:48:79:d6:c1:1f:51:e3: d9:23:dc:9e:d6:81:36:ce:9a:fb:bb:bc:fd:97:85: e9:f8:d9:30:ce:c7:b2:71:49:f8:a5:a7:09:bd:ed: dd:5c:5e:da:bc:3f:13:e3:32:36:5d:ea:32:01:7b: 25:57:07:34:b1:47:27:aa:41:13:fd:a3:5d:83:ee: 41:a2:1d:32:de:80:91:87:e0:6f:db:da:6e:96:0a: 94:9d:99:0a:6c:67:84:ea:21:40:57:bc:54:5e:02: 0c:cd:9f:d7:9d:d2:d9:f6:ec:fc:0b:b5:53:04:2c: 85:e2:73:3c:f4:84:28:60:62:0c:e6:2e:88:b8:33: d2:bb:4a:ff:b2:f1:8f:5a:ed:45:3e:d8:4b:43:23: 1c:1a:1d:87:68:e3:22:3c:1f:34:05:da:df:b3:57: 61:0f:03:d9:68:ba:47:3a:f5:e4:99:24:e0:53:f8: 88:17:d3:34:97:39:63:9a:91:72:dd:7a:c8:b6:26: 85:fa:41:4c:0e:6e:fd:68:76:9e:f2:6f:48:92:51: 8c:da:9d:bc:32:2b:fb:83:9e:d0:cd:3a:eb:ed:1d: 29:17:f9:1c:33:e2:03:80:8f:91:0d:2a:64:b1:e0: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4C:DC:87:B4:08:40:8A:E6:FB:8E:CC:7C:72:C5:EF:CE:70:25:82 X509v3 Authority Key Identifier: keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f3:f5:fc:af:12:d1:02:b3:de:3e:96:bd:91:b9:e2:3e:98: 3f:ec:dd:a3:dc:fa:31:a1:cd:6d:77:b2:36:3b:f9:4e:95:ea: b6:10:ec:a8:22:75:0c:7f:dd:8f:48:99:84:70:40:6d:c2:9f: f1:71:c4:ed:6f:01:f3:c8:ff:ee:60:1f:6e:eb:c9:0e:13:f7: 2b:4a:51:31:e8:c0:23:bf:d6:75:84:27:8f:b6:bb:18:24:2b: e6:4c:e3:f0:44:08:44:f5:ea:a4:d1:05:40:ef:ff:6a:0e:1b: 21:4e:8b:a3:f2:94:12:f4:f1:fb:97:12:f0:4a:df:e5:d8:96: c3:4f:a9:2d:02:ac:fd:94:ce:14:07:c2:c3:d3:0d:d1:b3:ca: f5:17:b1:de:5b:f8:fa:de:f4:aa:ed:76:2f:bd:f7:8c:8b:81: 40:5c:bd:fb:f2:33:2c:80:00:a9:1d:80:21:5b:ac:bf:91:38: 4a:88:fc:9e:02:10:41:8d:1d:17:16:d0:85:ba:ad:03:d3:16: 06:3f:f6:40:d5:bf:52:11:15:d8:67:41:22:7c:da:35:cd:06: 49:e0:75:7d:d2:b3:70:b6:32:51:2e:52:a5:b5:54:b3:91:5a: 9d:f1:2d:e8:c4:00:73:f4:d1:09:c6:61:74:68:ed:0f:68:cf: d3:69:f4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofrAdspYSuaEgYfTDU1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzQ4NDlhOTcwYTkzMDRkZjQ1ZjhlMjhiNmViODdmZjA5 ZTBiZWEwHhcNMjYwMjA5MDkwMTAwWhcNMjYwMjEwMDkwMTAwWjAzMTEwLwYDVQQD Eyg5NDRjZGM4N2I0MDg0MDhhZTZmYjhlY2M3YzcyYzVlZmNlNzAyNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDdVHI+ags/GV85w9mFDZM5AwneQ EEh51sEfUePZI9ye1oE2zpr7u7z9l4Xp+NkwzseycUn4pacJve3dXF7avD8T4zI2 XeoyAXslVwc0sUcnqkET/aNdg+5Boh0y3oCRh+Bv29pulgqUnZkKbGeE6iFAV7xU XgIMzZ/XndLZ9uz8C7VTBCyF4nM89IQoYGIM5i6IuDPSu0r/svGPWu1FPthLQyMc Gh2HaOMiPB80Bdrfs1dhDwPZaLpHOvXkmSTgU/iIF9M0lzljmpFy3XrItiaF+kFM Dm79aHae8m9IklGM2p28Miv7g57QzTrr7R0pF/kcM+IDgI+RDSpkseBwhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRM3Ie0CECK5vuOzHxyxe/OcCWCMB8GA1UdIwQY MBaAFIx0hJqXCpME30X44otuuH/wngvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjkt MjlmZmQwZWY1NjBhLzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjktMjlmZmQwZWY1NjBh LzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/P1/K8S 0QKz3j6WvZG54j6YP+zdo9z6MaHNbXeyNjv5TpXqthDsqCJ1DH/dj0iZhHBAbcKf 8XHE7W8B88j/7mAfbuvJDhP3K0pRMejAI7/WdYQnj7a7GCQr5kzj8EQIRPXqpNEF QO//ag4bIU6Lo/KUEvTx+5cS8Erf5diWw0+pLQKs/ZTOFAfCw9MN0bPK9Rex3lv4 +t70qu12L733jIuBQFy9+/IzLIAAqR2AIVusv5E4Soj8ngIQQY0dFxbQhbqtA9MW Bj/2QNW/UhEV2GdBInzaNc0GSeB1fdKzcLYyUS5SpbVUs5FanfEt6MQAc/TRCcZh dGjtD2jP02n0cg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:27 2026 by rpki-client