This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json) Hash identifier: DVCI7qMsBbQLSYNfsamyorY6eNO88EePNM85+fsJ3Ww= Subject key identifier: 36:CA:E3:23:7C:4B:C8:F0:BB:52:B3:6A:93:37:D9:00:5C:A7:82:70 Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Certificate serial: 019C43FE68375EA16442398A8848E6D21103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft Manifest number: 0D41 Signing time: Mon 09 Feb 2026 20:01:11 +0000 Manifest this update: Mon 09 Feb 2026 20:01:11 +0000 Manifest next update: Tue 10 Feb 2026 20:01:11 +0000 Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=) 2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: aG/0vLiC0KpesyM/dtwjZWekbhf/UfjVKGEUI+XkY4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:68:37:5e:a1:64:42:39:8a:88:48:e6:d2:11:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Validity Not Before: Feb 9 20:01:11 2026 GMT Not After : Feb 10 20:01:11 2026 GMT Subject: CN=36cae3237c4bc8f0bb52b36a9337d9005ca78270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:65:d4:7c:f0:6f:da:77:d4:96:0a:21:03: d9:99:af:ea:9a:eb:99:96:c7:35:5b:04:78:84:c7: f1:6c:c1:a1:b6:0e:7f:ee:cb:bc:62:4b:9d:6f:e9: 05:2c:61:f8:42:96:de:fd:e9:67:e3:53:ec:37:d0: 36:90:73:b2:bb:49:d4:9b:4c:52:f8:6c:8c:ca:d9: 70:70:33:f6:56:fe:9c:94:4a:8a:3e:97:6f:28:d6: 97:b2:08:6b:5a:94:73:d9:73:09:70:3f:d7:b9:f4: 80:dd:74:02:ef:7e:a1:81:15:03:6f:70:b1:84:d4: e5:43:70:c1:ec:11:06:18:a7:a9:87:18:aa:49:6c: 52:b4:11:d6:5c:96:0f:8f:eb:c4:40:34:53:fd:6b: 1a:59:66:be:a4:89:e4:00:4f:6b:16:2b:a5:4b:07: ff:eb:26:21:7a:2b:02:78:91:6a:24:89:d7:32:f0: 19:74:f8:c6:ea:a1:fa:b5:d6:45:a6:31:0c:1e:97: d9:5a:a1:a9:ff:b2:76:c3:bf:2b:e5:14:20:e6:0c: aa:24:b5:63:8a:e9:2b:9d:11:f7:0a:1b:0f:1a:71: bb:b4:aa:4d:23:7d:b9:8a:72:f0:92:0e:dc:c7:47: 7f:ab:5d:de:8f:54:71:cc:08:12:b3:c8:70:b2:ea: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CA:E3:23:7C:4B:C8:F0:BB:52:B3:6A:93:37:D9:00:5C:A7:82:70 X509v3 Authority Key Identifier: keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7e:52:08:33:46:7e:2f:d0:63:a7:61:95:3a:15:63:83:3a: 5b:51:bf:87:9e:ae:c1:4b:5e:29:1c:bc:e7:73:7b:00:dc:bc: 3e:fb:68:76:47:6e:f7:d8:d1:85:a5:6d:f6:1a:d8:6d:76:20: b9:b6:df:0b:c8:11:14:3b:44:4a:f0:d5:ce:59:29:c8:5f:74: 65:77:02:b6:7f:65:fc:80:16:a2:0e:ad:6f:65:26:0f:37:b2: de:6e:37:70:dd:87:4e:b5:ff:14:ab:c8:e6:31:b7:76:40:37: 53:91:1b:85:28:6b:d7:fb:53:4f:94:7c:4b:be:0c:bb:59:73: a2:e8:1e:c4:61:bb:e0:d5:30:b9:bc:99:97:68:6c:d1:f6:50: 6a:d3:43:45:06:32:ef:c5:d4:1b:fc:4a:b2:31:b0:5b:dd:4c: 99:38:5d:eb:dc:08:51:96:12:e2:77:c3:80:8f:ae:8d:91:af: 53:9d:d8:75:5c:aa:13:d6:e2:66:bf:ad:1b:c5:71:b2:c0:cf: 86:2d:9b:51:a7:e7:40:1e:5e:91:2c:fe:0b:83:a2:f7:f8:9f: 54:97:5d:2e:c1:07:49:97:69:a9:99:a7:01:90:28:80:e8:db: e5:91:20:e8:97:9f:34:98:b3:52:9b:b0:3c:55:0c:57:b4:8c: 30:7e:ea:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mg3XqFkQjmKiEjm0hEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm NmE1Y2YwHhcNMjYwMjA5MjAwMTExWhcNMjYwMjEwMjAwMTExWjAzMTEwLwYDVQQD EygzNmNhZTMyMzdjNGJjOGYwYmI1MmIzNmE5MzM3ZDkwMDVjYTc4MjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFRl1Hzwb9p31JYKIQPZma/qmuuZ lsc1WwR4hMfxbMGhtg5/7su8Ykudb+kFLGH4Qpbe/eln41PsN9A2kHOyu0nUm0xS +GyMytlwcDP2Vv6clEqKPpdvKNaXsghrWpRz2XMJcD/XufSA3XQC736hgRUDb3Cx hNTlQ3DB7BEGGKephxiqSWxStBHWXJYPj+vEQDRT/WsaWWa+pInkAE9rFiulSwf/ 6yYheisCeJFqJInXMvAZdPjG6qH6tdZFpjEMHpfZWqGp/7J2w78r5RQg5gyqJLVj iukrnRH3ChsPGnG7tKpNI325inLwkg7cx0d/q13ej1RxzAgSs8hwsurRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbK4yN8S8jwu1KzapM32QBcp4JwMB8GA1UdIwQY MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu35SCDNG fi/QY6dhlToVY4M6W1G/h56uwUteKRy853N7ANy8Pvtodkdu99jRhaVt9hrYbXYg ubbfC8gRFDtESvDVzlkpyF90ZXcCtn9l/IAWog6tb2UmDzey3m43cN2HTrX/FKvI 5jG3dkA3U5EbhShr1/tTT5R8S74Mu1lzougexGG74NUwubyZl2hs0fZQatNDRQYy 78XUG/xKsjGwW91MmThd69wIUZYS4nfDgI+ujZGvU53YdVyqE9biZr+tG8VxssDP hi2bUafnQB5ekSz+C4Oi9/ifVJddLsEHSZdpqZmnAZAogOjb5ZEg6JefNJizUpuw PFUMV7SMMH7qPQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:29 2026 by rpki-client