This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json) Hash identifier: wF3zXrAQ0jZCefM+uBrUgyAaREdCwbkaRnDUoHvFhvI= Subject key identifier: DB:49:BA:04:DB:77:AD:BD:13:A0:BC:99:E8:BB:60:9B:E6:44:E3:7D Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Certificate serial: 019C42B47968DB4FDEC14188786BE8FC1234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft Manifest number: 0397 Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=) 2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: H5+dudG+F9vhlnGWPCTHlNZuHT758+DDVJPjS1NJg1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:79:68:db:4f:de:c1:41:88:78:6b:e8:fc:12:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=db49ba04db77adbd13a0bc99e8bb609be644e37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:cf:29:2e:54:ea:b2:dd:47:5f:ef:86:90: d8:8e:5a:ca:1b:e4:21:23:7f:87:70:7d:8d:ef:fb: 4f:1e:20:fc:b8:c1:2e:56:05:51:23:a7:0d:29:7f: da:f1:d8:bd:3b:5a:93:8c:e9:92:8a:7f:9a:47:b0: 4d:59:14:36:e3:da:6d:b1:37:bd:33:bc:71:24:86: 50:52:5b:b7:1b:79:77:5a:ba:f2:1e:21:ae:14:d3: ad:2c:f9:5e:71:ca:e7:da:f8:46:a6:eb:78:b9:e4: c4:33:4a:34:cb:44:65:a5:2a:1d:05:89:58:8c:5e: 55:97:8a:1f:e2:f1:87:f3:b1:02:55:7e:09:c1:64: 14:e6:45:74:c3:9e:3c:28:40:53:41:a1:48:53:5a: b6:8c:92:45:34:23:ca:7b:19:07:43:54:97:67:d7: 86:62:be:c2:14:f9:56:2e:79:98:ad:d7:67:d8:f8: 43:ac:da:e4:51:a3:f4:73:73:9d:76:51:66:bb:99: fb:e3:91:05:02:8a:45:df:64:97:1b:f6:3e:08:74: 02:0c:b3:bb:98:58:cf:6a:1e:2d:30:7d:6f:29:9c: 64:30:4b:98:c0:fe:d7:75:be:2f:56:65:da:f4:46: eb:0f:a3:8f:7b:32:87:e3:30:63:39:4a:ae:af:07: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:BA:04:DB:77:AD:BD:13:A0:BC:99:E8:BB:60:9B:E6:44:E3:7D X509v3 Authority Key Identifier: keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cf:a7:d4:88:30:6d:91:f4:f7:3c:7c:e5:be:27:88:2f:08: 72:ad:c6:0e:df:77:0f:d9:f2:83:e1:39:6b:50:c7:18:c2:01: 14:c1:14:b5:1a:c3:66:97:8b:25:90:d9:c2:60:c3:30:58:42: f8:5c:78:5c:41:93:7a:01:99:e3:04:5a:43:24:33:50:9e:7f: 20:a2:ca:fc:a4:f2:0e:3d:8a:01:44:66:67:a9:a2:2b:2f:4f: 4c:30:b3:5e:12:fe:85:5a:64:b1:b9:8e:a9:45:a3:98:35:4b: 84:5d:85:0e:67:e5:88:28:e3:8c:3c:63:7a:c4:ad:45:a8:92: 6c:0a:37:30:2c:53:d9:1c:ce:7c:7e:4e:c7:fc:05:5b:40:f3: cc:42:27:83:89:68:25:35:19:5f:90:8c:a2:4e:0c:94:96:2e: 49:5c:fc:b6:84:33:ac:7b:f4:40:b2:ab:a0:ae:85:c6:92:d3: 5c:c9:4a:80:a8:1b:ec:86:73:bc:ba:a2:69:1d:b6:21:67:5d: 40:aa:07:9c:db:4f:1a:5b:2e:bc:ca:65:e8:9d:7a:a1:30:e1: 46:f7:94:25:8b:45:76:56:b6:3b:1f:b4:85:31:d8:6d:7d:e1: 53:f0:73:2c:e7:b4:4f:ae:24:39:b4:b9:67:6f:cb:28:af:03: 63:3e:ba:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHlo20/ewUGIeGvo/BI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3 Y2ViNDYwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD EyhkYjQ5YmEwNGRiNzdhZGJkMTNhMGJjOTllOGJiNjA5YmU2NDRlMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHfPKS5U6rLdR1/vhpDYjlrKG+Qh I3+HcH2N7/tPHiD8uMEuVgVRI6cNKX/a8di9O1qTjOmSin+aR7BNWRQ249ptsTe9 M7xxJIZQUlu3G3l3WrryHiGuFNOtLPleccrn2vhGput4ueTEM0o0y0RlpSodBYlY jF5Vl4of4vGH87ECVX4JwWQU5kV0w548KEBTQaFIU1q2jJJFNCPKexkHQ1SXZ9eG Yr7CFPlWLnmYrddn2PhDrNrkUaP0c3OddlFmu5n745EFAopF32SXG/Y+CHQCDLO7 mFjPah4tMH1vKZxkMEuYwP7Xdb4vVmXa9EbrD6OPezKH4zBjOUqurwf8hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtJugTbd629E6C8mei7YJvmRON9MB8GA1UdIwQY MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0 LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASc+n1Igw bZH09zx85b4niC8Icq3GDt93D9nyg+E5a1DHGMIBFMEUtRrDZpeLJZDZwmDDMFhC +Fx4XEGTegGZ4wRaQyQzUJ5/IKLK/KTyDj2KAURmZ6miKy9PTDCzXhL+hVpksbmO qUWjmDVLhF2FDmfliCjjjDxjesStRaiSbAo3MCxT2RzOfH5Ox/wFW0DzzEIng4lo JTUZX5CMok4MlJYuSVz8toQzrHv0QLKroK6FxpLTXMlKgKgb7IZzvLqiaR22IWdd QKoHnNtPGlsuvMpl6J16oTDhRveUJYtFdla2Ox+0hTHYbX3hU/BzLOe0T64kObS5 Z2/LKK8DYz66eA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:20 2026 by rpki-client