This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json) Hash identifier: ZE4PT56AuXr67eE7+kzNQXG31Tu+7IRx2SurDs2NusU= Subject key identifier: 41:59:AB:24:0A:8E:66:78:37:E9:FF:E0:E0:A3:92:7E:97:A4:CD:F5 Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30 Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830 Certificate serial: 019C43C70E3EC549B87CE92EE7C8DA0DCE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 19:00:44 +0000 Manifest this update: Mon 09 Feb 2026 19:00:44 +0000 Manifest next update: Tue 10 Feb 2026 19:00:44 +0000 Files and hashes: 1: K8HecFRRKEjS3qKmvuFAnvz_-uc.roa (hash: vesVSy2mT3SX5WV3LlmG2YI3Cv5I/bjZoprTrOQYHHA=) 2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: Yu68PGIK2LsB370Qo783iHwxrDn+A4R8dN81Ys8B0Co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:0e:3e:c5:49:b8:7c:e9:2e:e7:c8:da:0d:ce:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830 Validity Not Before: Feb 9 19:00:44 2026 GMT Not After : Feb 10 19:00:44 2026 GMT Subject: CN=4159ab240a8e667837e9ffe0e0a3927e97a4cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:67:5e:d7:6f:7e:a7:37:aa:bb:ee:76:3f: fb:ec:e8:11:63:a5:ed:9c:0a:e8:ec:58:f3:81:9d: 33:88:5f:80:3d:3e:c7:2c:99:3b:ea:65:76:d8:6f: d8:83:e5:57:f9:63:5c:ce:4b:37:7f:66:1f:30:36: 66:14:3e:6c:ec:8f:1f:df:e7:5a:f9:c6:85:ea:0e: 5d:55:e4:e5:44:d2:b3:03:b6:7b:6f:17:d8:63:66: 91:87:ef:b7:94:21:ed:1e:3e:68:ad:6d:2f:37:d4: 13:e5:7c:98:d7:15:6d:1d:6d:05:36:8d:10:2a:82: a7:fa:ae:a8:d5:41:18:57:57:dc:33:42:3d:cb:8b: fd:c6:0a:1f:fc:cf:4a:83:b5:f2:92:c3:a7:2b:cd: fa:f7:c5:95:2f:53:7a:a7:76:44:b2:b6:b6:02:e6: 8a:b2:e7:f2:66:9d:e0:5d:38:8a:d1:d6:ec:eb:3a: 91:94:2e:7c:2e:ec:c5:00:73:e2:79:89:64:62:e2: d6:b7:08:81:9f:f9:af:b2:fb:16:54:13:da:a7:64: 32:1e:5d:31:d3:a4:1f:7a:5d:a2:85:fb:5a:92:d2: db:eb:11:bf:82:4b:2a:82:a4:57:92:d8:d1:f3:4c: 62:b8:e7:8a:f6:d5:b2:c0:62:76:a4:d7:01:57:04: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:AB:24:0A:8E:66:78:37:E9:FF:E0:E0:A3:92:7E:97:A4:CD:F5 X509v3 Authority Key Identifier: keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:22:3f:c2:77:3a:b8:46:63:8d:32:0e:04:f6:be:01:c5:a6: be:07:c4:34:08:7d:82:ff:b0:1a:db:16:20:91:9c:e5:31:58: c6:3e:a2:a1:12:71:2f:e6:09:81:d9:1a:6d:5e:bc:27:60:42: c5:0c:c0:0d:a8:34:19:2b:4d:3a:4a:56:1e:8c:20:dc:e6:66: 71:cc:7b:1a:34:1c:fc:02:92:d7:fc:60:ed:95:7c:fa:e9:dc: 50:46:54:b3:3a:6b:db:9c:d5:4b:a9:f8:34:b4:b3:3c:62:d3: b0:ae:2e:91:57:8b:6c:54:60:2e:ee:66:27:4c:0b:c5:71:88: 09:d5:06:74:4f:27:29:97:c9:c2:f3:f8:ff:65:d7:0e:03:ae: 85:c8:19:55:1e:14:f6:f6:cb:be:7d:3e:7e:cf:55:68:29:3f: 7a:a4:c5:6d:ed:8c:10:07:16:4e:e7:9c:1e:ec:1f:68:56:40: ef:9e:f8:13:8c:b0:14:a2:e9:70:44:5f:18:8c:62:03:b0:e7: 58:31:2b:5a:c6:dd:bf:a7:8c:2d:e5:1f:60:bf:83:68:38:2b: 89:e0:c9:91:8b:9f:80:70:12:34:8e:91:67:a2:20:23:6c:a6: cd:be:80:b9:28:a0:49:71:5d:f3:f2:10:a6:a4:a1:26:cc:c0: 2c:37:d2:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxw4+xUm4fOku58jaDc5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYzI2NGI1YTY0OTRmODkwZmEzMTRmNjFmZDdkMjc1ODdl MzU4MzAwHhcNMjYwMjA5MTkwMDQ0WhcNMjYwMjEwMTkwMDQ0WjAzMTEwLwYDVQQD Eyg0MTU5YWIyNDBhOGU2Njc4MzdlOWZmZTBlMGEzOTI3ZTk3YTRjZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnBnXtdvfqc3qrvudj/77OgRY6Xt nAro7FjzgZ0ziF+APT7HLJk76mV22G/Yg+VX+WNczks3f2YfMDZmFD5s7I8f3+da +caF6g5dVeTlRNKzA7Z7bxfYY2aRh++3lCHtHj5orW0vN9QT5XyY1xVtHW0FNo0Q KoKn+q6o1UEYV1fcM0I9y4v9xgof/M9Kg7XyksOnK83698WVL1N6p3ZEsra2AuaK sufyZp3gXTiK0dbs6zqRlC58LuzFAHPieYlkYuLWtwiBn/mvsvsWVBPap2QyHl0x 06Qfel2ihftaktLb6xG/gksqgqRXktjR80xiuOeK9tWywGJ2pNcBVwQftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFZqyQKjmZ4N+n/4OCjkn6XpM31MB8GA1UdIwQY MBaAFLvCZLWmSU+JD6MU9h/X0nWH41gwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQt ZjA1NDZjZmFiMDYxLzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQtZjA1NDZjZmFiMDYx LzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCI/wnc6 uEZjjTIOBPa+AcWmvgfENAh9gv+wGtsWIJGc5TFYxj6ioRJxL+YJgdkabV68J2BC xQzADag0GStNOkpWHowg3OZmccx7GjQc/AKS1/xg7ZV8+uncUEZUszpr25zVS6n4 NLSzPGLTsK4ukVeLbFRgLu5mJ0wLxXGICdUGdE8nKZfJwvP4/2XXDgOuhcgZVR4U 9vbLvn0+fs9VaCk/eqTFbe2MEAcWTuecHuwfaFZA7574E4ywFKLpcERfGIxiA7Dn WDErWsbdv6eMLeUfYL+DaDgrieDJkYufgHASNI6RZ6IgI2ymzb6AuSigSXFd8/IQ pqShJszALDfS+A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:42 2026 by rpki-client