This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json) Hash identifier: uLAAcb/CLRRIgWBowdC/K89YtVVyBVZA94MsvQZAfF4= Subject key identifier: 9B:84:4C:6F:10:E3:FA:B5:EE:AB:30:FC:7E:5C:30:C5:AB:DB:2C:4D Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e Certificate serial: 019C42EB796D0256CFFE5ECA340FC598C59B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 15:00:54 +0000 Manifest this update: Mon 09 Feb 2026 15:00:54 +0000 Manifest next update: Tue 10 Feb 2026 15:00:54 +0000 Files and hashes: 1: OM4KLQmzyd_Wm52APVHhgRe4ToE.roa (hash: yWOF8Zx5ObpIqx5RDQmGc/nckpLK3IVHrsfnnr9/bl4=) 2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: tVdYcCXAUI4HFzKhnt7zvYanAONqfFhaWKcNcp4nn+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:79:6d:02:56:cf:fe:5e:ca:34:0f:c5:98:c5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e Validity Not Before: Feb 9 15:00:54 2026 GMT Not After : Feb 10 15:00:54 2026 GMT Subject: CN=9b844c6f10e3fab5eeab30fc7e5c30c5abdb2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:98:dc:33:a4:a3:06:0f:1f:a2:d7:a4:07: 2d:c3:99:04:ac:d6:d0:7f:f6:60:9a:61:12:0c:a4: eb:9b:06:f8:2d:d5:c6:06:5e:22:74:df:f2:b9:82: 2b:6e:8d:d0:52:11:37:83:c7:ac:82:e7:b6:18:4e: 6d:83:ac:69:c3:b0:d7:61:a4:db:ff:92:c9:66:8c: 10:7e:b3:ec:1e:a3:2c:15:21:f2:13:a2:37:d5:48: ee:68:56:7d:85:13:1f:29:89:d5:b3:e7:cb:b3:a2: ef:7e:42:c0:77:42:54:d0:82:af:0b:a3:e3:ac:b2: 21:b0:bc:28:71:58:8a:60:8f:83:b9:07:03:55:e1: a0:43:5f:fe:4c:c1:8a:e1:a8:35:c2:aa:b2:5e:6f: 84:87:86:64:ed:bf:91:a6:5e:33:56:bb:77:df:32: f5:db:17:0e:fc:f7:5d:17:36:6f:0a:ba:af:3f:36: 78:40:c6:15:d1:bc:2a:6c:1a:4c:4e:72:7e:4b:3f: 6e:de:14:d5:72:41:e5:21:f0:76:c5:6a:dd:08:98: 69:8f:d6:87:23:47:ad:e7:15:75:57:14:3f:28:23: 05:ff:29:f2:d7:5d:d8:d6:4f:43:14:41:2e:7e:ea: 9e:ea:e0:cf:73:e4:4f:ec:90:d0:89:4a:07:55:4d: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:84:4C:6F:10:E3:FA:B5:EE:AB:30:FC:7E:5C:30:C5:AB:DB:2C:4D X509v3 Authority Key Identifier: keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:09:0e:dd:74:9b:b9:c3:98:0b:13:24:ec:97:18:77:46:44: 5d:d2:78:b1:de:36:f5:06:86:e7:ee:9d:95:c6:5d:0a:3b:f7: f5:e2:b3:70:42:3f:82:b0:5b:87:a1:c1:7f:f7:f8:1d:fa:f0: 49:a8:2f:03:57:26:50:a8:60:4c:21:e0:2a:44:c4:e1:f8:60: 81:39:73:a5:0d:61:ff:81:e1:4e:e7:ba:87:2a:fc:8d:8a:a3: a4:24:04:4a:36:98:a4:78:b6:15:4f:53:11:72:aa:42:71:71: e5:2b:07:0c:4a:75:6d:e7:12:47:cd:b9:c8:83:d0:22:59:52: 82:9b:6b:64:3d:e3:e9:fd:62:ab:b6:0f:25:ef:b3:4e:66:75: a2:83:21:56:8f:0c:9f:20:af:4f:5d:7b:61:c0:0e:40:32:67: 18:65:d6:c4:8e:f9:d9:56:36:ad:21:28:dd:de:ca:f0:02:02: 72:da:93:dd:5d:ef:00:53:a5:4a:15:8b:4e:0e:ed:5e:39:f5: a3:fe:9a:6b:42:f1:db:10:16:2a:7c:84:91:78:ce:64:3e:0d: ef:bd:04:c2:d7:64:fc:c6:e8:42:65:b4:f2:7a:0e:f0:dc:a7: 77:ba:9f:b3:9b:f9:ed:85:a4:c1:a6:60:9c:29:fa:11:9f:92: ab:53:f9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63ltAlbP/l7KNA/FmMWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjQwYzFiOTBmN2YwMjAwNTNmYTA5NTMzMGZmY2ZhZGVm NTM5OWUwHhcNMjYwMjA5MTUwMDU0WhcNMjYwMjEwMTUwMDU0WjAzMTEwLwYDVQQD Eyg5Yjg0NGM2ZjEwZTNmYWI1ZWVhYjMwZmM3ZTVjMzBjNWFiZGIyYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJmY3DOkowYPH6LXpActw5kErNbQ f/ZgmmESDKTrmwb4LdXGBl4idN/yuYIrbo3QUhE3g8esgue2GE5tg6xpw7DXYaTb /5LJZowQfrPsHqMsFSHyE6I31UjuaFZ9hRMfKYnVs+fLs6LvfkLAd0JU0IKvC6Pj rLIhsLwocViKYI+DuQcDVeGgQ1/+TMGK4ag1wqqyXm+Eh4Zk7b+Rpl4zVrt33zL1 2xcO/PddFzZvCrqvPzZ4QMYV0bwqbBpMTnJ+Sz9u3hTVckHlIfB2xWrdCJhpj9aH I0et5xV1VxQ/KCMF/yny113Y1k9DFEEufuqe6uDPc+RP7JDQiUoHVU2lgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuETG8Q4/q17qsw/H5cMMWr2yxNMB8GA1UdIwQY MBaAFIwkDBuQ9/AgBT+glTMP/Pre9TmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMt ODdlMzYxODRjMGI1LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMtODdlMzYxODRjMGI1 LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAkO3XSb ucOYCxMk7JcYd0ZEXdJ4sd429QaG5+6dlcZdCjv39eKzcEI/grBbh6HBf/f4Hfrw SagvA1cmUKhgTCHgKkTE4fhggTlzpQ1h/4HhTue6hyr8jYqjpCQESjaYpHi2FU9T EXKqQnFx5SsHDEp1becSR825yIPQIllSgptrZD3j6f1iq7YPJe+zTmZ1ooMhVo8M nyCvT117YcAOQDJnGGXWxI752VY2rSEo3d7K8AICctqT3V3vAFOlShWLTg7tXjn1 o/6aa0Lx2xAWKnyEkXjOZD4N770Ewtdk/MboQmW08noO8Nynd7qfs5v57YWkwaZg nCn6EZ+Sq1P5Sg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:48 2026 by rpki-client