This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json) Hash identifier: y0bKDkF3ATyBdOqswZBeFElkutpCDerQJDFPHEafjUk= Subject key identifier: B6:BB:DF:BF:66:1E:02:A6:0C:B8:C3:C8:C0:38:F4:D1:E2:BC:08:03 Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Certificate serial: 019C44D9940F9577C73FDBE87B6D8A2E1834 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft Manifest number: 0D03 Signing time: Tue 10 Feb 2026 00:00:35 +0000 Manifest this update: Tue 10 Feb 2026 00:00:35 +0000 Manifest next update: Wed 11 Feb 2026 00:00:35 +0000 Files and hashes: 1: 6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa (hash: yZGWLtJQG1fe7kFdqMH4OaCwstlt/mm4AHRs9oE0umw=) 2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: rYMd6aYh5i1PGbf0KhTcWPvSBewUSddMNQShqPs4puk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:94:0f:95:77:c7:3f:db:e8:7b:6d:8a:2e:18:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Validity Not Before: Feb 10 00:00:35 2026 GMT Not After : Feb 11 00:00:35 2026 GMT Subject: CN=b6bbdfbf661e02a60cb8c3c8c038f4d1e2bc0803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:20:21:fa:2e:7d:b4:9a:e2:bf:4f:4c:dc: f3:0f:e4:b6:46:fb:c2:e5:e8:77:f0:ab:84:bf:4b: 92:4d:dd:5c:c5:ad:0e:01:cc:96:db:48:2d:03:79: 92:d6:69:b7:1a:0a:14:48:ba:91:f9:9a:01:bf:18: 13:38:d4:7a:f2:cf:69:0c:1f:98:b9:25:18:17:13: a8:d8:c1:12:c5:28:e7:39:31:81:56:cb:16:35:24: c9:6c:52:4b:9f:51:29:6e:ff:e8:29:e5:c8:f8:4c: 72:34:88:21:30:2a:8a:a7:58:42:f2:2c:4f:2d:86: 92:87:a2:2e:0f:76:b3:55:84:97:5e:e9:69:25:76: 30:51:c9:77:7a:4e:fc:f5:94:eb:33:b0:c2:6c:6b: 3b:a2:e8:00:6c:bf:01:40:ae:8c:a3:39:70:03:ea: 63:e5:ef:46:26:97:0f:d5:6b:fc:76:b6:97:2f:60: e2:a5:99:1b:12:8b:14:05:3e:96:09:5d:a1:ab:f6: 2e:cf:ba:53:10:60:d9:9c:fa:2b:0d:5d:86:50:48: 4d:d1:1d:db:87:7b:e7:28:d0:cc:b9:f6:d4:51:9a: e0:06:f0:7f:38:32:f4:b1:ca:36:90:31:74:c8:9d: 5f:dc:eb:2d:f4:33:8d:2a:ae:5b:5e:dd:1a:05:6c: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BB:DF:BF:66:1E:02:A6:0C:B8:C3:C8:C0:38:F4:D1:E2:BC:08:03 X509v3 Authority Key Identifier: keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1b:94:32:34:25:aa:1f:63:dd:e8:76:b1:a8:a3:81:5b:3e: 6b:76:e7:a4:27:03:f0:83:aa:b3:b8:88:49:3d:53:9e:67:6b: a4:06:60:1a:d6:c1:ed:a9:24:39:46:b8:ff:f2:97:9b:76:48: 3b:8b:a3:d5:df:9b:ae:40:4f:1f:1a:02:73:2b:be:31:25:c9: e4:23:ca:27:1b:d9:2e:c9:d4:11:a2:bc:28:e4:bc:71:3a:89: b1:ac:75:6e:af:3e:82:00:6a:a3:39:2c:60:07:23:74:f6:ff: 5a:7f:c9:d4:f4:c4:16:ba:14:01:71:94:c9:5b:0e:7c:f2:f4: 63:9c:65:e4:ea:f6:f8:3a:d0:a3:8a:b5:11:07:b1:22:da:4e: 55:fa:46:7d:10:17:ad:41:4c:e9:8b:f5:f9:e6:d0:97:6b:4d: b0:b0:c4:45:17:8c:07:e7:4d:cf:54:40:48:e5:01:d3:32:57: ad:57:8d:31:21:76:b2:70:d7:84:0d:64:40:ce:31:72:a3:ae: dc:77:ce:6f:a9:27:4f:af:fa:2d:8e:2a:a6:2c:b5:1f:7e:f7: 20:25:b2:6a:dc:1a:93:f7:27:07:7a:9b:78:80:aa:ef:74:48: 85:c2:e1:c6:17:f6:f2:f1:d3:11:cd:b4:16:db:ed:4f:ce:a2: e0:eb:bd:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2ZQPlXfHP9voe22KLhg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlM2FkYjU4YzEwOGI4YmIxM2U0M2MxNWVlYTNjNzg5OWI2 NGEzYWEwHhcNMjYwMjEwMDAwMDM1WhcNMjYwMjExMDAwMDM1WjAzMTEwLwYDVQQD EyhiNmJiZGZiZjY2MWUwMmE2MGNiOGMzYzhjMDM4ZjRkMWUyYmMwODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvwgIfoufbSa4r9PTNzzD+S2RvvC 5eh38KuEv0uSTd1cxa0OAcyW20gtA3mS1mm3GgoUSLqR+ZoBvxgTONR68s9pDB+Y uSUYFxOo2MESxSjnOTGBVssWNSTJbFJLn1Epbv/oKeXI+ExyNIghMCqKp1hC8ixP LYaSh6IuD3azVYSXXulpJXYwUcl3ek789ZTrM7DCbGs7ougAbL8BQK6MozlwA+pj 5e9GJpcP1Wv8draXL2DipZkbEosUBT6WCV2hq/Yuz7pTEGDZnPorDV2GUEhN0R3b h3vnKNDMufbUUZrgBvB/ODL0sco2kDF0yJ1f3Ost9DONKq5bXt0aBWwzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa7379mHgKmDLjDyMA49NHivAgDMB8GA1UdIwQY MBaAFK4621jBCLi7E+Q8Fe6jx4mbZKOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMt OGZiYjUxMjhhMmM5LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMtOGZiYjUxMjhhMmM5 LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBuUMjQl qh9j3eh2saijgVs+a3bnpCcD8IOqs7iIST1TnmdrpAZgGtbB7akkOUa4//KXm3ZI O4uj1d+brkBPHxoCcyu+MSXJ5CPKJxvZLsnUEaK8KOS8cTqJsax1bq8+ggBqozks YAcjdPb/Wn/J1PTEFroUAXGUyVsOfPL0Y5xl5Or2+DrQo4q1EQexItpOVfpGfRAX rUFM6Yv1+ebQl2tNsLDERReMB+dNz1RASOUB0zJXrVeNMSF2snDXhA1kQM4xcqOu 3HfOb6knT6/6LY4qpiy1H373ICWyatwak/cnB3qbeICq73RIhcLhxhf28vHTEc20 FtvtT86i4Ou9dA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:53 2026 by rpki-client