This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json) Hash identifier: rBAk2Wx4fj3Nl07pxVsKvtIzTrhdzeA/A5qWlfvS+XU= Subject key identifier: 5A:69:8E:01:A5:E7:02:E0:22:78:1C:7B:F4:39:4B:17:7E:72:B0:49 Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Certificate serial: 019C43228C602EE35DDFD7C50F16D4A12943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft Manifest number: 1768 Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: axxL/5zbrTy2PKOsi4NaG0UCmjLj/SEoC5K2avPxfOo=) 2: cuQOSndsrOHE68u2RGDR9Wvb2PU.roa (hash: oESYbd0eiPwK4UeuaCOTGhvgRMQavcY75LLUi+iO6dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8c:60:2e:e3:5d:df:d7:c5:0f:16:d4:a1:29:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=5a698e01a5e702e022781c7bf4394b177e72b049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:d1:b6:cd:04:d0:65:0d:56:28:4c:89:8b: db:e3:49:85:e4:38:41:3d:f2:4b:81:85:85:7e:bc: 32:b5:65:3e:ae:58:c6:5a:8d:0a:f2:c1:89:ee:6c: 92:14:76:cc:da:e7:b3:29:06:9a:f3:f5:74:77:03: ec:0b:7b:64:10:37:91:e4:54:8d:b5:56:e2:57:d2: a9:ba:95:96:3f:bc:07:f9:f5:70:51:55:a3:8f:2a: 72:00:91:b9:28:a5:f5:b2:32:a2:bf:4d:dc:66:2b: 36:15:e3:9b:bd:60:89:1c:bd:85:29:b3:49:71:0d: df:0a:13:d1:74:9e:91:c3:d4:fa:33:e7:8b:e0:81: c8:a4:e9:50:3b:05:2d:be:c5:07:87:4b:04:d8:78: 25:a9:e2:bd:e5:9d:01:99:13:f5:d8:ea:57:ab:b9: d3:ba:5b:ee:e5:d3:f5:f8:19:50:9b:ad:f1:54:98: 9b:7f:68:89:36:96:ff:c7:64:66:46:74:9a:f1:92: 20:75:8e:20:48:1e:7d:6a:8c:90:d2:c2:0c:51:c3: 9e:c8:7c:c3:a3:b9:9d:6c:24:a7:ec:68:e3:a0:8e: f3:12:33:87:91:d0:ac:a0:70:de:ea:38:14:74:18: ea:17:36:b8:c3:e4:9f:4a:13:1d:8f:d7:a2:27:77: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:69:8E:01:A5:E7:02:E0:22:78:1C:7B:F4:39:4B:17:7E:72:B0:49 X509v3 Authority Key Identifier: keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b8:e2:81:e2:76:60:51:0d:d3:8c:50:da:82:0d:69:88:4b: 31:58:a2:5e:a1:31:29:15:df:b9:17:0e:97:45:9a:e7:74:96: 39:49:45:4c:52:07:2b:d1:7f:de:0f:47:7b:d7:28:80:51:2e: e1:1e:89:04:af:65:92:21:92:3b:e4:67:1c:79:50:06:fa:f6: 81:40:1d:e0:79:74:9e:a2:96:e8:97:d1:17:b3:1d:d5:b3:02: f4:b4:94:a8:05:f4:5c:fb:71:d6:99:02:89:4b:6a:4f:8c:6d: c9:8d:08:d1:6d:e2:04:83:db:a9:8f:a6:bb:c6:11:e4:c1:ac: 0c:8a:83:f0:f4:19:a3:6e:86:6d:29:a5:37:99:aa:31:77:e7: cf:d0:95:01:a2:70:a1:09:2e:27:77:3b:17:9f:79:b9:d3:14: ef:49:5e:56:05:55:28:70:35:83:bd:b0:fa:6c:0b:0b:a3:f6: 9e:a1:2a:a4:80:45:90:0c:2d:4a:27:be:8f:90:8c:62:60:11: 43:ff:4a:04:e3:b5:85:01:2b:d1:99:8b:47:28:07:04:ce:ef: f7:92:2f:dc:81:9c:46:af:d8:50:11:f4:e3:7b:2e:93:e9:92: b5:21:26:cd:f9:4d:e9:20:71:02:71:82:3c:a9:5d:3a:4d:fe: 54:35:4f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoxgLuNd39fFDxbUoSlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4 NTk4YjYwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD Eyg1YTY5OGUwMWE1ZTcwMmUwMjI3ODFjN2JmNDM5NGIxNzdlNzJiMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/Rts0E0GUNVihMiYvb40mF5DhB PfJLgYWFfrwytWU+rljGWo0K8sGJ7mySFHbM2uezKQaa8/V0dwPsC3tkEDeR5FSN tVbiV9KpupWWP7wH+fVwUVWjjypyAJG5KKX1sjKiv03cZis2FeObvWCJHL2FKbNJ cQ3fChPRdJ6Rw9T6M+eL4IHIpOlQOwUtvsUHh0sE2HglqeK95Z0BmRP12OpXq7nT ulvu5dP1+BlQm63xVJibf2iJNpb/x2RmRnSa8ZIgdY4gSB59aoyQ0sIMUcOeyHzD o7mdbCSn7GjjoI7zEjOHkdCsoHDe6jgUdBjqFza4w+SfShMdj9eiJ3f2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFppjgGl5wLgIngce/Q5Sxd+crBJMB8GA1UdIwQY MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrjigeJ2 YFEN04xQ2oINaYhLMViiXqExKRXfuRcOl0Wa53SWOUlFTFIHK9F/3g9He9cogFEu 4R6JBK9lkiGSO+RnHHlQBvr2gUAd4Hl0nqKW6JfRF7Md1bMC9LSUqAX0XPtx1pkC iUtqT4xtyY0I0W3iBIPbqY+mu8YR5MGsDIqD8PQZo26GbSmlN5mqMXfnz9CVAaJw oQkuJ3c7F595udMU70leVgVVKHA1g72w+mwLC6P2nqEqpIBFkAwtSie+j5CMYmAR Q/9KBOO1hQEr0ZmLRygHBM7v95Iv3IGcRq/YUBH043suk+mStSEmzflN6SBxAnGC PKldOk3+VDVPKA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:43 2026 by rpki-client