This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json) Hash identifier: CygsMBPQFrbwRPywclMLoh1WEWpc7wF5WjWuAdxb98A= Subject key identifier: 76:30:65:2C:A4:95:46:0D:0F:2B:8C:83:63:62:85:51:07:F9:4D:64 Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Certificate serial: 019C427E1B89CA1DCDA757311C4483A12479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:26 +0000 Manifest this update: Mon 09 Feb 2026 13:01:26 +0000 Manifest next update: Tue 10 Feb 2026 13:01:26 +0000 Files and hashes: 1: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: bSP3DL49ehwRj2n0uKq3MbeNOYr+DBZuf3xTfQLbGMU=) 2: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (hash: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:1b:89:ca:1d:cd:a7:57:31:1c:44:83:a1:24:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Validity Not Before: Feb 9 13:01:26 2026 GMT Not After : Feb 10 13:01:26 2026 GMT Subject: CN=7630652ca495460d0f2b8c836362855107f94d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:ae:91:c3:79:b4:d8:ed:87:bf:51:b7:f7: 5a:fd:05:6b:72:c3:3e:f4:b5:27:ef:46:4a:ea:11: d2:8f:54:fc:66:b0:04:6f:33:c7:5d:b2:06:18:2c: d2:7a:a9:80:04:09:03:e4:45:8d:a0:68:13:7e:2e: e3:d6:0b:4d:f8:a6:72:26:c9:02:03:48:c7:e2:22: 4a:88:83:2e:97:11:9e:8e:97:43:b9:03:ba:0e:b7: b1:c8:95:ae:7d:5d:90:f8:1e:63:e2:0c:f8:ee:b0: 4e:10:7c:3b:5c:4d:77:ee:50:44:d6:d5:5e:df:a0: 14:78:dd:5a:45:bc:7c:26:56:d0:86:f1:e1:cb:7d: 5f:0a:aa:4c:9b:67:91:8a:88:07:84:da:bf:5c:ab: 66:35:db:e6:a1:da:9b:c9:84:d7:a2:f5:68:1f:3f: 67:f3:5b:fa:f9:19:8b:6d:59:c1:88:b5:a6:26:17: 86:73:2c:ef:f5:76:80:31:5a:c7:42:07:1e:db:1b: ec:42:26:ba:30:a3:0a:15:7e:61:59:dd:08:6c:5c: f9:94:6f:7f:c1:35:dd:9e:07:39:26:b3:74:8d:bc: 8b:f5:60:2e:41:36:6a:fa:73:34:a6:87:ed:0b:c2: 36:c5:f8:64:6e:b7:ed:42:b4:04:02:1e:4e:cb:63: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:30:65:2C:A4:95:46:0D:0F:2B:8C:83:63:62:85:51:07:F9:4D:64 X509v3 Authority Key Identifier: keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d8:48:51:13:2e:66:d9:02:39:04:bb:5e:0e:8a:53:b8:c2: c0:82:9d:58:75:62:32:bd:26:25:4b:44:65:82:99:fd:ed:d5: 8d:5b:ed:b3:95:ab:58:8f:64:11:22:fa:3e:65:c0:cb:c6:a0: 20:ab:a1:d5:cf:b6:e0:9c:bc:7d:d9:cb:6d:bf:18:79:3c:67: 56:bd:0d:10:1b:be:eb:eb:05:3a:e0:a0:03:2c:b2:10:d6:a3: 13:e8:85:42:39:44:0e:ec:d4:8e:15:84:02:d1:3a:a4:22:3a: 04:c2:c7:6e:eb:b9:83:21:d6:5e:57:5a:59:4d:c1:40:28:3f: 78:c9:4c:f6:d5:1e:62:77:3b:c0:2e:95:38:5c:cb:8a:b0:46: d0:15:78:96:1c:b2:1e:c3:22:ae:7c:71:e0:6d:d5:86:fb:7c: 5a:d7:28:c4:21:bf:d9:78:5d:fa:7b:95:97:c8:9b:a9:ec:00: f7:3f:08:ae:18:45:b4:d9:38:f7:ff:5e:0e:2e:fe:84:56:d2: be:ca:3c:82:e3:09:b5:9d:ef:b4:3d:2d:da:a1:8d:b3:97:e7: 10:15:7a:13:e3:1e:2d:b5:1c:8d:ce:fa:b0:ec:b8:67:9a:eb: 5a:d1:43:d0:8a:ec:b5:e4:f6:57:0c:8e:ca:ed:4f:5f:bc:04: 6b:b8:af:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhuJyh3Np1cxHESDoSR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi ODlkNWYwHhcNMjYwMjA5MTMwMTI2WhcNMjYwMjEwMTMwMTI2WjAzMTEwLwYDVQQD Eyg3NjMwNjUyY2E0OTU0NjBkMGYyYjhjODM2MzYyODU1MTA3Zjk0ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbyukcN5tNjth79Rt/da/QVrcsM+ 9LUn70ZK6hHSj1T8ZrAEbzPHXbIGGCzSeqmABAkD5EWNoGgTfi7j1gtN+KZyJskC A0jH4iJKiIMulxGejpdDuQO6DrexyJWufV2Q+B5j4gz47rBOEHw7XE137lBE1tVe 36AUeN1aRbx8JlbQhvHhy31fCqpMm2eRiogHhNq/XKtmNdvmodqbyYTXovVoHz9n 81v6+RmLbVnBiLWmJheGcyzv9XaAMVrHQgce2xvsQia6MKMKFX5hWd0IbFz5lG9/ wTXdngc5JrN0jbyL9WAuQTZq+nM0poftC8I2xfhkbrftQrQEAh5Oy2Nr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYwZSyklUYNDyuMg2NihVEH+U1kMB8GA1UdIwQY MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1 LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNhIURMu ZtkCOQS7Xg6KU7jCwIKdWHViMr0mJUtEZYKZ/e3VjVvts5WrWI9kESL6PmXAy8ag IKuh1c+24Jy8fdnLbb8YeTxnVr0NEBu+6+sFOuCgAyyyENajE+iFQjlEDuzUjhWE AtE6pCI6BMLHbuu5gyHWXldaWU3BQCg/eMlM9tUeYnc7wC6VOFzLirBG0BV4lhyy HsMirnxx4G3Vhvt8WtcoxCG/2Xhd+nuVl8ibqewA9z8IrhhFtNk49/9eDi7+hFbS vso8guMJtZ3vtD0t2qGNs5fnEBV6E+MeLbUcjc76sOy4Z5rrWtFD0IrsteT2VwyO yu1PX7wEa7ivpw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:46 2026 by rpki-client