This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json) Hash identifier: W0oCoGtG6OEVlmJ0ZBqEuZ2c25DOJrh/2cYvnXDHslc= Subject key identifier: C5:BC:F4:D0:02:71:08:E1:E7:C4:59:5C:01:47:35:FB:38:8C:E1:AB Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Certificate serial: 019C41D83311D64E83611966D6057D45D9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 10:00:13 +0000 Manifest this update: Mon 09 Feb 2026 10:00:13 +0000 Manifest next update: Tue 10 Feb 2026 10:00:13 +0000 Files and hashes: 1: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: YtOndYwxL3sMsoMPhrx1DQ7onYCNsMOHopWFurCVgLA=) 2: p_L2QpRj3ttW5zYJBodD2QWnHQk.roa (hash: jJxb3YNiA4DSQOly6eBKE2Fc+ul2//HbGqi6YUq+XKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:33:11:d6:4e:83:61:19:66:d6:05:7d:45:d9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Validity Not Before: Feb 9 10:00:13 2026 GMT Not After : Feb 10 10:00:13 2026 GMT Subject: CN=c5bcf4d0027108e1e7c4595c014735fb388ce1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:95:4b:a1:a4:8d:66:46:73:6c:9b:3b:ec: 24:a9:63:8e:35:6c:37:b4:4f:7d:e6:2f:92:9b:1a: 00:c3:3a:97:64:86:c2:d6:25:95:e3:d6:96:0e:83: cc:5f:78:ed:e5:3d:2b:83:67:95:dd:5e:c3:54:1f: 52:20:53:57:bd:25:f6:2e:a9:07:eb:3e:f1:d5:7b: d8:5d:c6:8b:de:13:7f:7c:e1:64:f0:b1:28:b2:a7: b5:2f:47:15:4c:96:2a:f2:fc:07:6c:e1:0e:56:6d: 01:e9:8a:c1:ba:1e:21:eb:6e:b1:1e:c8:4d:f7:51: 0a:48:d1:d7:b1:bd:62:e7:f7:36:d8:65:f8:20:86: 81:41:88:7f:9e:cf:c2:66:9b:ea:1c:bf:6b:55:51: 82:1e:cf:b9:f2:d1:ca:0f:fc:2d:6e:44:36:59:45: 68:47:e9:52:0e:8d:6a:1d:fa:5c:86:f0:6e:da:cc: 39:ef:15:d4:a7:f6:91:c5:81:ae:11:65:d6:40:f0: 56:77:ee:79:29:8d:45:61:a1:89:2d:a0:a0:75:1c: 26:5f:09:86:6f:6d:58:76:d3:3f:c4:31:f8:e6:b4: 26:75:89:df:d5:0c:71:23:8e:03:7d:4b:ad:ac:1c: 5c:0c:66:0b:55:a9:5c:bd:61:ff:0e:a5:d2:90:cc: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:F4:D0:02:71:08:E1:E7:C4:59:5C:01:47:35:FB:38:8C:E1:AB X509v3 Authority Key Identifier: keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e1:75:d9:20:e4:fe:f8:e0:8f:00:5d:70:9c:77:80:ae:2c: 1e:fb:22:3d:5e:be:30:7f:e7:4a:8b:9f:19:c5:01:00:2c:12: 3f:a6:df:9f:c9:e9:84:7d:66:2d:b8:b9:53:30:74:4e:ad:1d: 99:1a:17:eb:62:fe:8e:bd:48:eb:7b:e5:66:ca:cb:4d:60:0f: 50:58:04:f7:cf:a3:fa:e8:25:b3:46:9b:3e:b0:c4:66:2d:d4: 85:88:cc:ed:88:c9:f0:f3:2b:ab:38:54:26:7b:e7:27:7b:d1: 1b:a0:72:83:f8:d8:e8:09:5a:6e:67:5a:53:45:9f:61:74:3a: f0:af:6c:85:f2:7d:ea:20:c9:61:dd:c7:c9:a5:28:6d:de:5e: d6:26:3b:a7:f8:24:fb:ed:9d:d7:41:01:f6:2e:6a:54:e4:49: dc:46:da:d7:bb:1b:16:66:aa:13:75:b9:c1:6b:0f:02:e2:85: 5d:66:fe:0c:cd:47:f1:d2:ea:93:46:a6:62:2e:96:10:81:6e: 8b:01:0f:33:fe:85:d9:d4:31:59:48:68:20:1e:50:0c:9d:53: c8:9d:52:1c:7e:b8:a9:f5:30:03:7f:79:ca:e2:e0:8f:fb:5b: 72:63:7e:93:26:79:58:52:fb:e0:1f:73:36:05:20:82:ec:3a: 3c:45:29:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DMR1k6DYRlm1gV9RdnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTJhMzk1NGUzMGU0NzUzZTJlMDBhMGVmODE2OTY2ZDZk NjBkYjYwHhcNMjYwMjA5MTAwMDEzWhcNMjYwMjEwMTAwMDEzWjAzMTEwLwYDVQQD EyhjNWJjZjRkMDAyNzEwOGUxZTdjNDU5NWMwMTQ3MzVmYjM4OGNlMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0iVS6GkjWZGc2ybO+wkqWOONWw3 tE995i+SmxoAwzqXZIbC1iWV49aWDoPMX3jt5T0rg2eV3V7DVB9SIFNXvSX2LqkH 6z7x1XvYXcaL3hN/fOFk8LEosqe1L0cVTJYq8vwHbOEOVm0B6YrBuh4h626xHshN 91EKSNHXsb1i5/c22GX4IIaBQYh/ns/CZpvqHL9rVVGCHs+58tHKD/wtbkQ2WUVo R+lSDo1qHfpchvBu2sw57xXUp/aRxYGuEWXWQPBWd+55KY1FYaGJLaCgdRwmXwmG b21YdtM/xDH45rQmdYnf1QxxI44DfUutrBxcDGYLValcvWH/DqXSkMyF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW89NACcQjh58RZXAFHNfs4jOGrMB8GA1UdIwQY MBaAFI5So5VOMOR1Pi4AoO+BaWbW1g22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEt Yjg1NmRiMzNjNmM2LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEtYjg1NmRiMzNjNmM2 LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+F12SDk /vjgjwBdcJx3gK4sHvsiPV6+MH/nSoufGcUBACwSP6bfn8nphH1mLbi5UzB0Tq0d mRoX62L+jr1I63vlZsrLTWAPUFgE98+j+ugls0abPrDEZi3UhYjM7YjJ8PMrqzhU JnvnJ3vRG6Byg/jY6AlabmdaU0WfYXQ68K9shfJ96iDJYd3HyaUobd5e1iY7p/gk ++2d10EB9i5qVORJ3Eba17sbFmaqE3W5wWsPAuKFXWb+DM1H8dLqk0amYi6WEIFu iwEPM/6F2dQxWUhoIB5QDJ1TyJ1SHH64qfUwA395yuLgj/tbcmN+kyZ5WFL74B9z NgUgguw6PEUpTg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:59 2026 by rpki-client