This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json) Hash identifier: t0iNiR0O0PTv4mqbygUr6x4AJpGEEWs4PPhT/mQQtMY= Subject key identifier: E9:A4:7D:46:64:7C:83:EB:B6:3D:1B:9A:CC:B2:DC:78:80:D3:51:47 Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c Certificate serial: 019C427DA03AB192B375F56DEB0DE81855D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft Manifest number: 120A Signing time: Mon 09 Feb 2026 13:00:55 +0000 Manifest this update: Mon 09 Feb 2026 13:00:55 +0000 Manifest next update: Tue 10 Feb 2026 13:00:55 +0000 Files and hashes: 1: ZWc731yhXtnZwZA4k-893U-Fzys.roa (hash: RRFLJwA1DLmfU7R9eR3HkSpvYKtbhnQe6Ugjt8gXSbA=) 2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: To8kmw98Nu/AM2OiZP9/yxgRfyO75jcXv6qfQQMFIEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a0:3a:b1:92:b3:75:f5:6d:eb:0d:e8:18:55:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c Validity Not Before: Feb 9 13:00:55 2026 GMT Not After : Feb 10 13:00:55 2026 GMT Subject: CN=e9a47d46647c83ebb63d1b9accb2dc7880d35147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:25:e9:34:b3:9b:62:1d:2f:41:7c:b4:df: 88:db:ee:2d:54:45:37:4b:d0:6f:a4:b7:8a:e0:be: 0f:79:66:f0:41:12:ac:a6:95:ea:68:fb:5c:94:3d: bd:2a:25:b4:0e:eb:05:5f:03:8d:b0:57:c4:7a:39: 02:7d:dc:d2:c8:8e:44:9a:a5:6f:d0:fd:af:e7:e2: ac:46:a3:6f:4b:af:ec:a5:66:7d:a7:c9:ed:90:82: aa:fc:51:b8:c0:c3:b7:55:a9:b3:10:6e:c7:ef:1d: 12:17:c4:d1:e9:f8:d0:f3:a0:20:b7:d7:40:61:a8: c8:c8:ba:06:9c:46:e8:81:c9:29:5b:ad:19:83:d4: 07:e0:ec:38:3a:b3:0b:5b:37:d9:dc:1d:1c:36:76: c4:a8:54:67:68:10:05:a9:ae:46:2b:d6:7e:e5:e9: bf:d5:97:e8:9b:83:48:3a:31:43:b5:55:e1:1f:49: f2:ab:e2:c8:19:3b:1b:07:8d:56:7e:4b:0f:27:63: 28:7a:4b:dd:aa:a6:3c:b7:24:88:55:02:eb:d9:68: e8:b4:b2:30:8e:e8:aa:af:58:48:40:6b:ae:70:ee: 0d:79:41:62:fb:d9:03:a4:eb:49:64:11:27:e3:6e: d7:7f:d1:2f:9d:1d:b9:3b:53:2e:93:58:f7:62:c6: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A4:7D:46:64:7C:83:EB:B6:3D:1B:9A:CC:B2:DC:78:80:D3:51:47 X509v3 Authority Key Identifier: keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a8:0d:fb:21:e9:b5:72:1b:17:b6:30:05:ec:f9:f3:7e:11: 4e:39:28:68:1f:c8:66:01:0d:7e:9b:aa:87:dc:53:6e:b0:42: 60:8a:88:d5:64:5e:cb:58:fe:e4:50:df:97:28:61:06:8a:93: 96:d8:70:4a:ba:90:b0:19:96:c2:ef:21:92:b0:65:82:f8:7d: 31:ca:11:6e:5d:a9:19:99:92:ba:d0:73:13:90:91:6b:16:88: c3:f7:c8:30:1e:52:5d:44:1c:44:a7:93:a8:4b:b7:5a:71:fd: 57:d1:03:2b:88:8e:62:a0:c4:c3:59:17:f0:cf:d6:d9:b4:c5: 3c:f9:51:b5:4c:8c:75:7a:4b:5c:f5:46:7b:ae:35:92:42:11: fc:9f:3a:aa:12:d2:89:fd:05:76:80:de:b8:33:d9:29:ff:59: 6a:5d:39:cf:11:52:a2:60:08:7b:72:47:98:c5:6d:fc:c5:72: d7:99:04:67:8d:25:14:3e:fb:f7:70:aa:6d:e6:27:df:2c:a0: ce:23:3d:99:99:f3:89:73:2b:81:75:f3:8a:d6:33:51:ff:15: 34:7f:3c:bb:f2:fc:42:58:e9:de:fe:bb:9c:c6:59:fd:ef:b1: 51:90:d9:7f:3c:de:f7:de:5e:28:b3:6b:aa:78:10:80:3a:69: 57:e3:1c:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaA6sZKzdfVt6w3oGFXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmQ3NWI0ZTQ5ODZmYWNjYjYxNGIzMzRlNDVkNWUwMzkz NTJhOWMwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD EyhlOWE0N2Q0NjY0N2M4M2ViYjYzZDFiOWFjY2IyZGM3ODgwZDM1MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Yl6TSzm2IdL0F8tN+I2+4tVEU3 S9BvpLeK4L4PeWbwQRKsppXqaPtclD29KiW0DusFXwONsFfEejkCfdzSyI5EmqVv 0P2v5+KsRqNvS6/spWZ9p8ntkIKq/FG4wMO3VamzEG7H7x0SF8TR6fjQ86Agt9dA YajIyLoGnEbogckpW60Zg9QH4Ow4OrMLWzfZ3B0cNnbEqFRnaBAFqa5GK9Z+5em/ 1Zfom4NIOjFDtVXhH0nyq+LIGTsbB41WfksPJ2MoekvdqqY8tySIVQLr2WjotLIw juiqr1hIQGuucO4NeUFi+9kDpOtJZBEn427Xf9EvnR25O1Muk1j3YsaO4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmkfUZkfIPrtj0bmsyy3HiA01FHMB8GA1UdIwQY MBaAFI5tdbTkmG+sy2FLM05F1eA5NSqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDIt NmQ3NjAyZDI0YzgzLzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDItNmQ3NjAyZDI0Yzgz LzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKgN+yHp tXIbF7YwBez5834RTjkoaB/IZgENfpuqh9xTbrBCYIqI1WRey1j+5FDflyhhBoqT lthwSrqQsBmWwu8hkrBlgvh9McoRbl2pGZmSutBzE5CRaxaIw/fIMB5SXUQcRKeT qEu3WnH9V9EDK4iOYqDEw1kX8M/W2bTFPPlRtUyMdXpLXPVGe641kkIR/J86qhLS if0FdoDeuDPZKf9Zal05zxFSomAIe3JHmMVt/MVy15kEZ40lFD7793CqbeYn3yyg ziM9mZnziXMrgXXzitYzUf8VNH88u/L8Qljp3v67nMZZ/e+xUZDZfzze995eKLNr qngQgDppV+Mc7w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:33 2026 by rpki-client