This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json) Hash identifier: 2p5AmCWWVF7hfA2ezag7D4qFLChCbypoqKIWLMcSfNw= Subject key identifier: 5E:45:75:5F:A2:BD:E4:93:4E:F3:55:69:FD:76:D5:40:C5:80:41:3E Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Certificate serial: 019C2774125B5AFB4D78E26FFD3EA3C3BDF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft Manifest number: 035A Signing time: Wed 04 Feb 2026 07:00:43 +0000 Manifest this update: Wed 04 Feb 2026 07:00:43 +0000 Manifest next update: Thu 05 Feb 2026 07:00:43 +0000 Files and hashes: 1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: 3qLUSXrFcM1wZvTb4aSZH9loy4NAvUJP6cozLbjFRIU=) 2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:74:12:5b:5a:fb:4d:78:e2:6f:fd:3e:a3:c3:bd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7 Validity Not Before: Feb 4 07:00:43 2026 GMT Not After : Feb 5 07:00:43 2026 GMT Subject: CN=5e45755fa2bde4934ef35569fd76d540c580413e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:56:2a:7f:65:d1:79:be:75:27:71:e0:71:55: c2:15:09:c4:5f:6e:db:2b:ba:86:b0:0a:d8:d1:4a: 4b:18:21:bd:18:7e:1d:83:72:2a:d0:19:8b:64:10: fa:b9:c8:4f:2b:e5:0b:6d:8b:53:6b:da:79:a2:15: 79:d1:85:4b:1d:ea:59:64:6e:40:02:3c:19:16:79: 90:23:45:cd:95:71:37:9e:1e:f6:f2:39:47:09:18: 92:71:51:5c:c1:d4:18:fe:41:9b:64:da:3e:27:75: fd:ba:38:6e:52:78:b2:f0:dc:2c:40:f2:0c:65:48: 59:08:4c:7f:5b:f2:85:d4:bf:24:07:a7:ba:3b:06: 3b:85:fb:cc:bb:9e:44:bb:d0:68:cf:66:38:8c:4c: 0f:3d:3b:cb:8d:d3:61:c8:0b:11:16:2c:b9:ac:be: 95:48:1d:e8:9a:15:9a:75:df:73:2b:2a:de:78:b4: 13:31:26:5e:86:b6:f2:59:50:71:4f:9a:d5:88:7c: 8a:1f:c2:4f:4a:48:75:36:14:48:3c:05:b5:65:9b: e6:0a:e3:e2:88:73:10:85:69:b6:9b:0e:6b:8d:89: 55:b5:ab:33:cd:f9:4e:cd:58:1d:8d:69:d1:84:5c: 0f:02:07:ae:ab:03:99:00:49:fb:67:68:46:ee:e3: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:75:5F:A2:BD:E4:93:4E:F3:55:69:FD:76:D5:40:C5:80:41:3E X509v3 Authority Key Identifier: keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a8:14:b1:c9:9c:0f:0f:90:f4:3b:87:ef:ff:94:45:dc:57: cc:7b:e9:b2:b9:2a:87:ec:98:d3:fd:06:7b:2a:83:60:4e:dc: 8f:ef:89:08:89:8b:c8:bd:34:12:37:63:37:64:3b:89:2e:0a: 49:cc:5c:52:0a:b8:ee:2f:c3:c2:27:38:1e:41:5d:55:47:29: 05:a6:f1:43:05:31:dd:3c:d0:eb:04:a1:97:0c:e0:95:dc:d6: 11:ee:05:e3:79:7c:bb:94:d8:a1:19:56:95:cc:89:2c:6e:09: 44:bc:07:27:7a:4c:b2:2c:ff:2c:74:09:7a:5a:5d:f4:c8:b1: 78:66:9d:95:d7:d3:51:84:b0:4d:de:3c:af:bf:78:ba:cf:56: b1:a8:4a:cb:43:29:97:3c:93:b5:e8:88:23:83:15:91:64:3c: 8f:96:fc:a6:76:fd:34:e8:90:42:53:36:a6:ef:db:0e:75:be: 15:ed:47:8d:d2:ae:ae:90:9b:39:59:f0:02:c1:5a:bb:05:19: 45:23:6e:5b:a6:7b:3f:85:31:bb:c6:df:a0:61:06:c3:fc:0d: 5d:38:57:8b:71:56:a8:e5:6d:ff:61:3d:9a:42:f2:5a:4d:c8: 0e:5b:3e:b7:22:cf:78:02:05:a8:d1:38:4c:9a:fa:19:b8:51: 31:7c:8c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwndBJbWvtNeOJv/T6jw73yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy OWNhYjcwHhcNMjYwMjA0MDcwMDQzWhcNMjYwMjA1MDcwMDQzWjAzMTEwLwYDVQQD Eyg1ZTQ1NzU1ZmEyYmRlNDkzNGVmMzU1NjlmZDc2ZDU0MGM1ODA0MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VYqf2XReb51J3HgcVXCFQnEX27b K7qGsArY0UpLGCG9GH4dg3Iq0BmLZBD6uchPK+ULbYtTa9p5ohV50YVLHepZZG5A AjwZFnmQI0XNlXE3nh728jlHCRiScVFcwdQY/kGbZNo+J3X9ujhuUniy8NwsQPIM ZUhZCEx/W/KF1L8kB6e6OwY7hfvMu55Eu9Boz2Y4jEwPPTvLjdNhyAsRFiy5rL6V SB3omhWadd9zKyreeLQTMSZehrbyWVBxT5rViHyKH8JPSkh1NhRIPAW1ZZvmCuPi iHMQhWm2mw5rjYlVtaszzflOzVgdjWnRhFwPAgeuqwOZAEn7Z2hG7uMYewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5FdV+iveSTTvNVaf121UDFgEE+MB8GA1UdIwQY MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt NmNhM2U5ZDNlNzhkLzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqgUscmc Dw+Q9DuH7/+URdxXzHvpsrkqh+yY0/0GeyqDYE7cj++JCImLyL00EjdjN2Q7iS4K ScxcUgq47i/Dwic4HkFdVUcpBabxQwUx3TzQ6wShlwzgldzWEe4F43l8u5TYoRlW lcyJLG4JRLwHJ3pMsiz/LHQJelpd9MixeGadldfTUYSwTd48r794us9WsahKy0Mp lzyTteiII4MVkWQ8j5b8pnb9NOiQQlM2pu/bDnW+Fe1HjdKurpCbOVnwAsFauwUZ RSNuW6Z7P4Uxu8bfoGEGw/wNXThXi3FWqOVt/2E9mkLyWk3IDls+tyLPeAIFqNE4 TJr6GbhRMXyM4g== -----END CERTIFICATE-----Generated at Wed Feb 4 10:56:47 2026 by rpki-client