This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json) Hash identifier: 09HEp7z4eEmaLYv6ZwHYnbG3lzoWgUze7/eMcmYiTN0= Subject key identifier: D5:B8:3E:F2:C1:5E:39:2B:4B:5C:AB:83:75:23:D2:18:BB:4D:E5:22 Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77 Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77 Certificate serial: 019C43FDB1ECEAAA3FA833F40355FB4D34F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:00:25 +0000 Manifest this update: Mon 09 Feb 2026 20:00:25 +0000 Manifest next update: Tue 10 Feb 2026 20:00:25 +0000 Files and hashes: 1: ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa (hash: 9Ixv1QcElvaUvLVayAC5q1i8Ay2oyoQHQj5D6wnH7iU=) 2: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: S2mMCy/NaaghJ4VUYwu2GmCnad/XhXMvm8RKjzvIbpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b1:ec:ea:aa:3f:a8:33:f4:03:55:fb:4d:34:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77 Validity Not Before: Feb 9 20:00:25 2026 GMT Not After : Feb 10 20:00:25 2026 GMT Subject: CN=d5b83ef2c15e392b4b5cab837523d218bb4de522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:14:df:3e:8e:b2:4d:a7:f5:c7:05:c7:00: 47:17:48:9f:0a:db:61:e2:a1:2b:d8:d3:cd:b8:0f: b8:28:8a:64:7e:ff:43:d9:e8:00:3c:af:ca:eb:bc: d2:13:a3:c4:ae:f9:c5:57:2c:5e:7a:a0:01:ed:56: 8e:cc:f5:7a:81:9b:12:23:e5:2e:d0:3e:25:cd:3e: 5a:33:57:96:49:ea:67:9a:59:f3:87:a7:db:7b:f2: 8f:d5:60:65:00:8c:af:50:c9:5e:48:f4:ae:91:9d: a0:3e:af:a4:17:a6:2a:e7:1a:3a:f6:1a:af:07:67: b1:23:c2:84:f6:ef:aa:ab:72:c0:ca:83:f4:11:18: e5:43:bc:b1:98:d0:0d:ab:85:9f:05:58:af:5b:f1: 6d:af:b3:8c:0e:5c:66:61:89:03:31:14:39:f4:15: 87:3f:d1:50:1a:e3:cc:0e:51:d8:dc:b3:f1:7b:7b: a1:bb:b0:88:f3:bd:b4:ec:56:82:65:20:65:a9:de: 8c:dd:45:db:22:17:cb:c3:46:f7:ea:e0:26:ef:09: 29:51:84:cd:9a:03:90:ff:aa:2c:4e:8b:8a:07:cb: 2a:a1:af:52:62:b2:7d:fb:49:40:6e:00:09:e6:58: c0:95:cf:d5:40:cb:87:37:e9:2a:c5:f7:dc:6e:fb: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:3E:F2:C1:5E:39:2B:4B:5C:AB:83:75:23:D2:18:BB:4D:E5:22 X509v3 Authority Key Identifier: keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:08:3c:96:d7:7a:5c:30:cd:7b:33:dc:ee:e7:12:84:d7:5c: 86:34:50:81:72:80:c9:8e:d4:98:41:a6:8f:bd:0b:b7:99:45: d0:aa:47:2f:35:18:38:d8:43:84:f1:cf:44:40:ce:c2:b5:9d: d0:d0:1f:a9:7f:40:9b:6a:32:b1:1e:5c:a4:0a:35:45:68:4f: ae:e9:78:00:db:12:a3:96:4e:46:c8:db:03:e4:0f:2c:82:68: e0:9e:19:4a:bd:10:46:68:0f:b8:33:12:7c:9c:cc:24:b8:5a: 9e:85:87:2b:51:f6:5c:74:61:5a:7b:6f:65:c6:32:1f:19:4d: fd:ca:6d:6f:2d:4b:c9:d0:2e:6f:51:dd:05:09:e6:5f:49:97: 0e:27:fe:1e:53:1e:af:04:3a:81:74:c3:59:e9:34:c1:c2:62: 02:37:2a:e5:9b:f1:75:d8:e0:be:4d:13:df:a5:e1:34:be:7d: 24:9a:2a:8c:7b:fe:9b:e4:79:82:85:f4:24:4e:6a:c5:6f:7c: 16:be:3d:f5:95:5b:f3:70:be:4e:e0:99:94:5b:1c:d8:dd:8c: 72:dd:5d:3b:64:c1:b7:57:e2:0d:11:23:11:30:c6:06:a9:cf: a7:02:72:a5:58:f9:61:d7:1d:c6:36:64:51:69:60:e3:ad:24: 23:8d:ae:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bHs6qo/qDP0A1X7TTTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTNhMzQxOTY3YWVkYmU1MmE4YjExYzc5Y2IxMzkxMWE0 YTlmNzcwHhcNMjYwMjA5MjAwMDI1WhcNMjYwMjEwMjAwMDI1WjAzMTEwLwYDVQQD EyhkNWI4M2VmMmMxNWUzOTJiNGI1Y2FiODM3NTIzZDIxOGJiNGRlNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKcU3z6Osk2n9ccFxwBHF0ifCtth 4qEr2NPNuA+4KIpkfv9D2egAPK/K67zSE6PErvnFVyxeeqAB7VaOzPV6gZsSI+Uu 0D4lzT5aM1eWSepnmlnzh6fbe/KP1WBlAIyvUMleSPSukZ2gPq+kF6Yq5xo69hqv B2exI8KE9u+qq3LAyoP0ERjlQ7yxmNANq4WfBVivW/Ftr7OMDlxmYYkDMRQ59BWH P9FQGuPMDlHY3LPxe3uhu7CI87207FaCZSBlqd6M3UXbIhfLw0b36uAm7wkpUYTN mgOQ/6osTouKB8sqoa9SYrJ9+0lAbgAJ5ljAlc/VQMuHN+kqxffcbvuk0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW4PvLBXjkrS1yrg3Uj0hi7TeUiMB8GA1UdIwQY MBaAFCQTo0GWeu2+UqixHHnLE5EaSp93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZjY0MDEtMWYwMC00Yjc0LWFiOTkt NGQ5Mjk2ZTliM2FlLzEvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZjY0MDEtMWYwMC00Yjc0LWFiOTktNGQ5Mjk2ZTliM2Fl LzEvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAg8ltd6 XDDNezPc7ucShNdchjRQgXKAyY7UmEGmj70Lt5lF0KpHLzUYONhDhPHPREDOwrWd 0NAfqX9Am2oysR5cpAo1RWhPrul4ANsSo5ZORsjbA+QPLIJo4J4ZSr0QRmgPuDMS fJzMJLhanoWHK1H2XHRhWntvZcYyHxlN/cptby1LydAub1HdBQnmX0mXDif+HlMe rwQ6gXTDWek0wcJiAjcq5Zvxddjgvk0T36XhNL59JJoqjHv+m+R5goX0JE5qxW98 Fr499ZVb83C+TuCZlFsc2N2Mct1dO2TBt1fiDREjETDGBqnPpwJypVj5YdcdxjZk UWlg460kI42uJw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:53 2026 by rpki-client