This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json) Hash identifier: N1eUIeC6uaJE5EFIbRuwycarL4YutT9zafJTuALnpNg= Subject key identifier: C7:68:9D:AD:06:31:ED:85:ED:37:AF:0E:4B:6D:E9:51:97:24:8B:4D Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Certificate serial: 019C42EB607EB41B8EBE5C2F1B7CC97DE8E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft Manifest number: 1550 Signing time: Mon 09 Feb 2026 15:00:47 +0000 Manifest this update: Mon 09 Feb 2026 15:00:47 +0000 Manifest next update: Tue 10 Feb 2026 15:00:47 +0000 Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: m97k4BKPmYeR7MdQwwTiu49ctPzUjww11Z07J0JgPgI=) 2: LUqVoC445OwuMDQ02JnxJokVy0c.roa (hash: sTwGxPhTJ/H24QIf8MGKPbk8zrx1fr0jAaNaXKcuA+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:60:7e:b4:1b:8e:be:5c:2f:1b:7c:c9:7d:e8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Validity Not Before: Feb 9 15:00:47 2026 GMT Not After : Feb 10 15:00:47 2026 GMT Subject: CN=c7689dad0631ed85ed37af0e4b6de95197248b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:f5:90:70:35:79:8e:c2:9a:ed:a2:58:5e: f1:45:41:83:13:4a:e8:18:00:f9:d6:80:68:76:a6: fa:b2:62:6a:b9:a7:ae:41:c8:58:e4:ae:cf:3c:ba: fc:b1:01:b0:02:27:b2:55:94:e5:57:82:44:3f:f2: da:44:4f:95:f2:75:4c:cb:db:53:d5:67:01:57:1d: 93:d0:9e:72:2f:a4:f8:bf:38:41:05:5d:4b:3e:f9: 45:43:b2:ca:e8:69:f6:44:d0:4e:24:0e:e1:5d:8f: c7:3d:88:0a:9a:08:1c:ad:7b:90:a8:5e:d1:63:00: 46:86:0f:aa:97:d9:56:cd:eb:0b:19:36:58:55:99: 43:6b:f2:ef:be:c2:20:fb:7e:7c:f8:9a:96:e4:ca: 36:bd:c3:ff:df:b9:cd:10:11:4c:98:96:5f:b7:b4: 04:ad:15:de:9c:fb:47:09:63:cc:1e:7c:33:1c:1c: d3:e0:f2:8e:17:2e:69:19:d6:ed:e5:90:95:2e:a9: 04:69:70:2e:6c:b1:58:f2:43:28:3d:8c:c7:ff:fc: 95:9f:ef:53:57:41:28:ab:3b:4e:f6:44:5e:3a:8d: 1d:60:29:c0:3e:d8:7a:7f:21:e2:63:1d:16:1b:7c: 32:24:e7:dd:cc:e0:c1:ee:71:87:06:30:4a:6a:d9: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:68:9D:AD:06:31:ED:85:ED:37:AF:0E:4B:6D:E9:51:97:24:8B:4D X509v3 Authority Key Identifier: keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5d:a4:93:c5:c2:4a:e5:66:83:fe:ae:66:a1:60:a9:3d:bf: 21:0e:2a:c6:b9:7a:37:fa:5b:29:a2:dc:cd:4e:b4:19:09:fe: d5:7e:59:b0:28:86:e1:a8:9f:e9:b7:47:d5:e2:ea:8b:ab:e2: f8:2b:05:53:95:f0:e6:88:e1:4d:ac:aa:be:06:91:4b:16:98: b6:39:b3:9e:c3:76:5b:f7:5c:a2:3b:0a:ec:90:c4:f7:0d:17: 25:e4:f9:8c:09:88:37:8d:18:44:8d:a9:0f:58:3e:7c:0d:c1: 39:28:68:6d:51:8c:6d:08:1d:05:69:a5:02:48:5b:a8:1c:d3: 90:40:bb:5e:5c:77:8d:51:96:a4:ce:79:61:85:79:de:91:6d: 28:36:2f:af:c4:db:23:96:5e:f3:70:13:d4:83:56:1f:ed:e9: 33:93:39:f6:00:d9:37:d0:f4:73:01:17:ed:cc:4f:0d:e1:ee: ed:47:00:91:cd:c7:79:0e:58:9b:4c:48:a0:5d:28:0d:4a:0a: 07:d4:f9:d5:68:d2:7f:41:24:71:16:76:67:a3:87:9f:95:69: ec:7d:3b:68:29:3c:8d:69:36:d4:01:6d:b3:de:55:bc:de:71: 3f:6a:5a:85:f3:9e:20:a4:11:1c:86:fd:12:f8:c2:a7:53:75: 9e:92:10:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62B+tBuOvlwvG3zJfejiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw ZjU0YzYwHhcNMjYwMjA5MTUwMDQ3WhcNMjYwMjEwMTUwMDQ3WjAzMTEwLwYDVQQD EyhjNzY4OWRhZDA2MzFlZDg1ZWQzN2FmMGU0YjZkZTk1MTk3MjQ4YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cz1kHA1eY7Cmu2iWF7xRUGDE0ro GAD51oBodqb6smJquaeuQchY5K7PPLr8sQGwAieyVZTlV4JEP/LaRE+V8nVMy9tT 1WcBVx2T0J5yL6T4vzhBBV1LPvlFQ7LK6Gn2RNBOJA7hXY/HPYgKmggcrXuQqF7R YwBGhg+ql9lWzesLGTZYVZlDa/LvvsIg+358+JqW5Mo2vcP/37nNEBFMmJZft7QE rRXenPtHCWPMHnwzHBzT4PKOFy5pGdbt5ZCVLqkEaXAubLFY8kMoPYzH//yVn+9T V0EoqztO9kReOo0dYCnAPth6fyHiYx0WG3wyJOfdzODB7nGHBjBKatnUGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdona0GMe2F7TevDktt6VGXJItNMB8GA1UdIwQY MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl2kk8XC SuVmg/6uZqFgqT2/IQ4qxrl6N/pbKaLczU60GQn+1X5ZsCiG4aif6bdH1eLqi6vi +CsFU5Xw5ojhTayqvgaRSxaYtjmznsN2W/dcojsK7JDE9w0XJeT5jAmIN40YRI2p D1g+fA3BOShobVGMbQgdBWmlAkhbqBzTkEC7Xlx3jVGWpM55YYV53pFtKDYvr8Tb I5Ze83AT1INWH+3pM5M59gDZN9D0cwEX7cxPDeHu7UcAkc3HeQ5Ym0xIoF0oDUoK B9T51WjSf0EkcRZ2Z6OHn5Vp7H07aCk8jWk21AFts95VvN5xP2pahfOeIKQRHIb9 EvjCp1N1npIQzA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:28 2026 by rpki-client