This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json) Hash identifier: TP5MFObN2N8DtymJAjRz1dHS0oN2eJfpM4OIvnJZXNo= Subject key identifier: CE:1E:21:F0:07:20:71:44:78:9C:E8:02:23:F8:53:2A:95:CD:BC:4B Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0 Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0 Certificate serial: 019C421005857A4CB14A31F66B6A6AE02554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft Manifest number: 06C6 Signing time: Mon 09 Feb 2026 11:01:11 +0000 Manifest this update: Mon 09 Feb 2026 11:01:11 +0000 Manifest next update: Tue 10 Feb 2026 11:01:11 +0000 Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: Vt8N5hdGGHimjoNyQOYLpiLu0NpabTZkI9KMjjBjgOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:05:85:7a:4c:b1:4a:31:f6:6b:6a:6a:e0:25:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0 Validity Not Before: Feb 9 11:01:11 2026 GMT Not After : Feb 10 11:01:11 2026 GMT Subject: CN=ce1e21f007207144789ce80223f8532a95cdbc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:9c:ed:c2:cb:48:37:09:0c:29:a0:3c:c4: 86:d0:40:e0:5f:77:4e:56:93:7b:83:dc:94:07:e1: a7:35:2e:d7:a5:79:1a:63:ba:f2:ec:a6:31:a1:1a: f6:ce:97:74:2b:4e:bb:f7:95:08:74:68:57:d5:a4: b3:a7:fa:4c:5d:3f:2e:f5:79:f2:59:66:fb:08:c6: 23:64:b6:90:c3:ff:08:f0:aa:dd:d3:74:4e:e7:11: 86:63:61:07:25:89:63:ae:6b:49:cc:ed:f6:86:13: b5:39:00:be:1d:9f:eb:58:53:d1:cb:ec:70:ea:af: e5:72:22:a4:e9:62:d5:9f:07:f3:c9:d9:28:a6:8b: fc:8f:e0:ee:77:62:69:98:cf:d4:ea:a1:60:f9:6c: 6b:a1:76:ea:c6:ed:0c:19:a1:92:a2:06:e8:4d:dc: d7:d7:b0:da:ed:a1:44:ad:c0:3d:8c:e6:22:c0:1b: c4:7b:8d:52:07:d2:d6:10:98:b7:b7:c6:a2:7d:c9: 5f:69:2b:4c:39:32:53:e1:84:59:d8:24:d6:83:78: a2:ba:f6:56:2a:7d:00:d2:30:8f:3a:1e:98:a6:69: 7d:f0:d7:f1:1b:1c:5a:0d:30:cc:0c:4d:0e:80:9a: 94:19:2b:8a:4b:05:81:8c:d8:25:57:49:20:3e:0c: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1E:21:F0:07:20:71:44:78:9C:E8:02:23:F8:53:2A:95:CD:BC:4B X509v3 Authority Key Identifier: keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1d:73:79:bc:0b:ce:e7:41:b8:89:e0:36:4a:1c:61:08:c2: dc:cf:d1:d7:c0:3b:fe:92:78:c9:2b:a4:d8:51:49:d0:af:89: 36:9e:c7:f4:dd:05:b3:d0:7e:8d:69:23:16:33:a5:c9:db:bc: 93:e3:52:ce:a7:42:82:00:ae:81:5f:09:94:4d:fa:1a:15:96: 93:df:45:c1:83:d9:c4:9d:a0:97:9a:a5:f9:bf:b9:b4:b3:a8: 13:be:c9:c0:03:88:95:23:16:fe:a6:c3:0a:30:be:e7:c6:cd: ff:06:2e:01:2f:c1:98:8a:ab:f7:ac:8c:ae:41:28:71:52:8f: f1:11:7c:3d:4f:10:d4:fa:b2:da:43:25:d6:b3:3f:8a:72:37: 95:7c:58:13:a2:18:be:15:f1:26:c7:41:b1:d0:98:2d:81:1e: b6:11:05:3a:be:63:4f:5f:21:e6:69:0e:54:fb:1f:87:44:bf: d9:80:ca:56:ac:86:aa:f1:62:35:e4:38:1b:c9:f8:3f:6d:91: 20:83:35:96:9a:97:af:31:a4:61:dc:9b:f0:ba:55:4c:82:32: 7a:8e:0c:79:62:e4:7d:e4:b1:d2:37:49:c8:3e:e8:66:8f:06: 1a:47:29:e0:6d:dc:2d:70:55:f3:e5:de:d3:5e:ae:e6:c2:e8: aa:d2:ab:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAWFekyxSjH2a2pq4CVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTAwOGZmNjZkNDU2ZTQzZWZkYzExOTZiMTdkODQ0M2Qy Mzk3ZjAwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD EyhjZTFlMjFmMDA3MjA3MTQ0Nzg5Y2U4MDIyM2Y4NTMyYTk1Y2RiYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8mc7cLLSDcJDCmgPMSG0EDgX3dO VpN7g9yUB+GnNS7XpXkaY7ry7KYxoRr2zpd0K06795UIdGhX1aSzp/pMXT8u9Xny WWb7CMYjZLaQw/8I8Krd03RO5xGGY2EHJYljrmtJzO32hhO1OQC+HZ/rWFPRy+xw 6q/lciKk6WLVnwfzydkopov8j+Dud2JpmM/U6qFg+WxroXbqxu0MGaGSogboTdzX 17Da7aFErcA9jOYiwBvEe41SB9LWEJi3t8aifclfaStMOTJT4YRZ2CTWg3iiuvZW Kn0A0jCPOh6Ypml98NfxGxxaDTDMDE0OgJqUGSuKSwWBjNglV0kgPgxlbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4eIfAHIHFEeJzoAiP4UyqVzbxLMB8GA1UdIwQY MBaAFCWgCP9m1FbkPv3BGWsX2EQ9I5fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lM2I0ZDQtMjUwMS00YTVlLTlmMjQt ZmJmZWY3NDYxMDEwLzEvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lM2I0ZDQtMjUwMS00YTVlLTlmMjQtZmJmZWY3NDYxMDEw LzEvSmFBSV8yYlVWdVEtX2NFWmF4ZllSRDBqbF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYR1zebwL zudBuIngNkocYQjC3M/R18A7/pJ4ySuk2FFJ0K+JNp7H9N0Fs9B+jWkjFjOlydu8 k+NSzqdCggCugV8JlE36GhWWk99FwYPZxJ2gl5ql+b+5tLOoE77JwAOIlSMW/qbD CjC+58bN/wYuAS/BmIqr96yMrkEocVKP8RF8PU8Q1Pqy2kMl1rM/inI3lXxYE6IY vhXxJsdBsdCYLYEethEFOr5jT18h5mkOVPsfh0S/2YDKVqyGqvFiNeQ4G8n4P22R IIM1lpqXrzGkYdyb8LpVTIIyeo4MeWLkfeSx0jdJyD7oZo8GGkcp4G3cLXBV8+Xe 016u5sLoqtKraA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:48 2026 by rpki-client