This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft File: jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json) Hash identifier: A4MiJ5kjABs1O16Mrrl2iXqDAN+efoIU7R8gUwZNBLo= Subject key identifier: 38:51:A3:5B:D9:95:A4:8C:5D:4C:4E:29:9F:79:3B:6F:98:FB:FC:B1 Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8 Certificate issuer: /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8 Certificate serial: 019C42EB812017FECAEA9ED505FE90AB5F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft Manifest number: 0AF0 Signing time: Mon 09 Feb 2026 15:00:56 +0000 Manifest this update: Mon 09 Feb 2026 15:00:56 +0000 Manifest next update: Tue 10 Feb 2026 15:00:56 +0000 Files and hashes: 1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: HOv/b3FrLHCr1yR614flQPASYWNIOGsCDrWvBzchfhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:81:20:17:fe:ca:ea:9e:d5:05:fe:90:ab:5f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8 Validity Not Before: Feb 9 15:00:56 2026 GMT Not After : Feb 10 15:00:56 2026 GMT Subject: CN=3851a35bd995a48c5d4c4e299f793b6f98fbfcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:63:b4:3e:ca:86:d9:66:98:69:94:c8:c7: 11:20:18:f8:61:a1:a5:86:58:b8:d7:26:77:9b:4f: d0:42:ae:88:1f:10:4b:8f:59:eb:0b:c0:de:cd:30: 03:fa:44:98:16:64:bb:91:23:75:53:9c:fc:ca:94: 8f:0d:64:f5:09:b4:fe:30:68:02:90:ee:3b:72:dd: f7:f6:0b:1d:07:13:8a:8f:46:07:9e:7b:d8:9d:a3: 44:87:90:2b:2c:83:21:96:39:bc:b0:b4:a6:38:98: 71:95:38:ce:ba:a3:9f:ad:70:55:44:18:7d:f2:0a: 7c:13:cf:9d:de:35:b0:50:62:0a:bd:1c:4a:fd:00: 95:ed:83:dc:cf:ce:8f:71:a6:b8:f3:13:64:f2:21: b5:d5:c8:6c:90:22:08:af:e5:25:5f:08:89:cf:10: 5e:46:4d:87:2b:ee:30:4b:97:a6:c8:1b:6f:e6:a8: 65:a5:11:af:9e:30:53:46:8f:10:b2:4f:09:7c:31: 03:73:a4:e5:73:5c:08:28:f4:d3:dd:b4:6b:c1:6a: bd:f1:5b:df:89:20:38:9c:3f:97:1f:d2:91:e7:26: 20:1a:9e:19:85:71:81:75:60:74:bd:5c:ad:0f:aa: 8e:9e:04:56:c8:39:11:e7:d6:bb:78:fe:ad:fb:37: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:A3:5B:D9:95:A4:8C:5D:4C:4E:29:9F:79:3B:6F:98:FB:FC:B1 X509v3 Authority Key Identifier: keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f7:b1:2b:92:2a:61:6c:c7:63:c9:67:d3:f8:a2:8e:8a:38: 74:ca:aa:b2:7b:f8:52:4d:ee:e9:f2:5e:e3:c5:4d:e7:72:3f: 00:a6:64:f3:87:74:bc:53:c0:1d:ec:4e:92:7b:2d:38:72:2d: de:32:2c:c6:5d:31:aa:81:3c:a0:0a:b8:b5:f8:02:d2:e9:cf: 0e:28:55:c9:d6:37:b7:a5:2d:ea:b4:76:ad:f2:eb:73:13:28: c9:7f:10:d9:e2:8c:0c:e1:c4:6d:cc:d6:34:30:39:65:cf:71: 63:b4:14:d6:19:f4:53:5e:31:3d:cc:23:de:07:5f:0b:86:34: 14:a1:3e:e9:01:74:41:55:75:b4:c9:3c:5f:45:4b:d5:3d:ee: 3c:29:36:0f:26:bb:f0:29:ef:1e:2b:c2:b0:4f:98:67:d4:91: 21:3f:4b:5e:4c:98:9f:e7:25:83:17:b5:5b:d3:7e:6c:12:37: d0:ff:31:3c:01:2c:8a:a5:1f:97:52:a3:77:3d:7c:43:fe:bc: 20:8c:bb:01:e7:10:13:74:a0:83:29:2d:19:7a:9e:8e:d8:31: 11:0f:40:ec:ec:f1:ae:f0:40:72:c4:bb:eb:79:f4:90:8c:25: f0:d6:65:05:7a:9f:0f:14:ef:e4:37:6c:d7:0d:cd:98:b4:b4: 81:b1:7e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64EgF/7K6p7VBf6Qq1+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNWVjM2Q1YTQ4NjhlMzUzMTIyNjJhN2M2YWE5MTQ0MzU4 OTNjZDgwHhcNMjYwMjA5MTUwMDU2WhcNMjYwMjEwMTUwMDU2WjAzMTEwLwYDVQQD EygzODUxYTM1YmQ5OTVhNDhjNWQ0YzRlMjk5Zjc5M2I2Zjk4ZmJmY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qRjtD7KhtlmmGmUyMcRIBj4YaGl hli41yZ3m0/QQq6IHxBLj1nrC8DezTAD+kSYFmS7kSN1U5z8ypSPDWT1CbT+MGgC kO47ct339gsdBxOKj0YHnnvYnaNEh5ArLIMhljm8sLSmOJhxlTjOuqOfrXBVRBh9 8gp8E8+d3jWwUGIKvRxK/QCV7YPcz86Pcaa48xNk8iG11chskCIIr+UlXwiJzxBe Rk2HK+4wS5emyBtv5qhlpRGvnjBTRo8Qsk8JfDEDc6Tlc1wIKPTT3bRrwWq98Vvf iSA4nD+XH9KR5yYgGp4ZhXGBdWB0vVytD6qOngRWyDkR59a7eP6t+zfr7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhRo1vZlaSMXUxOKZ95O2+Y+/yxMB8GA1UdIwQY MBaAFI1ew9Wkho41MSJip8aqkUQ1iTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNTI2NWMtYmY3OS00Y2UxLTk0OTkt OWFmN2NiMzg2ZjgwLzEvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNTI2NWMtYmY3OS00Y2UxLTk0OTktOWFmN2NiMzg2Zjgw LzEvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/exK5Iq YWzHY8ln0/iijoo4dMqqsnv4Uk3u6fJe48VN53I/AKZk84d0vFPAHexOknstOHIt 3jIsxl0xqoE8oAq4tfgC0unPDihVydY3t6Ut6rR2rfLrcxMoyX8Q2eKMDOHEbczW NDA5Zc9xY7QU1hn0U14xPcwj3gdfC4Y0FKE+6QF0QVV1tMk8X0VL1T3uPCk2Dya7 8CnvHivCsE+YZ9SRIT9LXkyYn+clgxe1W9N+bBI30P8xPAEsiqUfl1Kjdz18Q/68 IIy7AecQE3SggyktGXqejtgxEQ9A7OzxrvBAcsS763n0kIwl8NZlBXqfDxTv5Dds 1w3NmLS0gbF+Zg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:04 2026 by rpki-client