This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json) Hash identifier: wIAyXUGK98B0KuGEBpOetxnS8ahcsK7CEi94DPIvbcs= Subject key identifier: 2B:BF:D8:24:BF:86:39:24:42:87:83:C5:1A:3B:00:6E:2E:EC:32:15 Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72 Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672 Certificate serial: 019C42EB5043D9C06642FEC187202A0FCB5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft Manifest number: 0722 Signing time: Mon 09 Feb 2026 15:00:43 +0000 Manifest this update: Mon 09 Feb 2026 15:00:43 +0000 Manifest next update: Tue 10 Feb 2026 15:00:43 +0000 Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: vzW4TvHWjAu5IFIFx4ur1wOLr0t4ML1Su6w33D688ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:50:43:d9:c0:66:42:fe:c1:87:20:2a:0f:cb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672 Validity Not Before: Feb 9 15:00:43 2026 GMT Not After : Feb 10 15:00:43 2026 GMT Subject: CN=2bbfd824bf863924428783c51a3b006e2eec3215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:1e:c8:95:58:51:73:26:8c:5a:5b:7e:35: 02:b1:2f:95:f7:57:f7:2e:89:7d:12:be:9b:a4:d2: bf:31:e0:0a:a7:3f:38:4a:85:88:17:b9:ca:d1:01: fb:09:c5:21:fb:2a:e6:7a:9a:ae:00:88:43:95:76: b3:91:35:e9:39:4a:d8:35:eb:06:7e:70:ad:17:cc: 74:cb:64:e8:1c:40:2d:7f:5f:de:84:06:20:cf:7c: 3e:ac:d7:58:0a:a4:e2:e2:35:f8:eb:e6:d8:2b:16: de:55:ac:7a:93:ac:87:25:ac:5a:78:14:00:b8:98: 53:f9:d5:20:f1:ab:ef:57:ae:4a:d3:a5:ba:fe:00: a4:75:93:d3:81:20:b5:a2:dd:c6:dc:be:f9:ba:4b: 9a:cb:25:1b:96:30:8e:a7:ac:d7:32:0b:9d:78:4d: 6b:9f:9a:10:dc:55:48:46:5b:92:92:a7:41:9e:be: b6:f2:a4:67:c2:ae:77:48:dd:c6:65:00:0c:24:37: ae:cf:ed:94:c6:85:4d:bf:7a:38:a8:c9:83:44:e2: a1:cf:2d:e1:73:f1:e3:7b:5f:89:2c:ca:aa:f8:bd: 2f:66:11:42:1e:04:95:e5:d6:b8:6f:01:63:ae:97: 5f:a6:50:15:18:72:5a:f7:23:b9:d4:fd:54:c8:87: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BF:D8:24:BF:86:39:24:42:87:83:C5:1A:3B:00:6E:2E:EC:32:15 X509v3 Authority Key Identifier: keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a0:eb:e4:55:1e:bf:75:28:ac:d9:a4:72:92:24:0e:2f:b0: 5f:fd:5e:3c:ed:ec:fc:58:26:63:0e:e1:5e:88:28:2a:fb:91: 30:28:66:2f:f7:22:b3:f9:4c:8c:6c:77:3d:66:37:d3:ed:ca: 7e:c0:0d:79:f6:78:ff:5a:da:4d:d4:32:87:12:bd:78:17:1f: 4d:b3:e2:f1:66:f9:b5:8e:8d:e2:b4:84:1e:7a:7a:c5:7a:0d: ec:7a:ce:cd:2e:c4:82:75:9b:88:3d:2d:8d:84:45:d4:55:43: 9d:df:c9:78:17:c2:86:29:9c:b8:1d:38:5d:40:f8:15:08:9c: d0:4d:b1:7b:31:e1:21:25:cd:76:f0:10:11:62:f0:c9:03:92: e6:9b:fe:dd:c2:65:e8:ed:fa:a9:ac:82:15:0b:5a:7a:c7:0c: 16:45:72:b8:f5:1e:e6:71:67:00:71:67:d5:b6:aa:22:63:ec: a3:f3:ac:d8:82:3d:13:2e:b7:30:41:45:f6:a0:b1:d4:85:0a: c3:d0:60:9b:6b:60:30:31:bd:11:67:98:a2:23:e0:2c:1d:f0: 4d:aa:aa:38:92:09:16:7e:1c:cb:48:d5:c2:9a:0e:c7:0c:19: ac:39:38:70:12:f8:77:8a:3e:dc:a7:d3:ae:91:74:5a:b1:77: 8e:38:3b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61BD2cBmQv7BhyAqD8teMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWE0MTgwMDI3ZDkyM2Q5ZmUwYzk1NzBjOTBiOWQxMzA4 ZmE2NzIwHhcNMjYwMjA5MTUwMDQzWhcNMjYwMjEwMTUwMDQzWjAzMTEwLwYDVQQD EygyYmJmZDgyNGJmODYzOTI0NDI4NzgzYzUxYTNiMDA2ZTJlZWMzMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN0eyJVYUXMmjFpbfjUCsS+V91f3 Lol9Er6bpNK/MeAKpz84SoWIF7nK0QH7CcUh+yrmepquAIhDlXazkTXpOUrYNesG fnCtF8x0y2ToHEAtf1/ehAYgz3w+rNdYCqTi4jX46+bYKxbeVax6k6yHJaxaeBQA uJhT+dUg8avvV65K06W6/gCkdZPTgSC1ot3G3L75ukuayyUbljCOp6zXMgudeE1r n5oQ3FVIRluSkqdBnr628qRnwq53SN3GZQAMJDeuz+2UxoVNv3o4qMmDROKhzy3h c/Hje1+JLMqq+L0vZhFCHgSV5da4bwFjrpdfplAVGHJa9yO51P1UyIeJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu/2CS/hjkkQoeDxRo7AG4u7DIVMB8GA1UdIwQY MBaAFI5aQYACfZI9n+DJVwyQudEwj6ZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTIt NWY5ODdlMWVjMDM1LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTItNWY5ODdlMWVjMDM1 LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKDr5FUe v3UorNmkcpIkDi+wX/1ePO3s/FgmYw7hXogoKvuRMChmL/cis/lMjGx3PWY30+3K fsANefZ4/1raTdQyhxK9eBcfTbPi8Wb5tY6N4rSEHnp6xXoN7HrOzS7EgnWbiD0t jYRF1FVDnd/JeBfChimcuB04XUD4FQic0E2xezHhISXNdvAQEWLwyQOS5pv+3cJl 6O36qayCFQtaescMFkVyuPUe5nFnAHFn1baqImPso/Os2II9Ey63MEFF9qCx1IUK w9Bgm2tgMDG9EWeYoiPgLB3wTaqqOJIJFn4cy0jVwpoOxwwZrDk4cBL4d4o+3KfT rpF0WrF3jjg7rQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:06 2026 by rpki-client