This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json) Hash identifier: PdjPyqjKedP0urTs5Fo5fynKR4WpmgxqQiKmhq/mrSc= Subject key identifier: 24:D2:04:0D:A0:E0:4E:61:6F:65:CD:61:A8:65:74:A4:BD:B9:EE:EA Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b Certificate serial: 019C420FCD48643812D94FBAB5EE57DBACE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft Manifest number: 163B Signing time: Mon 09 Feb 2026 11:00:57 +0000 Manifest this update: Mon 09 Feb 2026 11:00:57 +0000 Manifest next update: Tue 10 Feb 2026 11:00:57 +0000 Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: Rj8sBC+Jvtiw1Kq34JOs1FjfuWwm2hDBoIWANIwAIkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:cd:48:64:38:12:d9:4f:ba:b5:ee:57:db:ac:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2546049998791fe85770313ba660c4125192980b Validity Not Before: Feb 9 11:00:57 2026 GMT Not After : Feb 10 11:00:57 2026 GMT Subject: CN=24d2040da0e04e616f65cd61a86574a4bdb9eeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:a9:2d:a1:d2:f3:8a:f2:48:1e:77:d2:3b: 7e:42:45:be:f3:59:7d:ca:4d:4c:0b:b4:f2:dd:55: fd:a1:4e:77:02:eb:35:5c:b5:de:4a:75:4a:c4:5f: ef:d9:f0:08:5f:5d:2c:c2:34:82:cd:a3:a7:2a:3f: 54:ad:d2:a2:d6:c0:58:71:71:d5:fe:3e:d9:12:24: 29:29:e2:2d:bc:b7:8f:b9:fa:1b:37:6d:ab:59:49: a5:4d:9e:c0:6e:3d:9d:d2:30:22:3a:9d:2b:7d:29: fd:92:13:fc:d0:f2:79:e3:88:22:62:ea:d7:58:77: ac:2a:b6:c9:1e:a2:65:ab:f2:bc:28:37:85:f3:71: e0:cc:52:fe:06:00:99:75:93:14:89:9b:5b:4f:e2: 45:9b:67:64:0a:1c:79:41:8c:41:5f:41:eb:60:35: 73:36:cd:e9:a8:d9:19:83:d8:4c:f8:68:09:94:4a: ed:3e:ed:38:39:d6:da:aa:97:90:b8:37:7f:66:c8: d2:ad:60:d5:10:8d:e6:e0:af:6e:c1:91:b4:8b:02: 31:f9:c5:79:41:65:4a:a1:3c:2a:bc:85:05:a3:e8: 57:d5:67:af:08:7d:36:26:68:fd:39:14:c5:15:0b: 82:ea:e2:78:2b:32:de:dc:b6:df:cc:68:1e:1b:a0: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:04:0D:A0:E0:4E:61:6F:65:CD:61:A8:65:74:A4:BD:B9:EE:EA X509v3 Authority Key Identifier: keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f7:66:34:5a:c4:ba:d3:ae:cc:99:80:4d:70:de:e9:4d:b6: db:0f:49:03:8d:4e:a8:92:2d:a2:c3:0b:03:cb:e0:79:c6:e9: c6:01:0c:d3:32:68:7b:63:49:fa:ae:f0:15:eb:4a:30:5e:3b: 17:f8:3d:54:05:a7:6c:77:13:0f:d0:b0:66:2d:4c:50:76:62: d0:34:f2:6e:87:c3:3a:e2:e5:81:49:a1:9a:a3:21:2e:fc:32: 28:1f:7d:3d:75:3e:80:1d:f7:e5:4b:54:29:d9:3e:9a:49:fd: df:c3:26:6c:d7:e8:4a:15:db:ed:fa:17:7e:69:d1:38:64:3f: 1f:e4:2e:ce:ea:a5:0a:f8:04:1a:26:7c:5c:46:5c:02:b9:8f: 9c:10:9f:e2:c3:65:8d:14:1a:d5:57:0e:92:5f:3d:1f:c6:c7: 1e:d4:ee:05:14:ef:34:9b:6a:84:3c:c3:11:b2:f0:f3:dc:12: d9:18:d6:91:b6:09:d1:da:3f:75:76:a2:74:f0:6b:c0:72:41: c2:1b:85:9d:3b:40:17:9c:c8:c7:b9:ff:66:b4:4c:71:1b:c0: ce:44:48:76:0d:3f:52:17:6f:99:3a:d3:fa:f1:f4:df:e8:41: 6e:24:84:8c:7d:5d:c8:de:3f:51:5d:cc:f9:ec:d6:0c:1e:f6: c9:d5:bd:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD81IZDgS2U+6te5X26ziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDYwNDk5OTg3OTFmZTg1NzcwMzEzYmE2NjBjNDEyNTE5 Mjk4MGIwHhcNMjYwMjA5MTEwMDU3WhcNMjYwMjEwMTEwMDU3WjAzMTEwLwYDVQQD EygyNGQyMDQwZGEwZTA0ZTYxNmY2NWNkNjFhODY1NzRhNGJkYjllZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr+pLaHS84rySB530jt+QkW+81l9 yk1MC7Ty3VX9oU53Aus1XLXeSnVKxF/v2fAIX10swjSCzaOnKj9UrdKi1sBYcXHV /j7ZEiQpKeItvLePufobN22rWUmlTZ7Abj2d0jAiOp0rfSn9khP80PJ544giYurX WHesKrbJHqJlq/K8KDeF83HgzFL+BgCZdZMUiZtbT+JFm2dkChx5QYxBX0HrYDVz Ns3pqNkZg9hM+GgJlErtPu04OdbaqpeQuDd/ZsjSrWDVEI3m4K9uwZG0iwIx+cV5 QWVKoTwqvIUFo+hX1WevCH02Jmj9ORTFFQuC6uJ4KzLe3LbfzGgeG6DQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTSBA2g4E5hb2XNYahldKS9ue7qMB8GA1UdIwQY MBaAFCVGBJmYeR/oV3AxO6ZgxBJRkpgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2Et MWM1MWIzMzNkZmZiLzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2EtMWM1MWIzMzNkZmZi LzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/dmNFrE utOuzJmATXDe6U222w9JA41OqJItosMLA8vgecbpxgEM0zJoe2NJ+q7wFetKMF47 F/g9VAWnbHcTD9CwZi1MUHZi0DTybofDOuLlgUmhmqMhLvwyKB99PXU+gB335UtU Kdk+mkn938MmbNfoShXb7foXfmnROGQ/H+QuzuqlCvgEGiZ8XEZcArmPnBCf4sNl jRQa1VcOkl89H8bHHtTuBRTvNJtqhDzDEbLw89wS2RjWkbYJ0do/dXaidPBrwHJB whuFnTtAF5zIx7n/ZrRMcRvAzkRIdg0/UhdvmTrT+vH03+hBbiSEjH1dyN4/UV3M +ezWDB72ydW9DA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:13 2026 by rpki-client