This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json) Hash identifier: jKtbrBfeZg73mbcCaNinMB76VoiP/zcxtZemsEOqEcc= Subject key identifier: 56:F9:DD:8A:F7:64:8E:60:10:34:CD:CB:60:D0:71:ED:9C:7D:5A:7B Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Certificate serial: 019C4322235F4F47C1D4F585EB1CDCC4DA68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft Manifest number: 133D Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: lcEDPX0hpivkZ5e/xBDXg5rB5NCYWk3hXUsWgqaDGGk=) 2: lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa (hash: xvNGFNidv1bMhY2UzHVCI87XTEPnytAR765b+Q4yrpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:23:5f:4f:47:c1:d4:f5:85:eb:1c:dc:c4:da:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=56f9dd8af7648e601034cdcb60d071ed9c7d5a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:48:3b:38:f1:70:43:22:1d:89:d4:bb:44: 60:f4:e9:3c:ae:34:86:15:80:ee:a9:00:e9:d0:8e: f8:6e:61:08:18:8c:58:5c:82:74:65:01:34:8d:b8: ac:4e:81:dc:6e:17:e2:70:f5:de:17:c3:0c:f4:88: 30:28:fd:1d:4d:10:7f:b5:c3:6c:f0:26:f1:4c:36: e8:cc:34:03:1a:e2:c0:15:e9:ce:d1:92:66:12:e4: e2:34:20:a3:41:05:06:36:6c:58:3b:1d:12:73:17: c3:24:28:0e:2c:1a:cb:ce:1a:fe:81:c4:76:43:7f: 3d:3d:6e:0f:84:4d:7a:cb:cf:70:61:e0:c1:62:b8: fc:54:71:d9:3c:ba:69:65:1c:1e:17:c9:37:10:7f: 16:99:5b:df:ad:ab:ef:35:3e:59:44:5f:ee:32:05: bf:33:ea:8f:f1:04:92:91:f3:1f:77:17:36:bf:7f: cc:88:8f:80:a2:56:2b:ea:63:3e:a9:74:85:9a:ae: cf:f6:a9:ae:7b:21:46:94:f9:51:ae:29:70:1b:8e: 8a:de:b7:6e:6a:ce:d6:ad:ac:92:5d:9e:d4:b7:13: 2d:61:71:38:01:40:c6:95:a8:2f:c2:36:94:ec:37: 39:03:5b:60:ab:22:43:07:9e:4f:56:37:c1:0c:d7: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:DD:8A:F7:64:8E:60:10:34:CD:CB:60:D0:71:ED:9C:7D:5A:7B X509v3 Authority Key Identifier: keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b8:48:90:3b:08:ca:fa:fe:c0:83:c4:3c:d6:d4:a5:d1:be: e8:7c:0e:a4:73:59:8c:e6:85:71:94:b6:d9:b7:83:7b:98:2f: ad:90:a3:4d:42:12:b3:c2:ad:79:fa:bb:3f:51:4c:7d:ee:57: b5:22:be:36:71:b3:d1:bb:0b:ad:aa:71:83:b4:65:b8:73:81: ff:1c:b0:4c:70:ea:26:ff:07:63:8a:4a:b4:d0:41:96:7e:60: 41:62:1f:84:10:04:60:70:6a:3a:2d:0f:81:4b:fa:2b:d7:4d: 4f:98:04:42:12:ac:f3:ae:da:f2:98:1e:b7:17:c9:60:2e:8b: 10:d1:69:1a:73:d3:0d:34:d8:d6:6e:cb:6c:8a:a9:0b:58:ab: f9:58:92:e7:a6:13:ac:13:84:f8:10:cb:07:3c:86:37:c1:bd: ae:25:4c:eb:36:53:fd:ee:45:f7:02:04:cc:e8:14:be:39:be: b7:89:c5:6d:f4:08:5f:5b:f9:41:e6:94:17:58:77:70:f4:e1: 74:13:0c:9f:7f:e6:7e:a8:e7:41:af:38:74:ad:f9:c5:cd:57: b2:01:6b:00:4b:4a:95:dc:c4:48:17:b5:99:b8:62:0b:f4:bd: 13:ab:61:c0:a4:63:62:78:20:2a:2e:26:cd:29:2c:94:57:74: 3a:9d:3f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiNfT0fB1PWF6xzcxNpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl NDZhMzMwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD Eyg1NmY5ZGQ4YWY3NjQ4ZTYwMTAzNGNkY2I2MGQwNzFlZDljN2Q1YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGVIOzjxcEMiHYnUu0Rg9Ok8rjSG FYDuqQDp0I74bmEIGIxYXIJ0ZQE0jbisToHcbhficPXeF8MM9IgwKP0dTRB/tcNs 8CbxTDbozDQDGuLAFenO0ZJmEuTiNCCjQQUGNmxYOx0ScxfDJCgOLBrLzhr+gcR2 Q389PW4PhE16y89wYeDBYrj8VHHZPLppZRweF8k3EH8WmVvfravvNT5ZRF/uMgW/ M+qP8QSSkfMfdxc2v3/MiI+AolYr6mM+qXSFmq7P9qmueyFGlPlRrilwG46K3rdu as7WraySXZ7UtxMtYXE4AUDGlagvwjaU7Dc5A1tgqyJDB55PVjfBDNc98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb53Yr3ZI5gEDTNy2DQce2cfVp7MB8GA1UdIwQY MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2 LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrhIkDsI yvr+wIPEPNbUpdG+6HwOpHNZjOaFcZS22beDe5gvrZCjTUISs8Ktefq7P1FMfe5X tSK+NnGz0bsLrapxg7RluHOB/xywTHDqJv8HY4pKtNBBln5gQWIfhBAEYHBqOi0P gUv6K9dNT5gEQhKs867a8pgetxfJYC6LENFpGnPTDTTY1m7LbIqpC1ir+ViS56YT rBOE+BDLBzyGN8G9riVM6zZT/e5F9wIEzOgUvjm+t4nFbfQIX1v5QeaUF1h3cPTh dBMMn3/mfqjnQa84dK35xc1XsgFrAEtKldzESBe1mbhiC/S9E6thwKRjYnggKi4m zSkslFd0Op0/Dg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:11 2026 by rpki-client