This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json) Hash identifier: eCVhAvX/A2q9YT1ZcptWD1J2PMKp4v3WnbkK988HtmI= Subject key identifier: A2:AC:52:A2:5F:6D:7F:75:9D:C5:8C:6A:86:75:C2:E9:E4:B5:A8:EE Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c Certificate serial: 019C42B42546E178B18CCC084CBB47758E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft Manifest number: 036E Signing time: Mon 09 Feb 2026 14:00:28 +0000 Manifest this update: Mon 09 Feb 2026 14:00:28 +0000 Manifest next update: Tue 10 Feb 2026 14:00:28 +0000 Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: OSppHBF0X9gpTYMuaSoyyhe38PXMlo6jmXzSKqS30SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:25:46:e1:78:b1:8c:cc:08:4c:bb:47:75:8e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c Validity Not Before: Feb 9 14:00:28 2026 GMT Not After : Feb 10 14:00:28 2026 GMT Subject: CN=a2ac52a25f6d7f759dc58c6a8675c2e9e4b5a8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:09:23:df:32:f7:f9:81:f3:0c:5e:be:1d: 4a:f9:d3:e9:e1:fc:42:cc:1b:a8:7f:c5:cc:00:9a: 1b:fd:32:74:7e:3a:08:89:6a:58:f8:40:60:a8:e9: 05:cf:44:77:3c:74:a2:33:ad:68:ce:91:13:24:86: c8:1b:7f:27:84:4c:af:c6:45:3d:3e:bf:73:f5:21: 0f:04:20:bd:48:c3:28:c7:fb:19:88:ad:60:42:b5: 32:39:18:f7:71:3c:0e:4e:70:53:42:6d:2f:51:1b: ac:23:e4:9a:e4:e0:9a:40:29:41:d4:7c:6a:8a:c7: 67:f3:99:11:40:2b:fc:4a:6f:bb:e0:b2:44:72:2b: 7a:09:96:fb:12:28:34:5e:f0:e1:68:d1:2e:a6:47: fe:54:22:0a:17:38:af:02:4a:7e:3b:b9:37:59:6b: c7:a4:64:b3:d3:15:38:23:8c:94:a1:4d:be:68:30: e9:a0:fe:ce:e7:72:a6:34:15:f6:60:a0:11:1a:f6: 29:fa:a8:7e:f9:53:b5:7d:f8:c2:52:c4:5a:bb:b7: 56:14:6e:9e:aa:9a:d8:10:9b:26:09:62:12:01:99: 00:a7:d8:a9:47:ab:de:fd:a9:fc:04:60:c7:46:65: 1f:da:68:f7:29:7c:6c:54:a3:64:84:68:6b:b8:38: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AC:52:A2:5F:6D:7F:75:9D:C5:8C:6A:86:75:C2:E9:E4:B5:A8:EE X509v3 Authority Key Identifier: keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:59:d6:ba:67:d0:21:20:42:d6:c9:e4:e8:46:cc:69:1a:df: 78:45:31:92:da:c5:8b:37:ef:94:b2:75:01:88:c5:ec:e1:a0: 68:79:42:52:0d:f8:1a:da:cc:3d:ab:83:7f:cc:77:f6:1b:37: c9:9e:38:02:32:ec:5f:6e:db:83:25:91:19:1a:80:27:32:cb: 0a:2d:8b:98:e1:16:0e:06:c3:73:2e:ef:bd:8d:86:07:2d:19: 38:9c:64:ab:53:d2:82:6f:f2:2f:06:fc:25:b1:6a:56:34:2c: 75:5b:0d:fb:9b:05:06:76:c2:74:95:fd:9a:d2:b8:78:5b:12: 61:a0:cf:12:b3:16:97:67:23:07:53:e0:88:38:b2:9c:fe:3d: 61:6f:41:ff:5f:9e:eb:3a:7b:b6:b3:61:56:58:88:1b:75:1b: 5c:49:6a:e7:39:03:d2:0f:fc:de:86:a1:83:36:95:c1:9a:b0: c9:74:02:b4:82:3e:80:91:dd:19:f3:b5:e8:6b:e5:8c:0d:21: 35:d0:ec:f3:c4:0e:3f:cd:5b:c7:55:49:28:e1:d3:94:dd:ed: b8:20:f2:38:74:09:de:89:ee:ef:80:95:7c:7d:4a:15:cd:97: 28:f1:37:27:33:2f:58:05:f7:ca:f0:89:96:d4:16:b1:64:cf: 9e:f2:84:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCVG4XixjMwITLtHdY6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NmJmNDY5ODczMmRhNWZiYzdjMjAwMmY2Mzk2N2M2OGY1 NmRiNmMwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD EyhhMmFjNTJhMjVmNmQ3Zjc1OWRjNThjNmE4Njc1YzJlOWU0YjVhOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MoJI98y9/mB8wxevh1K+dPp4fxC zBuof8XMAJob/TJ0fjoIiWpY+EBgqOkFz0R3PHSiM61ozpETJIbIG38nhEyvxkU9 Pr9z9SEPBCC9SMMox/sZiK1gQrUyORj3cTwOTnBTQm0vURusI+Sa5OCaQClB1Hxq isdn85kRQCv8Sm+74LJEcit6CZb7Eig0XvDhaNEupkf+VCIKFzivAkp+O7k3WWvH pGSz0xU4I4yUoU2+aDDpoP7O53KmNBX2YKARGvYp+qh++VO1ffjCUsRau7dWFG6e qprYEJsmCWISAZkAp9ipR6ve/an8BGDHRmUf2mj3KXxsVKNkhGhruDiN2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKsUqJfbX91ncWMaoZ1wunktajuMB8GA1UdIwQY MBaAFCRr9GmHMtpfvHwgAvY5Z8aPVttsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYt ZjUxMjJiYWMxNGFhLzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZjk2NjYtOTA0YS00NjIyLTkwNjYtZjUxMjJiYWMxNGFh LzEvSkd2MGFZY3kybC04ZkNBQzlqbG54bzlXMjJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlnWumfQ ISBC1snk6EbMaRrfeEUxktrFizfvlLJ1AYjF7OGgaHlCUg34GtrMPauDf8x39hs3 yZ44AjLsX27bgyWRGRqAJzLLCi2LmOEWDgbDcy7vvY2GBy0ZOJxkq1PSgm/yLwb8 JbFqVjQsdVsN+5sFBnbCdJX9mtK4eFsSYaDPErMWl2cjB1PgiDiynP49YW9B/1+e 6zp7trNhVliIG3UbXElq5zkD0g/83oahgzaVwZqwyXQCtII+gJHdGfO16GvljA0h NdDs88QOP81bx1VJKOHTlN3tuCDyOHQJ3onu74CVfH1KFc2XKPE3JzMvWAX3yvCJ ltQWsWTPnvKEXw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:08 2026 by rpki-client