This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json) Hash identifier: KXavi4u8Qe415Dhg3ERrtWakLdH2BLcqY0I+a9LMpxE= Subject key identifier: EC:BA:AA:27:DE:D0:F0:4C:9B:68:2D:43:4C:C3:3B:85:66:89:D8:DD Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb Certificate serial: 019C4322D85C0A2E7FA49289D4D9510DCBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft Manifest number: 0B56 Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: ew7Rb6LyV45En8dOVhjtb+awQXOB3r1OPEyAXI0XJ0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d8:5c:0a:2e:7f:a4:92:89:d4:d9:51:0d:cb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=ecbaaa27ded0f04c9b682d434cc33b856689d8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e3:a0:89:2c:00:38:aa:12:8e:79:3e:74:bd: 88:b0:66:4c:4a:4f:ff:f1:7e:e2:14:7a:44:52:42: 79:44:c2:c7:da:01:9b:b0:67:d3:be:bd:d7:04:b8: 10:23:6b:a6:8a:07:ad:3a:54:35:f8:13:9f:1d:ac: 2a:60:1a:8d:86:48:f7:67:32:47:f1:56:f2:38:9c: 54:6c:29:94:87:90:c5:48:40:4d:62:07:33:06:a3: bb:c4:cb:02:0c:90:94:cc:6a:d6:61:4b:00:71:39: 63:c3:a3:25:24:26:b5:fa:af:1f:dc:53:5e:d1:e3: 91:d0:0f:6c:b3:0b:aa:e5:48:ef:7b:2a:81:ca:0f: b3:ab:a4:bf:af:fb:f2:6a:5e:8c:64:63:1c:db:4f: cd:77:fe:37:c8:dd:81:61:61:b2:b0:8c:6c:cd:39: f2:6a:68:a1:c7:32:44:08:d8:fc:1d:80:c3:8c:ad: d3:36:db:48:74:9a:07:47:dc:3b:92:25:07:ae:34: 1b:cf:1e:a5:42:9d:67:6d:e3:e8:7f:ef:10:e7:c3: 49:d4:48:d7:5c:bd:ec:61:2e:b1:8f:d4:ea:a0:33: c6:9f:f5:79:f2:68:fc:01:ee:6d:7f:96:38:f6:7e: a2:8f:bc:00:44:63:89:aa:af:af:cb:60:96:bb:99: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BA:AA:27:DE:D0:F0:4C:9B:68:2D:43:4C:C3:3B:85:66:89:D8:DD X509v3 Authority Key Identifier: keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:82:5d:d6:54:22:3e:3d:8a:8b:ae:8a:41:77:d9:42:8b:7f: ef:a4:0a:41:81:14:c7:5a:4d:79:44:bd:35:72:6a:93:3d:39: dc:da:d2:98:24:6b:a7:7c:12:c8:0e:29:7b:f4:68:28:74:b5: 42:a0:ca:fc:f2:ca:c4:78:cb:5b:90:ef:8e:26:8e:2b:0c:92: ed:d0:60:d8:43:5e:29:bc:5d:88:0d:7e:93:66:68:9d:bf:c7: f5:28:6c:d1:85:9d:03:08:29:39:c2:79:ce:24:4e:6a:b5:60: fb:ac:fc:85:fd:71:72:ad:f8:50:a7:5b:1f:f8:7e:f0:7e:cd: 5c:d2:1e:35:34:9a:9d:3d:2a:75:64:a3:53:d4:7c:47:75:f8: 32:e8:77:5f:a9:e1:31:8c:3f:c7:5a:21:43:84:b6:44:b3:9c: bf:5e:ab:70:90:fa:b9:02:26:3c:55:dd:b0:19:1b:09:ce:e6: 8f:49:4a:d4:df:45:1d:56:d7:70:72:03:69:bf:b6:a3:a1:06: c6:c6:58:5a:70:9e:f6:7e:3f:c8:0d:ba:43:e9:7f:d6:4d:6c: 90:2d:da:f1:81:8b:44:19:ef:68:41:0d:ec:e2:c8:df:c0:d6: 4b:f1:2a:9a:ee:19:e8:f3:73:36:b2:c5:15:b2:40:ab:5b:22: 7d:eb:c8:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIthcCi5/pJKJ1NlRDcvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDQzZTNlMDNhNjdmOTQ2ZTYzYjIyNWY0M2M5MTRiYjkz MjVjY2IwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD EyhlY2JhYWEyN2RlZDBmMDRjOWI2ODJkNDM0Y2MzM2I4NTY2ODlkOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieOgiSwAOKoSjnk+dL2IsGZMSk// 8X7iFHpEUkJ5RMLH2gGbsGfTvr3XBLgQI2umigetOlQ1+BOfHawqYBqNhkj3ZzJH 8VbyOJxUbCmUh5DFSEBNYgczBqO7xMsCDJCUzGrWYUsAcTljw6MlJCa1+q8f3FNe 0eOR0A9sswuq5UjveyqByg+zq6S/r/vyal6MZGMc20/Nd/43yN2BYWGysIxszTny amihxzJECNj8HYDDjK3TNttIdJoHR9w7kiUHrjQbzx6lQp1nbePof+8Q58NJ1EjX XL3sYS6xj9TqoDPGn/V58mj8Ae5tf5Y49n6ij7wARGOJqq+vy2CWu5mELwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy6qife0PBMm2gtQ0zDO4VmidjdMB8GA1UdIwQY MBaAFCVEPj4Dpn+UbmOyJfQ8kUu5MlzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVRLVBnT21mNVJ1WTdJbDlEeVJTN2t5WE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjcwZmQtODZkYy00ZDVjLWFmN2Ut NjJhNmUyODY2ZmMzLzEvSlVRLVBnT21mNVJ1WTdJbDlEeVJTN2t5WE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iZjcwZmQtODZkYy00ZDVjLWFmN2UtNjJhNmUyODY2ZmMz LzEvSlVRLVBnT21mNVJ1WTdJbDlEeVJTN2t5WE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4Jd1lQi Pj2Ki66KQXfZQot/76QKQYEUx1pNeUS9NXJqkz053NrSmCRrp3wSyA4pe/RoKHS1 QqDK/PLKxHjLW5DvjiaOKwyS7dBg2ENeKbxdiA1+k2Zonb/H9Shs0YWdAwgpOcJ5 ziROarVg+6z8hf1xcq34UKdbH/h+8H7NXNIeNTSanT0qdWSjU9R8R3X4Muh3X6nh MYw/x1ohQ4S2RLOcv16rcJD6uQImPFXdsBkbCc7mj0lK1N9FHVbXcHIDab+2o6EG xsZYWnCe9n4/yA26Q+l/1k1skC3a8YGLRBnvaEEN7OLI38DWS/Eqmu4Z6PNzNrLF FbJAq1sifevIZw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:05 2026 by rpki-client