This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json) Hash identifier: HnPjboy8BpNJKOphVNxVqs9/eJLQtBBbTrLigywtrWc= Subject key identifier: C5:92:A0:A2:24:EA:11:98:0E:FC:4B:CC:F7:28:6B:B3:A9:7B:4C:59 Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a Certificate serial: 019C439088ECEDC41B3C0BCFFE442C329016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft Manifest number: 179F Signing time: Mon 09 Feb 2026 18:01:11 +0000 Manifest this update: Mon 09 Feb 2026 18:01:11 +0000 Manifest next update: Tue 10 Feb 2026 18:01:11 +0000 Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: ajeUQl+LxavSn6e5bgnFcQOvf2G8Z1vTjE2tkZLvs1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:88:ec:ed:c4:1b:3c:0b:cf:fe:44:2c:32:90:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a Validity Not Before: Feb 9 18:01:11 2026 GMT Not After : Feb 10 18:01:11 2026 GMT Subject: CN=c592a0a224ea11980efc4bccf7286bb3a97b4c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:f8:19:db:26:34:36:ce:08:c0:d8:49:f3: 4d:5d:76:2f:4d:99:f5:d4:d5:41:f1:af:05:d4:f6: b6:3d:e6:a2:bf:8d:94:04:6b:04:2a:bb:15:e5:53: 45:54:0a:74:ea:52:d1:be:1a:87:bc:d0:0e:d1:68: 67:05:7e:24:03:55:e5:62:02:cf:b3:e7:79:c9:56: e4:04:41:e5:3e:14:40:fa:dc:ef:fa:ba:19:79:77: 15:5e:01:9f:2d:07:dd:8a:db:63:bb:a5:e5:ed:ae: b2:51:a7:82:a2:b3:e5:36:32:df:c3:e3:35:34:24: 36:f6:69:61:6a:93:0c:cf:79:53:09:d5:9c:9e:6e: 94:92:85:2c:d2:96:4e:97:96:ee:14:1e:86:c0:80: 47:ae:50:0c:e9:6d:b1:f5:4d:4a:02:c5:e0:8b:85: eb:f0:ce:51:3c:56:99:d6:a8:4d:f4:03:12:f9:40: 1e:da:a5:b1:a0:5f:7e:f6:cc:c4:97:1c:ea:29:9b: fa:6c:ac:5f:47:e7:2f:c9:16:c1:c4:3b:df:e2:97: e9:1e:ea:a1:4d:a2:33:2a:ad:8a:e6:f7:07:28:7d: 2b:88:ba:bf:80:a6:39:fe:17:b2:a5:74:f6:86:38: b5:d8:2c:87:34:c6:e5:db:7e:32:0f:9a:a8:0e:b0: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:92:A0:A2:24:EA:11:98:0E:FC:4B:CC:F7:28:6B:B3:A9:7B:4C:59 X509v3 Authority Key Identifier: keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:51:21:98:4b:3a:05:34:dc:f8:e4:ca:93:9e:19:28:7c:28: 13:76:c2:fb:fb:da:93:bb:fa:d9:48:25:ad:75:03:ce:03:54: da:02:da:c3:6e:da:8f:4a:28:9d:52:a1:81:7a:8a:d4:75:f3: 53:b0:21:e8:04:01:9b:e0:99:be:b6:7b:21:3a:f8:6d:cc:c3: 78:2d:e6:e6:10:35:8e:a8:96:f9:30:c2:57:a4:c7:cd:ae:02: d7:b7:e3:cc:cf:03:51:cb:aa:59:6b:5a:6f:25:55:55:93:ae: e3:4e:e5:3c:81:e5:26:4d:be:5a:af:9f:34:f9:8e:98:34:34: df:f9:75:c0:6b:13:35:60:0a:5d:a1:5e:99:5e:64:10:fa:14: a4:c6:68:f1:81:1d:58:9f:d2:fa:06:5f:b1:7f:de:b7:98:bb: 92:8c:cf:40:2b:38:84:0b:da:e1:21:9f:a9:4c:76:e8:d2:aa: 2f:a2:f5:0e:c7:8e:e9:bf:84:81:d9:37:bb:f5:52:46:4f:60: e0:ac:27:cb:ae:d9:8c:bb:e8:a4:80:04:96:fc:80:47:bf:23: b5:b4:b6:fd:6e:97:23:7f:53:5d:14:5f:5e:37:6d:e8:b0:c2: 2c:5b:91:63:64:e1:b0:48:35:1e:28:36:fc:0f:89:07:d5:14: 76:bb:0b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIjs7cQbPAvP/kQsMpAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWI2NzEzNmJmOTkwYWE4YmU4ODU3YTY4ZDJjMzk5ZWNk NjI5OWEwHhcNMjYwMjA5MTgwMTExWhcNMjYwMjEwMTgwMTExWjAzMTEwLwYDVQQD EyhjNTkyYTBhMjI0ZWExMTk4MGVmYzRiY2NmNzI4NmJiM2E5N2I0YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xL4GdsmNDbOCMDYSfNNXXYvTZn1 1NVB8a8F1Pa2Peaiv42UBGsEKrsV5VNFVAp06lLRvhqHvNAO0WhnBX4kA1XlYgLP s+d5yVbkBEHlPhRA+tzv+roZeXcVXgGfLQfdittju6Xl7a6yUaeCorPlNjLfw+M1 NCQ29mlhapMMz3lTCdWcnm6UkoUs0pZOl5buFB6GwIBHrlAM6W2x9U1KAsXgi4Xr 8M5RPFaZ1qhN9AMS+UAe2qWxoF9+9szElxzqKZv6bKxfR+cvyRbBxDvf4pfpHuqh TaIzKq2K5vcHKH0riLq/gKY5/heypXT2hji12CyHNMbl234yD5qoDrAIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWSoKIk6hGYDvxLzPcoa7Ope0xZMB8GA1UdIwQY MBaAFCSrZxNr+ZCqi+iFemjSw5ns1imaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkt0bkUydjVrS3FMNklWNmFOTERtZXpXS1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wODg1MjEtMjM5OC00NTdiLWIxZTMt ZGQzMzYwMzkzMzkxLzEvSkt0bkUydjVrS3FMNklWNmFOTERtZXpXS1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wODg1MjEtMjM5OC00NTdiLWIxZTMtZGQzMzYwMzkzMzkx LzEvSkt0bkUydjVrS3FMNklWNmFOTERtZXpXS1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFEhmEs6 BTTc+OTKk54ZKHwoE3bC+/vak7v62UglrXUDzgNU2gLaw27aj0oonVKhgXqK1HXz U7Ah6AQBm+CZvrZ7ITr4bczDeC3m5hA1jqiW+TDCV6THza4C17fjzM8DUcuqWWta byVVVZOu407lPIHlJk2+Wq+fNPmOmDQ03/l1wGsTNWAKXaFemV5kEPoUpMZo8YEd WJ/S+gZfsX/et5i7kozPQCs4hAva4SGfqUx26NKqL6L1DseO6b+Egdk3u/VSRk9g 4Kwny67ZjLvopIAElvyAR78jtbS2/W6XI39TXRRfXjdt6LDCLFuRY2ThsEg1Hig2 /A+JB9UUdrsLqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:19 2026 by rpki-client