This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json) Hash identifier: /7DOqffvcdg4shAaGoD5n4WX+kW0FKcNiblcu0efnOs= Subject key identifier: FB:0E:75:B2:21:C5:A2:BC:9B:00:F7:79:94:8E:58:50:BD:5B:FA:20 Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Certificate serial: 019C42EAE5AED8825841B22B54EF6DC60F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft Manifest number: 1275 Signing time: Mon 09 Feb 2026 15:00:16 +0000 Manifest this update: Mon 09 Feb 2026 15:00:16 +0000 Manifest next update: Tue 10 Feb 2026 15:00:16 +0000 Files and hashes: 1: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (hash: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY=) 2: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: NRAxQWTRzVI0fjWwoNsGiJX5qX3is5cSlSTF0aG7HTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e5:ae:d8:82:58:41:b2:2b:54:ef:6d:c6:0f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Validity Not Before: Feb 9 15:00:16 2026 GMT Not After : Feb 10 15:00:16 2026 GMT Subject: CN=fb0e75b221c5a2bc9b00f779948e5850bd5bfa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:be:6d:4e:55:82:78:5f:5b:63:98:fb:01: 54:43:34:a2:d0:81:d2:40:c3:55:73:9c:4a:40:6c: 14:be:0e:25:ea:98:3d:e0:5a:ca:df:a8:a8:38:38: c7:68:30:d5:6d:d3:07:2d:e4:9b:b8:a8:e2:f0:7a: a7:9f:d1:6b:7f:09:0b:31:26:af:4d:a8:bd:0f:b0: 76:67:68:60:5b:e9:b9:d7:4b:60:a5:27:6d:cc:72: 3c:7c:21:48:ab:1b:c8:2f:e3:c7:76:63:fc:50:d1: a7:78:ad:14:fd:12:88:c2:d7:f3:f7:ab:95:d2:cf: 52:6d:66:94:6f:61:99:aa:ac:c0:f1:7c:5a:83:0c: c7:99:eb:7f:b6:f5:29:27:dc:3d:64:01:75:7c:cc: 55:ed:5e:84:13:4f:70:21:20:91:17:1e:9e:1c:52: c0:a7:7c:93:b2:6b:a2:6e:05:39:19:97:be:81:60: 95:9f:6c:12:53:31:18:d7:d2:47:a8:5b:81:45:2b: 00:87:ff:5d:fe:d2:c0:a2:06:bb:bf:b6:74:17:c3: 73:0f:fc:1b:71:6e:d5:d6:0a:c2:0a:81:02:e3:95: e4:ec:7a:3b:a4:10:87:a4:82:30:38:1b:48:58:2e: a8:d0:73:da:d3:63:63:67:aa:6f:5e:9e:dd:04:c3: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0E:75:B2:21:C5:A2:BC:9B:00:F7:79:94:8E:58:50:BD:5B:FA:20 X509v3 Authority Key Identifier: keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8c:b9:be:06:85:c4:cd:e2:91:d0:a9:33:51:54:6c:3b:f3: a5:f3:8d:df:ce:6d:01:81:65:53:2b:a0:fb:27:14:13:7a:6a: 28:6f:d6:0a:82:2c:fc:dd:d4:ee:38:2c:4f:5c:7f:e4:6c:50: 9f:20:8d:bc:b4:71:ae:c2:ea:aa:48:77:a2:b2:6e:ff:70:0a: d3:1d:15:ff:03:a3:1e:d0:d3:ea:10:60:6c:a4:67:bc:0c:c0: be:3c:60:f0:6d:09:fa:a1:d9:69:dd:9a:b4:69:b5:51:dd:59: 2d:5a:ab:aa:58:22:27:75:0e:17:ff:09:c7:6a:ac:59:77:31: 2b:ed:bc:c3:72:4c:b6:68:c8:11:80:4f:2e:8f:d5:ed:66:eb: 76:da:f7:f5:2a:70:32:92:af:54:a9:9e:f5:4a:cd:a0:48:33: d6:c9:ef:9f:07:80:f9:d0:db:5e:bf:66:c5:7c:a0:9a:36:a6: 71:90:b1:e6:b6:86:70:be:0d:c7:0a:5c:84:a8:52:39:35:df: 84:f2:47:bb:1c:05:d2:4c:a5:ca:88:a9:aa:42:ae:93:1f:33: 8c:dd:47:20:f5:7d:62:43:85:12:12:77:65:a0:54:84:e5:46: 18:ac:4c:ed:ab:14:a2:94:00:83:8a:af:3a:f0:15:03:f3:74: 7a:fd:ee:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uWu2IJYQbIrVO9txg9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm ZTYyZTcwHhcNMjYwMjA5MTUwMDE2WhcNMjYwMjEwMTUwMDE2WjAzMTEwLwYDVQQD EyhmYjBlNzViMjIxYzVhMmJjOWIwMGY3Nzk5NDhlNTg1MGJkNWJmYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnu+bU5VgnhfW2OY+wFUQzSi0IHS QMNVc5xKQGwUvg4l6pg94FrK36ioODjHaDDVbdMHLeSbuKji8Hqnn9FrfwkLMSav Tai9D7B2Z2hgW+m510tgpSdtzHI8fCFIqxvIL+PHdmP8UNGneK0U/RKIwtfz96uV 0s9SbWaUb2GZqqzA8XxagwzHmet/tvUpJ9w9ZAF1fMxV7V6EE09wISCRFx6eHFLA p3yTsmuibgU5GZe+gWCVn2wSUzEY19JHqFuBRSsAh/9d/tLAoga7v7Z0F8NzD/wb cW7V1grCCoEC45Xk7Ho7pBCHpIIwOBtIWC6o0HPa02NjZ6pvXp7dBMOsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsOdbIhxaK8mwD3eZSOWFC9W/ogMB8GA1UdIwQY MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt Mzk0ZjUwZDRiYTM4LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4 LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoy5vgaF xM3ikdCpM1FUbDvzpfON385tAYFlUyug+ycUE3pqKG/WCoIs/N3U7jgsT1x/5GxQ nyCNvLRxrsLqqkh3orJu/3AK0x0V/wOjHtDT6hBgbKRnvAzAvjxg8G0J+qHZad2a tGm1Ud1ZLVqrqlgiJ3UOF/8Jx2qsWXcxK+28w3JMtmjIEYBPLo/V7Wbrdtr39Spw MpKvVKme9UrNoEgz1snvnweA+dDbXr9mxXygmjamcZCx5raGcL4NxwpchKhSOTXf hPJHuxwF0kylyoipqkKukx8zjN1HIPV9YkOFEhJ3ZaBUhOVGGKxM7asUopQAg4qv OvAVA/N0ev3ubA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:56 2026 by rpki-client