This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json) Hash identifier: Nsb92p1oaUEij3SN+eqT12pfzJvJC6idAc85De6D/i4= Subject key identifier: C4:88:32:5B:96:8A:24:D7:CF:AB:51:14:03:26:ED:E3:83:CB:8D:DA Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd Certificate serial: 019C42EB38AD6D211E291CF486FC257B6FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft Manifest number: 119C Signing time: Mon 09 Feb 2026 15:00:37 +0000 Manifest this update: Mon 09 Feb 2026 15:00:37 +0000 Manifest next update: Tue 10 Feb 2026 15:00:37 +0000 Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: ngWdCzYqNIFC1mn38RjbOyflXXa7ralkKP+jJvGf6zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:38:ad:6d:21:1e:29:1c:f4:86:fc:25:7b:6f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd Validity Not Before: Feb 9 15:00:37 2026 GMT Not After : Feb 10 15:00:37 2026 GMT Subject: CN=c488325b968a24d7cfab51140326ede383cb8dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:aa:b0:01:46:84:ee:1b:ac:d2:a3:40:b8: 05:7d:82:b4:64:97:02:ad:a2:ec:fc:d9:d9:7d:5a: 85:9a:28:79:b0:f2:92:d4:61:12:81:3e:bf:44:70: 3a:04:0d:7f:23:95:99:71:da:2b:b2:b8:f8:e5:d6: c3:17:73:ca:5a:02:9d:ab:38:55:4e:13:53:9d:86: 2c:56:0e:c0:36:fa:65:88:64:28:9c:14:7c:0e:1e: 95:2b:5d:89:36:27:67:1c:c5:28:37:ed:2a:87:9b: bf:33:c9:6f:f3:e3:d0:c9:8b:ea:76:01:b9:cd:b4: 19:22:e1:88:41:f8:ee:3e:1e:53:78:ff:42:eb:cf: 25:6a:f7:86:43:c8:f8:d2:52:d9:f3:a5:e0:5f:68: 0f:2a:58:35:3c:9b:65:57:fd:8c:ed:19:be:57:33: fe:7a:52:cb:3a:20:49:39:80:96:ed:56:d0:e7:f0: 44:a1:8e:99:f9:8a:4d:9f:1e:81:9e:ff:f9:cf:1a: 81:3b:7b:17:50:3e:76:53:5b:53:e7:4b:fc:16:4e: 3d:d8:38:f1:73:24:fe:ef:62:56:76:c0:52:b7:47: ef:27:d3:35:66:2e:09:e6:35:37:e2:84:4e:c5:06: 27:bc:92:a9:2a:6a:af:0d:0f:48:6a:fb:04:ab:c2: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:32:5B:96:8A:24:D7:CF:AB:51:14:03:26:ED:E3:83:CB:8D:DA X509v3 Authority Key Identifier: keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3f:f4:b4:83:25:72:af:ed:da:31:4f:3b:18:eb:80:2e:5f: 0d:dc:cb:5f:c1:22:4a:e5:8c:22:34:e0:d3:6c:a7:44:b1:98: 59:ce:2e:39:ab:ec:10:19:c0:1b:82:e2:51:a5:35:60:1e:ef: a9:ce:7f:35:28:22:6c:e7:90:47:4d:a9:47:2b:46:f3:b5:1d: f8:10:ac:e3:e3:ff:e2:8a:62:9e:9c:89:c3:50:6b:f8:d6:eb: 7d:04:17:bb:36:50:48:ae:a9:b8:35:f1:ff:e1:31:45:42:2b: 9f:cb:d1:f8:a0:9d:79:32:0d:64:9d:34:c9:3a:96:7e:fb:4f: 4e:e3:06:9f:db:6d:32:f0:3f:c3:e2:09:1a:08:e6:55:56:cb: f7:56:e2:92:ed:8c:29:3f:35:58:52:46:5a:db:a2:04:64:99: 1c:e0:b0:c6:67:1c:d5:3c:88:20:3b:d5:d4:56:d0:96:a4:23: 44:44:dc:8e:97:21:39:28:5a:ab:85:48:a3:39:82:ec:40:7b: ff:b2:84:23:d7:ce:63:59:a1:fa:e8:f7:1e:67:5d:cb:2a:81: 84:df:01:f7:6f:b9:48:ad:ee:57:91:4a:7f:22:04:9c:0b:35: 78:41:64:0b:9b:55:cd:bd:74:f2:01:c2:fd:e0:1d:2e:1e:1a: 4a:8d:91:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zitbSEeKRz0hvwle2+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODc2YWE5MTdiNmQwMWQ5NGZmMjU2NjJiMDhmYjIxM2Yw ZmU3YmQwHhcNMjYwMjA5MTUwMDM3WhcNMjYwMjEwMTUwMDM3WjAzMTEwLwYDVQQD EyhjNDg4MzI1Yjk2OGEyNGQ3Y2ZhYjUxMTQwMzI2ZWRlMzgzY2I4ZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXWqsAFGhO4brNKjQLgFfYK0ZJcC raLs/NnZfVqFmih5sPKS1GESgT6/RHA6BA1/I5WZcdorsrj45dbDF3PKWgKdqzhV ThNTnYYsVg7ANvpliGQonBR8Dh6VK12JNidnHMUoN+0qh5u/M8lv8+PQyYvqdgG5 zbQZIuGIQfjuPh5TeP9C688laveGQ8j40lLZ86XgX2gPKlg1PJtlV/2M7Rm+VzP+ elLLOiBJOYCW7VbQ5/BEoY6Z+YpNnx6Bnv/5zxqBO3sXUD52U1tT50v8Fk492Djx cyT+72JWdsBSt0fvJ9M1Zi4J5jU34oROxQYnvJKpKmqvDQ9IavsEq8IuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSIMluWiiTXz6tRFAMm7eODy43aMB8GA1UdIwQY MBaAFCeHaqkXttAdlP8lZisI+yE/D+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTct ZjBhN2E0YzU4NjczLzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTctZjBhN2E0YzU4Njcz LzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez/0tIMl cq/t2jFPOxjrgC5fDdzLX8EiSuWMIjTg02ynRLGYWc4uOavsEBnAG4LiUaU1YB7v qc5/NSgibOeQR02pRytG87Ud+BCs4+P/4opinpyJw1Br+NbrfQQXuzZQSK6puDXx /+ExRUIrn8vR+KCdeTINZJ00yTqWfvtPTuMGn9ttMvA/w+IJGgjmVVbL91biku2M KT81WFJGWtuiBGSZHOCwxmcc1TyIIDvV1FbQlqQjRETcjpchOShaq4VIozmC7EB7 /7KEI9fOY1mh+uj3HmddyyqBhN8B92+5SK3uV5FKfyIEnAs1eEFkC5tVzb108gHC /eAdLh4aSo2Rdw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:54 2026 by rpki-client