This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft File: j33ZCSspRN36oXbsIwf26Y9N44M.mft (raw, json) Hash identifier: nXENJ0KD1eLbm7rEJww8NBF1gl5VCMfm5QINU1vsmEU= Subject key identifier: 72:62:D2:19:CD:71:11:DD:2D:A0:68:D1:76:49:31:1A:70:52:EB:FD Authority key identifier: 8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83 Certificate issuer: /CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383 Certificate serial: 019C427DFF5D6A3578B4BBCB1B924577AB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft Manifest number: 017C Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: j33ZCSspRN36oXbsIwf26Y9N44M.crl (hash: +5D/o2LbBiwimjAQ/aiq6W2XydR98K25y8I+02Xa/D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ff:5d:6a:35:78:b4:bb:cb:1b:92:45:77:ab:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383 Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=7262d219cd7111dd2da068d17649311a7052ebfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:e1:1c:3a:f7:b9:69:34:55:ff:f2:04:3a: 94:39:51:53:d5:87:e3:1b:3b:c2:66:f8:ac:e4:e8: fa:70:05:fe:ce:c9:65:c8:32:c4:4e:b1:c3:66:0e: 8e:ea:61:6d:85:9d:83:e1:d6:f6:32:c3:ba:c9:6c: 22:d3:bc:df:3e:17:be:43:1c:e1:09:a8:97:cd:01: 1a:0d:49:64:be:5a:04:7c:25:a5:c3:9b:58:79:fc: 4e:71:5f:07:21:b7:df:0d:3d:30:ea:9a:7e:5c:d4: 38:69:d4:ba:f2:c3:28:28:51:52:d4:8f:b8:5a:04: 24:73:57:fa:85:30:f4:20:f9:64:72:7f:8d:ba:5f: b3:84:29:2b:6b:46:d2:29:46:56:a7:8c:f9:71:31: b2:82:4a:ea:03:c9:48:af:ec:10:7c:56:bb:9c:ee: 96:f4:0b:99:85:d1:75:4d:12:e9:7d:76:6d:41:3b: df:5f:bd:c4:0c:09:06:0b:6a:12:a5:49:7c:21:65: c0:7d:99:25:57:2a:86:5a:cd:28:c6:43:80:64:6b: a4:26:e2:55:c3:94:af:42:79:db:06:af:c1:a8:fa: f0:50:14:b5:8b:b3:46:ff:c4:e1:55:4b:6b:ff:e5: e3:2a:c4:0a:73:4a:d9:80:1a:d8:ff:3b:91:8b:00: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:D2:19:CD:71:11:DD:2D:A0:68:D1:76:49:31:1A:70:52:EB:FD X509v3 Authority Key Identifier: keyid:8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fa:4c:b5:32:a4:48:f6:a9:b7:3b:f7:0d:e5:d3:65:b0:57: 71:28:2e:1a:35:dc:e0:fe:ca:8c:86:b5:f8:74:e3:ea:b3:14: 92:9b:fe:93:79:70:a6:e4:9f:d8:37:96:4d:dd:b5:9d:cc:8d: db:de:6f:f1:e7:1e:b0:4e:e0:c7:e4:92:66:51:13:d3:5d:2a: aa:ad:9f:13:69:99:46:a7:38:cd:6f:cc:8c:48:03:c8:c2:2f: 0a:ec:9c:f7:8c:6c:a0:f2:f9:02:51:72:9c:4d:e4:b4:8d:51: 45:4f:91:33:e7:c7:8f:7b:a9:93:08:5b:a8:73:45:61:b5:28: b1:d6:10:4f:88:7a:9d:6b:52:bd:2a:06:6f:76:e1:70:89:55: 10:44:47:12:ab:1c:8d:54:b8:5e:07:04:03:05:4d:bc:0c:36: 63:50:be:cb:25:b6:df:72:3f:8c:1c:f7:c6:0a:5b:fe:8e:c1: 13:f8:4a:de:2a:6e:61:ee:13:0e:03:7a:c3:0d:dd:62:c0:58: 39:20:8a:99:eb:93:eb:f6:0a:94:2d:3f:b3:58:ed:f2:79:62: f0:0f:1a:c7:63:03:17:7e:d3:18:db:c4:f4:87:67:9d:48:df: 01:c1:8d:54:6f:f9:14:b2:4e:31:ab:5d:53:ed:71:8b:62:cf: cc:68:d9:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCff9dajV4tLvLG5JFd6ufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2RkOTA5MmIyOTQ0ZGRmYWExNzZlYzIzMDdmNmU5OGY0 ZGUzODMwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD Eyg3MjYyZDIxOWNkNzExMWRkMmRhMDY4ZDE3NjQ5MzExYTcwNTJlYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqHhHDr3uWk0Vf/yBDqUOVFT1Yfj GzvCZvis5Oj6cAX+zsllyDLETrHDZg6O6mFthZ2D4db2MsO6yWwi07zfPhe+Qxzh CaiXzQEaDUlkvloEfCWlw5tYefxOcV8HIbffDT0w6pp+XNQ4adS68sMoKFFS1I+4 WgQkc1f6hTD0IPlkcn+Nul+zhCkra0bSKUZWp4z5cTGygkrqA8lIr+wQfFa7nO6W 9AuZhdF1TRLpfXZtQTvfX73EDAkGC2oSpUl8IWXAfZklVyqGWs0oxkOAZGukJuJV w5SvQnnbBq/BqPrwUBS1i7NG/8ThVUtr/+XjKsQKc0rZgBrY/zuRiwDeKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJi0hnNcRHdLaBo0XZJMRpwUuv9MB8GA1UdIwQY MBaAFI992QkrKUTd+qF27CMH9umPTeODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQt ZDZlY2FkMmQ1MTMyLzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQtZDZlY2FkMmQ1MTMy LzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfpMtTKk SPaptzv3DeXTZbBXcSguGjXc4P7KjIa1+HTj6rMUkpv+k3lwpuSf2DeWTd21ncyN 295v8ecesE7gx+SSZlET010qqq2fE2mZRqc4zW/MjEgDyMIvCuyc94xsoPL5AlFy nE3ktI1RRU+RM+fHj3upkwhbqHNFYbUosdYQT4h6nWtSvSoGb3bhcIlVEERHEqsc jVS4XgcEAwVNvAw2Y1C+yyW233I/jBz3xgpb/o7BE/hK3ipuYe4TDgN6ww3dYsBY OSCKmeuT6/YKlC0/s1jt8nli8A8ax2MDF37TGNvE9IdnnUjfAcGNVG/5FLJOMatd U+1xi2LPzGjZGg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:40 2026 by rpki-client