This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json) Hash identifier: d2BXvntWRrPdbmWjx/HtgXpi+Of15BM/HN8LDh5CYjU= Subject key identifier: EB:7F:F2:20:92:F8:86:26:1C:49:F7:B4:2C:AE:47:7F:56:9A:42:20 Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Certificate serial: 019C427D02778E10C5E27F6541D5576FB273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft Manifest number: 1514 Signing time: Mon 09 Feb 2026 13:00:14 +0000 Manifest this update: Mon 09 Feb 2026 13:00:14 +0000 Manifest next update: Tue 10 Feb 2026 13:00:14 +0000 Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: /vtxbJtp5d6y5xE7Mo+SYenj5z8uyXX49x42gO8tJHw=) 2: zW8nttVSxzQC9vPeCiBB2Fi43Bw.roa (hash: BlLZPwRJ87Mpdgf8WIPNTg5b23WBV+U7XBJtnee3wHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:02:77:8e:10:c5:e2:7f:65:41:d5:57:6f:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Validity Not Before: Feb 9 13:00:14 2026 GMT Not After : Feb 10 13:00:14 2026 GMT Subject: CN=eb7ff22092f886261c49f7b42cae477f569a4220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:df:2a:8c:ca:99:73:78:e9:3c:82:04:12: a9:a0:59:ac:d5:7c:86:f5:89:e5:ae:0d:b3:fe:1c: ec:a0:f6:50:e2:24:5b:3e:21:5e:a2:4e:ca:9d:85: c8:12:74:a8:db:e7:54:ce:fe:72:fb:fa:5d:84:6f: cd:04:0c:9e:59:98:91:81:34:6d:cd:f9:38:9f:e2: e9:25:39:e9:55:e6:e6:33:29:23:10:a3:b4:76:84: 2a:8e:dd:d0:9c:cc:70:b2:23:36:47:67:17:21:58: 37:6b:6b:9e:66:b6:70:b3:c1:94:52:99:af:ed:4c: 29:a7:34:20:4e:92:76:1f:ef:ff:f7:bf:f7:75:ba: a4:eb:dd:42:47:85:67:6d:85:99:7e:2e:65:da:db: a1:d0:82:3c:82:8f:fb:7b:0e:b3:96:54:03:c9:d2: 83:b8:21:2b:fc:43:62:b2:3d:31:4b:04:90:3b:e2: a5:20:4f:e4:58:9e:57:d6:14:8d:18:4e:6d:ca:a9: 3e:4b:12:8b:11:d9:fb:44:55:8c:14:ed:55:70:24: 09:55:ba:a2:ee:fe:61:ad:dc:8d:3a:9e:a3:0c:2f: 6a:5c:29:59:d3:3d:8c:4e:5e:fc:9d:e4:87:51:71: da:82:17:f4:a8:6a:2a:0c:2f:ab:05:c4:9a:8d:b4: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:F2:20:92:F8:86:26:1C:49:F7:B4:2C:AE:47:7F:56:9A:42:20 X509v3 Authority Key Identifier: keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d5:e8:4e:c7:cd:b7:83:6d:0b:e0:ec:b9:97:ec:7d:94:7c: 50:15:f7:e2:46:d9:4f:c5:20:6f:28:64:8d:f1:e3:a7:63:83: 5c:55:d6:06:66:4e:5c:91:78:b3:02:c0:73:67:f6:51:1b:8b: 7a:23:d1:1a:4d:12:cb:d6:6e:43:03:a6:76:07:40:db:24:b8: 63:57:75:b0:cf:2a:a9:99:e6:2f:a7:5d:67:14:97:87:0d:b2: 81:32:fb:d2:42:37:63:65:3d:6d:ed:55:49:88:4e:dc:d1:51: cc:77:25:44:38:8a:d5:9c:4c:f2:09:7b:e2:dc:f1:ad:2b:ef: b0:15:f5:ed:b4:e6:57:3e:83:54:fd:5d:78:fb:a1:57:59:65: 6b:17:4b:e9:b6:a6:03:f5:51:70:4b:d8:c8:20:2c:41:f7:74: b0:a7:79:8e:4d:43:e5:f5:cd:d7:3b:16:6a:c8:6b:85:b2:ed: 95:4f:c8:d9:40:4b:a5:e3:b6:77:2a:d0:f3:69:76:99:99:8c: 02:f5:81:c4:f5:45:4c:bf:5f:11:47:39:5a:78:16:41:39:43: f6:30:5e:43:eb:b9:b0:1d:7a:8f:38:d9:1d:ef:9c:84:96:f0: ca:e1:da:52:e6:a5:89:b7:1e:4d:b4:79:40:ab:88:45:72:91: 61:4e:12:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQJ3jhDF4n9lQdVXb7JzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWZjZjJhYjZlNmRiYzE2MzRlZTU5MWZjMWI3NGE0MWRl M2VhNWYwHhcNMjYwMjA5MTMwMDE0WhcNMjYwMjEwMTMwMDE0WjAzMTEwLwYDVQQD EyhlYjdmZjIyMDkyZjg4NjI2MWM0OWY3YjQyY2FlNDc3ZjU2OWE0MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxzfKozKmXN46TyCBBKpoFms1XyG 9Ynlrg2z/hzsoPZQ4iRbPiFeok7KnYXIEnSo2+dUzv5y+/pdhG/NBAyeWZiRgTRt zfk4n+LpJTnpVebmMykjEKO0doQqjt3QnMxwsiM2R2cXIVg3a2ueZrZws8GUUpmv 7UwppzQgTpJ2H+//97/3dbqk691CR4VnbYWZfi5l2tuh0II8go/7ew6zllQDydKD uCEr/ENisj0xSwSQO+KlIE/kWJ5X1hSNGE5tyqk+SxKLEdn7RFWMFO1VcCQJVbqi 7v5hrdyNOp6jDC9qXClZ0z2MTl78neSHUXHaghf0qGoqDC+rBcSajbTsVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt/8iCS+IYmHEn3tCyuR39WmkIgMB8GA1UdIwQY MBaAFAifzyq25tvBY07lkfwbdKQd4+pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUt M2MwYjkyNTRhNmY4LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUtM2MwYjkyNTRhNmY4 LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9XoTsfN t4NtC+DsuZfsfZR8UBX34kbZT8UgbyhkjfHjp2ODXFXWBmZOXJF4swLAc2f2URuL eiPRGk0Sy9ZuQwOmdgdA2yS4Y1d1sM8qqZnmL6ddZxSXhw2ygTL70kI3Y2U9be1V SYhO3NFRzHclRDiK1ZxM8gl74tzxrSvvsBX17bTmVz6DVP1dePuhV1llaxdL6bam A/VRcEvYyCAsQfd0sKd5jk1D5fXN1zsWashrhbLtlU/I2UBLpeO2dyrQ82l2mZmM AvWBxPVFTL9fEUc5WngWQTlD9jBeQ+u5sB16jzjZHe+chJbwyuHaUualibceTbR5 QKuIRXKRYU4Sog== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:33 2026 by rpki-client