This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json) Hash identifier: hQ4VesW2GGCjA9eKI2dyxBBBo2XfxP1T60Up7VHoByM= Subject key identifier: 48:24:8F:2F:ED:30:5B:5A:06:82:32:22:18:7E:86:9D:83:E2:5C:52 Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30 Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530 Certificate serial: 019C4322DB10D69D6A11D0BD0CE52E01403D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:23 +0000 Manifest this update: Mon 09 Feb 2026 16:01:23 +0000 Manifest next update: Tue 10 Feb 2026 16:01:23 +0000 Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: iHd5oLn8KWFNUPxgnkGIsRxjrTVMJ19dzwz9UtXTRJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:db:10:d6:9d:6a:11:d0:bd:0c:e5:2e:01:40:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530 Validity Not Before: Feb 9 16:01:23 2026 GMT Not After : Feb 10 16:01:23 2026 GMT Subject: CN=48248f2fed305b5a06823222187e869d83e25c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:52:e5:ba:1c:8c:7b:18:1b:e4:37:ae:a7:6e: 12:a2:3a:66:84:67:cc:58:06:23:09:df:5d:ff:9d: da:01:6f:4d:a8:2b:a1:5d:0e:ea:58:0e:ee:83:16: 5c:0f:dd:12:3e:18:22:45:0b:cc:92:07:02:f1:d1: d1:25:aa:f0:ec:55:4b:cd:a6:3e:9f:73:7c:85:eb: 4d:d7:dd:11:6c:81:78:32:e0:41:15:c5:e8:a7:46: 6c:4e:66:07:eb:84:cf:d7:27:a6:f6:92:ab:97:4c: 7a:7c:c6:8d:17:81:18:e4:4b:5d:b3:71:f4:67:2d: 8c:7f:21:22:39:98:21:7a:a1:b0:c8:6d:6b:50:15: ca:19:b8:9b:0c:ce:55:a7:de:4d:19:2e:fd:7c:98: 03:55:4e:3b:40:f0:c0:09:85:85:7c:bb:ae:5d:68: e2:da:67:90:26:1d:24:b9:e9:21:59:f5:46:75:fa: 31:23:b2:c3:80:67:00:17:e8:0f:d3:80:70:33:86: a0:c4:b4:de:3c:f5:de:ce:81:2d:f1:45:87:ae:c2: e8:fa:be:48:de:1d:25:f0:7e:ae:0f:a1:f3:30:21: 55:3a:f3:df:ed:cd:56:27:85:3c:1a:e6:9a:70:6b: 50:95:40:15:3b:c3:f6:08:fd:26:e5:82:5b:da:95: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:8F:2F:ED:30:5B:5A:06:82:32:22:18:7E:86:9D:83:E2:5C:52 X509v3 Authority Key Identifier: keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c1:78:0f:ae:f2:b3:18:7e:ff:d3:e3:cb:a9:d6:0a:56:54: 77:30:4d:8e:f9:23:b1:ee:9e:63:7f:d1:65:a5:1d:00:8a:8f: 3d:ef:64:98:88:6c:70:68:1c:fc:6a:81:35:2d:84:41:62:d9: 82:ef:99:7c:d0:d3:92:10:3d:95:fd:22:07:89:65:2a:65:0f: c6:44:cf:cd:59:d9:bf:b5:f0:7a:ac:55:ec:12:28:30:ef:32: 04:82:6e:15:e6:54:06:31:3b:25:2b:dd:41:cd:ce:d2:59:64: 98:79:0a:49:aa:ca:27:bc:26:97:fa:ff:1d:1f:f5:3e:40:78: 4b:4d:d0:a9:3b:17:82:2e:cd:87:66:57:36:77:34:f8:45:a7: 11:55:c2:93:8d:2e:03:4c:e9:ec:04:40:0c:20:06:58:3f:76: c4:a4:31:f8:db:6e:c0:c8:3f:5d:fd:b9:94:ae:20:34:59:6b: 6c:77:a3:56:fa:65:b3:3f:6b:3f:05:4f:5e:51:34:22:22:83: ca:44:af:d2:4b:e5:3b:ca:58:3c:be:19:c2:27:c7:42:54:67: 6a:02:b0:0c:78:73:a8:9f:0a:5d:d4:6f:48:7a:cb:e1:9c:9a: bf:41:3c:43:2b:78:8f:4c:8e:ec:86:98:c6:aa:78:17:b2:3f: 09:36:38:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItsQ1p1qEdC9DOUuAUA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MmIwNGMzMTk5YjFlYjk2OTNkNDMyMGY3YmQzNjFlZDYx NzA1MzAwHhcNMjYwMjA5MTYwMTIzWhcNMjYwMjEwMTYwMTIzWjAzMTEwLwYDVQQD Eyg0ODI0OGYyZmVkMzA1YjVhMDY4MjMyMjIxODdlODY5ZDgzZTI1YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lLluhyMexgb5Deup24SojpmhGfM WAYjCd9d/53aAW9NqCuhXQ7qWA7ugxZcD90SPhgiRQvMkgcC8dHRJarw7FVLzaY+ n3N8hetN190RbIF4MuBBFcXop0ZsTmYH64TP1yem9pKrl0x6fMaNF4EY5Etds3H0 Zy2MfyEiOZgheqGwyG1rUBXKGbibDM5Vp95NGS79fJgDVU47QPDACYWFfLuuXWji 2meQJh0kuekhWfVGdfoxI7LDgGcAF+gP04BwM4agxLTePPXezoEt8UWHrsLo+r5I 3h0l8H6uD6HzMCFVOvPf7c1WJ4U8GuaacGtQlUAVO8P2CP0m5YJb2pXdcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgkjy/tMFtaBoIyIhh+hp2D4lxSMB8GA1UdIwQY MBaAFCQrBMMZmx65aT1DIPe9Nh7WFwUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wYzAyYzAtNTY5Yy00NWVhLWIwNWIt NjZiNjdlMjFhODJiLzEvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wYzAyYzAtNTY5Yy00NWVhLWIwNWItNjZiNjdlMjFhODJi LzEvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsF4D67y sxh+/9Pjy6nWClZUdzBNjvkjse6eY3/RZaUdAIqPPe9kmIhscGgc/GqBNS2EQWLZ gu+ZfNDTkhA9lf0iB4llKmUPxkTPzVnZv7XweqxV7BIoMO8yBIJuFeZUBjE7JSvd Qc3O0llkmHkKSarKJ7wml/r/HR/1PkB4S03QqTsXgi7Nh2ZXNnc0+EWnEVXCk40u A0zp7ARADCAGWD92xKQx+NtuwMg/Xf25lK4gNFlrbHejVvplsz9rPwVPXlE0IiKD ykSv0kvlO8pYPL4ZwifHQlRnagKwDHhzqJ8KXdRvSHrL4Zyav0E8Qyt4j0yO7IaY xqp4F7I/CTY4ww== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:56 2026 by rpki-client