This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json) Hash identifier: ri9ka+Pi1wh8miJff7wdGNvLUnf/xkO/GC2jk4Gq2os= Subject key identifier: F4:6E:14:23:96:C7:3B:92:E9:4D:65:9A:A5:89:00:F1:EB:E8:27:08 Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d Certificate serial: 019C42468DD512C948982CBC660E9C6B198D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft Manifest number: 0A99 Signing time: Mon 09 Feb 2026 12:00:45 +0000 Manifest this update: Mon 09 Feb 2026 12:00:45 +0000 Manifest next update: Tue 10 Feb 2026 12:00:45 +0000 Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: jKl8gd4AXyanaMOUgsRjC/I6Ql8AAfzS5y3/sGtpSVc=) 2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:8d:d5:12:c9:48:98:2c:bc:66:0e:9c:6b:19:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d Validity Not Before: Feb 9 12:00:45 2026 GMT Not After : Feb 10 12:00:45 2026 GMT Subject: CN=f46e142396c73b92e94d659aa58900f1ebe82708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:76:f2:db:bd:b8:05:2f:6c:9e:19:9f:67:0d: b7:4f:14:14:99:6c:66:e2:5b:03:b6:1c:be:c6:57: de:34:4e:72:87:4e:cb:20:85:76:70:c8:4e:45:e5: 0a:e3:52:1f:41:09:1b:6e:2f:76:78:e0:6e:69:fb: 6f:c2:fd:38:5e:5a:08:07:67:3c:fd:59:43:d2:bb: a7:42:26:ef:9d:68:9b:38:32:b5:25:f9:b6:0d:a3: 66:c3:1a:ef:d9:0e:8e:e9:20:ef:d6:25:9b:b4:7d: b5:72:06:60:d4:0a:7f:04:22:b2:bd:8f:9b:ca:58: dc:5f:ff:c3:07:f0:6c:2f:2d:3a:09:4f:41:80:83: ed:7b:91:04:63:8f:62:b9:54:33:d5:8c:72:28:58: 50:2b:8b:ce:43:a9:72:34:13:5d:98:37:3d:db:3d: 58:2f:f9:5a:f8:aa:94:4c:6a:82:b0:4e:b8:b2:5e: 21:ac:35:a0:96:45:d1:f9:05:df:b5:83:c2:a2:c1: d5:63:41:3a:58:6a:77:b7:a2:26:71:f2:3a:9d:c8: a1:91:26:06:1c:c1:80:b2:55:2c:dc:54:6f:74:d7: 8d:03:02:3c:1f:34:37:36:20:35:ab:55:60:1c:03: b4:88:c9:2b:54:ee:b6:9e:42:81:f6:a2:4a:a2:2e: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6E:14:23:96:C7:3B:92:E9:4D:65:9A:A5:89:00:F1:EB:E8:27:08 X509v3 Authority Key Identifier: keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:29:27:2f:d1:04:f5:40:c4:52:5d:85:c6:70:64:08:a5:69: 78:54:72:21:08:3c:80:0c:bc:e9:a8:67:7d:37:ad:ba:5a:79: 91:32:54:66:1f:ff:dc:ae:52:90:42:70:d3:15:fe:d6:ac:97: 53:0d:9c:e3:cc:1b:6a:07:ee:8e:5d:c4:e7:6e:6c:37:41:28: 26:88:27:ba:87:2d:be:eb:f1:c0:30:ab:35:7d:ec:ec:b4:9c: ba:fa:ec:12:53:d4:95:64:c0:02:e9:9a:fd:f2:02:4f:15:6f: 8f:a4:7e:65:a6:3d:28:ce:27:88:94:71:e3:38:ac:fc:82:26: 3d:45:35:85:f2:35:03:92:d8:24:c1:2e:ba:09:97:18:5e:3d: b2:ed:6e:ca:72:cc:9b:61:11:23:8d:4f:68:b6:02:56:7d:53: 2d:7a:f4:d5:8b:fc:ce:5b:a6:a4:76:da:2a:3a:56:dc:8d:d1: b0:b0:d3:14:0d:44:bf:f5:81:ae:4e:d8:b8:78:99:55:15:dc: 67:4e:d0:ef:c8:45:4b:6b:a1:ab:b8:ff:21:56:98:51:6b:4d: fc:c8:a2:9a:4f:71:9c:86:9f:f4:ba:3e:df:af:bf:3d:ef:2b: 04:b2:7f:41:82:10:41:7d:a4:6b:fa:2b:96:aa:39:df:fd:d1: b0:d9:79:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRo3VEslImCy8Zg6caxmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh ZGM5OWQwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD EyhmNDZlMTQyMzk2YzczYjkyZTk0ZDY1OWFhNTg5MDBmMWViZTgyNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknby2724BS9snhmfZw23TxQUmWxm 4lsDthy+xlfeNE5yh07LIIV2cMhOReUK41IfQQkbbi92eOBuaftvwv04XloIB2c8 /VlD0runQibvnWibODK1Jfm2DaNmwxrv2Q6O6SDv1iWbtH21cgZg1Ap/BCKyvY+b yljcX//DB/BsLy06CU9BgIPte5EEY49iuVQz1YxyKFhQK4vOQ6lyNBNdmDc92z1Y L/la+KqUTGqCsE64sl4hrDWglkXR+QXftYPCosHVY0E6WGp3t6ImcfI6ncihkSYG HMGAslUs3FRvdNeNAwI8HzQ3NiA1q1VgHAO0iMkrVO62nkKB9qJKoi4+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRuFCOWxzuS6U1lmqWJAPHr6CcIMB8GA1UdIwQY MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiknL9EE 9UDEUl2FxnBkCKVpeFRyIQg8gAy86ahnfTetulp5kTJUZh//3K5SkEJw0xX+1qyX Uw2c48wbagfujl3E525sN0EoJognuoctvuvxwDCrNX3s7LScuvrsElPUlWTAAuma /fICTxVvj6R+ZaY9KM4niJRx4zis/IImPUU1hfI1A5LYJMEuugmXGF49su1uynLM m2ERI41PaLYCVn1TLXr01Yv8zlumpHbaKjpW3I3RsLDTFA1Ev/WBrk7YuHiZVRXc Z07Q78hFS2uhq7j/IVaYUWtN/Miimk9xnIaf9Lo+36+/Pe8rBLJ/QYIQQX2ka/or lqo53/3RsNl5PA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:03 2026 by rpki-client