This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json) Hash identifier: rYoTo4PkSseGIlRbymBtnV63RqqOqdOqq73T7eInCr4= Subject key identifier: 2A:4D:02:9A:A2:51:21:22:CD:F4:D2:BC:B1:E9:37:AE:9E:B4:70:4E Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0 Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0 Certificate serial: 019C427E019CAE9DFCBE2EC0D43BDDC2EBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: 0pXQl9Eccu8KuCqijGebawv9nlYmflgG90KgA+7eo/E=) 2: qaXfGqRy8REPCt5AS8O0mmZxMbQ.roa (hash: s2r/NmzprssiG6q7fm25EDu8EjVb4m0dpfMF/5RAabI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:01:9c:ae:9d:fc:be:2e:c0:d4:3b:dd:c2:eb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0 Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=2a4d029aa2512122cdf4d2bcb1e937ae9eb4704e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:62:26:b4:8f:c4:6f:27:f3:fa:d2:22:21: 3f:a9:65:90:32:36:6a:07:a1:63:6d:ba:12:76:dd: af:34:14:4f:25:46:3b:21:78:43:e6:0d:a6:b1:30: 96:69:83:1f:93:4f:54:46:e6:0d:c9:bd:4c:2c:1d: 2e:d0:54:74:51:10:fb:ed:07:d5:87:40:41:79:c7: 20:5b:fa:01:fd:aa:29:e3:90:61:0c:0e:5b:fd:8a: 82:61:e3:53:37:5b:4c:f9:3d:8d:7a:26:33:4c:d1: 48:4f:c2:77:6e:68:25:9c:bb:78:72:00:ec:b0:b7: f5:05:78:41:cf:eb:69:c6:b5:b2:04:94:9f:4e:e0: fa:9b:98:80:e9:d7:5b:2e:e8:5e:41:a5:61:66:a5: a6:0d:2e:75:d0:d1:65:92:86:9e:4e:65:c5:74:ce: 6c:30:f8:69:87:ba:ea:c8:e9:dd:2f:e5:43:ab:79: fe:65:f0:b8:f1:5d:46:f8:61:90:1d:50:01:ea:a2: d5:7b:60:4e:9b:3c:e6:a0:a0:c8:e4:78:db:13:35: 5a:f2:11:b5:1c:bf:8f:a4:fc:04:5a:af:9d:47:ac: ad:ad:78:73:2e:65:31:b1:18:c7:28:b4:4d:2c:ba: 8b:f0:05:87:3a:5a:bd:73:83:54:2c:ec:62:ce:f0: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4D:02:9A:A2:51:21:22:CD:F4:D2:BC:B1:E9:37:AE:9E:B4:70:4E X509v3 Authority Key Identifier: keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:1c:91:9e:2c:e2:49:47:da:66:b4:aa:6e:f5:a6:22:1f: 48:8f:76:c6:fa:8c:e1:4f:7e:73:93:44:e3:25:a9:27:c3:47: a1:b9:14:fb:f7:41:cc:1b:0c:5b:3b:d5:76:41:ac:8e:f2:fc: 17:dd:9b:eb:ca:79:55:86:fd:76:c3:26:e9:be:ef:41:ec:de: 26:4d:27:26:c5:c6:5a:9b:4e:c8:04:fd:c9:69:46:a2:df:d0: 8f:14:eb:e2:7a:36:72:20:15:4b:1b:17:99:21:7f:0d:95:db: 89:66:6c:c5:58:77:96:64:83:14:d2:d2:03:37:0f:b4:3e:a7: 54:b7:0e:86:ae:94:a4:c5:e7:fb:c5:5b:c2:77:ff:bf:0d:06: 1c:1d:3d:28:49:79:a9:1e:92:14:53:2c:2a:b6:dc:39:bd:c8: 2a:f7:82:be:b2:45:47:1a:f8:cd:fb:ce:35:8a:a6:43:9e:66: 25:54:20:08:9a:52:22:6f:00:a3:98:9a:10:5d:86:cc:4e:ed: 08:fa:5e:17:8e:21:bf:25:86:14:b4:d1:50:81:15:92:19:6f: 22:66:43:c5:b4:3d:04:98:a9:08:1e:de:43:8b:86:46:f6:d8: 66:38:0b:5f:81:fa:1a:4a:67:1b:12:02:7f:95:e7:ec:0a:63: bd:ae:fe:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgGcrp38vi7A1DvdwuvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZWNkMTNhZTAyN2YzN2YwMzg2Mjc0OTM0NzA0NGEyNjIw MjhlYjAwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD EygyYTRkMDI5YWEyNTEyMTIyY2RmNGQyYmNiMWU5MzdhZTllYjQ3MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/ViJrSPxG8n8/rSIiE/qWWQMjZq B6FjbboSdt2vNBRPJUY7IXhD5g2msTCWaYMfk09URuYNyb1MLB0u0FR0URD77QfV h0BBeccgW/oB/aop45BhDA5b/YqCYeNTN1tM+T2NeiYzTNFIT8J3bmglnLt4cgDs sLf1BXhBz+tpxrWyBJSfTuD6m5iA6ddbLuheQaVhZqWmDS510NFlkoaeTmXFdM5s MPhph7rqyOndL+VDq3n+ZfC48V1G+GGQHVAB6qLVe2BOmzzmoKDI5HjbEzVa8hG1 HL+PpPwEWq+dR6ytrXhzLmUxsRjHKLRNLLqL8AWHOlq9c4NULOxizvC9sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpNApqiUSEizfTSvLHpN66etHBOMB8GA1UdIwQY MBaAFCTs0TrgJ/N/A4YnSTRwRKJiAo6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMt OWMwYTllOGI3OGUxLzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMtOWMwYTllOGI3OGUx LzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWsckZ4s 4klH2ma0qm71piIfSI92xvqM4U9+c5NE4yWpJ8NHobkU+/dBzBsMWzvVdkGsjvL8 F92b68p5VYb9dsMm6b7vQezeJk0nJsXGWptOyAT9yWlGot/QjxTr4no2ciAVSxsX mSF/DZXbiWZsxVh3lmSDFNLSAzcPtD6nVLcOhq6UpMXn+8Vbwnf/vw0GHB09KEl5 qR6SFFMsKrbcOb3IKveCvrJFRxr4zfvONYqmQ55mJVQgCJpSIm8Ao5iaEF2GzE7t CPpeF44hvyWGFLTRUIEVkhlvImZDxbQ9BJipCB7eQ4uGRvbYZjgLX4H6GkpnGxIC f5Xn7Apjva7+vg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:26 2026 by rpki-client