This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json) Hash identifier: +p86OeRdF8T/f04ER52PN0z5UNh8mV39E1Vz3xPs2WE= Subject key identifier: AB:52:BA:48:58:E8:03:ED:70:B3:C8:73:9D:52:83:21:A0:39:2E:92 Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf Certificate serial: 019C43222AED88097FECCE8F2862BD76549B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: EO0UVSveyQjke9kH5h1DCJg5FsmX+HOASnmmmgNasjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:2a:ed:88:09:7f:ec:ce:8f:28:62:bd:76:54:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=ab52ba4858e803ed70b3c8739d528321a0392e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:10:0d:70:48:50:9a:50:3e:01:3c:77:71: a1:fa:48:06:d9:59:51:92:65:89:6f:2c:0b:95:76: 9f:72:48:da:6a:a4:df:a2:85:ed:b9:25:d6:7b:74: 5c:4b:b3:5b:0f:84:e2:0b:86:33:ea:48:e9:f0:af: b3:63:37:a6:e0:f0:b1:22:db:88:f9:94:62:bd:95: a1:05:b7:fd:b8:39:32:1a:4b:db:fd:08:d3:d9:65: 34:be:00:ec:b1:58:ca:32:d4:6a:d3:d8:96:2e:d3: 29:ee:7f:83:97:c1:87:1f:6a:91:3b:36:55:51:5d: 9f:72:aa:2b:35:21:80:14:84:27:98:ba:fe:d1:f0: aa:81:c4:7b:ff:a4:af:46:8b:99:96:b7:58:7f:7c: 90:a4:73:1d:43:9e:48:16:f2:79:b6:56:b4:fc:f3: 73:0e:e2:58:78:ee:f0:b1:94:cd:3f:a1:00:95:8d: 6f:e3:76:52:b5:e7:63:f6:b8:57:bc:5a:0b:c5:d2: 96:83:f3:0b:a6:f2:7f:93:3d:4e:b1:91:a2:ac:66: ad:20:ba:e2:fc:0b:c5:65:08:62:fa:03:77:c0:48: 08:78:9a:97:eb:60:ff:e9:50:9f:ff:7e:cd:dd:0a: 34:9d:c2:2c:f3:98:31:a0:fb:87:1b:1f:ec:6f:45: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:52:BA:48:58:E8:03:ED:70:B3:C8:73:9D:52:83:21:A0:39:2E:92 X509v3 Authority Key Identifier: keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a2:81:c5:6d:5f:61:0b:31:5c:cb:66:86:f0:e0:02:1a:f6: 61:66:19:e8:c7:ee:33:16:31:15:63:56:57:13:11:b9:87:02: 8e:86:7b:6e:9e:5c:a7:86:25:df:68:3c:04:4d:f5:4b:7e:be: 97:25:f9:a6:b0:9f:b6:60:64:75:37:2d:c8:50:a9:39:1e:71: b1:83:16:4b:3c:30:37:c0:5e:84:fc:be:62:1e:90:15:b8:34: 2b:fb:b7:95:6b:18:d2:ce:ad:95:8e:47:53:df:3b:ce:6b:05: 9f:19:8d:9c:13:e2:94:5a:da:0d:ee:04:30:88:ec:af:4e:e6: 36:14:91:5d:77:2b:a2:ad:b8:43:3d:74:ee:be:3c:66:fa:1f: bf:b1:42:d5:86:0b:d7:fa:84:b8:1c:0f:89:df:ef:1c:b1:33: 85:e7:f4:45:d2:b3:db:32:45:a7:1c:fe:f5:0d:0e:8b:7f:7c: 27:de:ed:f3:0d:86:86:e9:39:f6:e1:25:a4:41:10:04:ad:3c: 27:db:69:d7:bb:e9:3b:87:49:05:ad:6d:9b:35:9f:21:de:4d: 14:ef:ab:2f:4d:5c:b0:0d:af:c1:02:06:91:8a:a6:3f:dd:62: 67:91:d9:55:8e:99:69:08:f2:de:3b:df:27:92:08:26:80:c0: 96:f7:94:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIirtiAl/7M6PKGK9dlSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz ZmQ3Y2YwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD EyhhYjUyYmE0ODU4ZTgwM2VkNzBiM2M4NzM5ZDUyODMyMWEwMzkyZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dcQDXBIUJpQPgE8d3Gh+kgG2VlR kmWJbywLlXafckjaaqTfooXtuSXWe3RcS7NbD4TiC4Yz6kjp8K+zYzem4PCxItuI +ZRivZWhBbf9uDkyGkvb/QjT2WU0vgDssVjKMtRq09iWLtMp7n+Dl8GHH2qROzZV UV2fcqorNSGAFIQnmLr+0fCqgcR7/6SvRouZlrdYf3yQpHMdQ55IFvJ5tla0/PNz DuJYeO7wsZTNP6EAlY1v43ZStedj9rhXvFoLxdKWg/MLpvJ/kz1OsZGirGatILri /AvFZQhi+gN3wEgIeJqX62D/6VCf/37N3Qo0ncIs85gxoPuHGx/sb0WifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtSukhY6APtcLPIc51SgyGgOS6SMB8GA1UdIwQY MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6KBxW1f YQsxXMtmhvDgAhr2YWYZ6MfuMxYxFWNWVxMRuYcCjoZ7bp5cp4Yl32g8BE31S36+ lyX5prCftmBkdTctyFCpOR5xsYMWSzwwN8BehPy+Yh6QFbg0K/u3lWsY0s6tlY5H U987zmsFnxmNnBPilFraDe4EMIjsr07mNhSRXXcroq24Qz107r48Zvofv7FC1YYL 1/qEuBwPid/vHLEzhef0RdKz2zJFpxz+9Q0Oi398J97t8w2Ghuk59uElpEEQBK08 J9tp17vpO4dJBa1tmzWfId5NFO+rL01csA2vwQIGkYqmP91iZ5HZVY6ZaQjy3jvf J5IIJoDAlveUmg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:43 2026 by rpki-client