This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json) Hash identifier: uBoi3uRwTR8N26jGBF4qw3m632cmWZGtSFP/H1leJrg= Subject key identifier: 27:AF:29:8E:55:D7:76:DC:11:E9:1F:C3:FB:85:08:46:C4:02:3E:67 Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Certificate serial: 019C416AB792C106F59D8B6045C75963624D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 08:00:38 +0000 Manifest this update: Mon 09 Feb 2026 08:00:38 +0000 Manifest next update: Tue 10 Feb 2026 08:00:38 +0000 Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: Mir8pDTI8NC4SkETYhnNNukUCRCEcm9njYlJb+G592Q=) 2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:b7:92:c1:06:f5:9d:8b:60:45:c7:59:63:62:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Validity Not Before: Feb 9 08:00:38 2026 GMT Not After : Feb 10 08:00:38 2026 GMT Subject: CN=27af298e55d776dc11e91fc3fb850846c4023e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:a4:df:2e:28:e0:ed:e3:87:01:56:0a:b4: ce:23:81:09:5c:ae:e9:c3:17:de:cc:84:75:de:06: ba:c2:b5:7a:1c:de:1c:6e:f6:4c:56:90:46:88:a5: 30:96:f5:f6:55:ae:14:0e:69:88:a8:41:48:68:fa: bc:d9:05:40:da:10:2f:28:8f:f8:5d:28:35:be:ff: c6:e8:49:47:6a:33:39:03:5e:77:7a:ed:b2:45:4d: cb:f6:74:5a:73:95:90:20:73:68:3d:cb:2b:15:06: 0e:96:ff:33:ab:b2:26:6f:47:93:a8:f1:58:72:18: 06:2f:4b:b8:fb:b2:d3:00:3d:fa:cc:37:94:22:bd: a2:e6:51:23:94:dc:b9:6f:92:d3:2f:17:4e:34:f6: f6:43:70:9d:b9:46:90:be:75:33:7e:d3:3f:97:48: f0:93:e4:52:cb:ea:b3:d1:59:82:3e:e1:42:17:ca: 40:2d:de:96:f7:a1:d3:1c:b4:19:eb:01:fe:2e:34: 08:5c:5e:f2:2a:70:8a:4d:d2:40:7d:87:15:20:d5: c3:62:76:4c:fc:20:ae:e3:88:ff:23:b9:f0:e5:e9: 9e:bc:e2:f4:b2:56:bf:30:cd:11:b3:02:46:a1:0e: 08:66:d3:5c:8c:fd:c1:a0:db:05:8a:b6:9a:6d:1a: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AF:29:8E:55:D7:76:DC:11:E9:1F:C3:FB:85:08:46:C4:02:3E:67 X509v3 Authority Key Identifier: keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f7:e7:31:f3:63:f1:3f:61:a2:c6:2c:e9:53:47:a9:1e:96: d6:33:1b:92:49:ce:5b:b8:e9:e2:bb:e7:f9:2c:fe:7c:44:4c: 4a:84:3e:23:f2:60:9d:dc:5f:4e:b6:8c:86:80:d3:ed:d9:36: 0a:e1:fb:3b:84:2f:0f:f7:70:4c:9d:8d:ac:0a:86:30:0b:f6: a2:1f:c2:1c:a5:17:95:68:d9:3d:87:c2:61:27:36:b3:73:de: 97:55:d2:0b:f8:c3:6a:36:5d:67:36:a1:f3:5e:fb:e5:c5:9f: 2d:b8:36:9b:af:fd:4f:87:6b:09:17:33:fb:18:4a:eb:d4:1e: 8f:c9:bb:f1:2c:49:a7:7e:a9:a2:b0:d2:46:62:c5:e4:9e:8c: bc:fd:ca:5a:e2:fc:5e:91:bb:85:cd:4f:e9:40:29:4d:00:fd: 37:6c:3d:0a:95:6d:7b:e1:64:99:db:52:5e:82:6c:91:ac:a7: cd:1e:14:2f:25:75:c6:93:f0:4b:8b:2e:b4:ef:93:26:41:3c: f0:d8:1d:8b:f2:38:a5:0e:27:6a:22:e3:9a:6b:8f:ef:ec:74: e5:b8:15:d4:ad:0a:e1:27:34:4b:be:ec:ee:e2:2a:5e:94:78: e7:cc:2b:16:30:75:7e:80:06:71:e7:6b:d8:f6:dc:b2:1a:24: da:a2:8e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBareSwQb1nYtgRcdZY2JNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj NjZjNTIwHhcNMjYwMjA5MDgwMDM4WhcNMjYwMjEwMDgwMDM4WjAzMTEwLwYDVQQD EygyN2FmMjk4ZTU1ZDc3NmRjMTFlOTFmYzNmYjg1MDg0NmM0MDIzZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeKk3y4o4O3jhwFWCrTOI4EJXK7p wxfezIR13ga6wrV6HN4cbvZMVpBGiKUwlvX2Va4UDmmIqEFIaPq82QVA2hAvKI/4 XSg1vv/G6ElHajM5A153eu2yRU3L9nRac5WQIHNoPcsrFQYOlv8zq7Imb0eTqPFY chgGL0u4+7LTAD36zDeUIr2i5lEjlNy5b5LTLxdONPb2Q3CduUaQvnUzftM/l0jw k+RSy+qz0VmCPuFCF8pALd6W96HTHLQZ6wH+LjQIXF7yKnCKTdJAfYcVINXDYnZM /CCu44j/I7nw5emevOL0sla/MM0RswJGoQ4IZtNcjP3BoNsFiraabRqRPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCevKY5V13bcEekfw/uFCEbEAj5nMB8GA1UdIwQY MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2 LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiffnMfNj 8T9hosYs6VNHqR6W1jMbkknOW7jp4rvn+Sz+fERMSoQ+I/JgndxfTraMhoDT7dk2 CuH7O4QvD/dwTJ2NrAqGMAv2oh/CHKUXlWjZPYfCYSc2s3Pel1XSC/jDajZdZzah 81775cWfLbg2m6/9T4drCRcz+xhK69Qej8m78SxJp36porDSRmLF5J6MvP3KWuL8 XpG7hc1P6UApTQD9N2w9CpVte+FkmdtSXoJskaynzR4ULyV1xpPwS4sutO+TJkE8 8Ngdi/I4pQ4naiLjmmuP7+x05bgV1K0K4Sc0S77s7uIqXpR458wrFjB1foAGcedr 2Pbcshok2qKOIw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:26 2026 by rpki-client