This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json) Hash identifier: /mgczU1ywhX514dtZ0ejLLxUbbXPLxPADI1SQZTInBg= Subject key identifier: 1F:49:AF:91:CE:42:CA:48:99:BD:30:19:CA:E6:FC:99:3E:24:77:67 Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e Certificate serial: 019C43227F4E17AFD21641F3A2DCCF59AF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 16:01:00 +0000 Manifest this update: Mon 09 Feb 2026 16:01:00 +0000 Manifest next update: Tue 10 Feb 2026 16:01:00 +0000 Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: rOzKp1b/9D7E6EE7PlrgvDeYkKMGQemcCdCG4ZVu5v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7f:4e:17:af:d2:16:41:f3:a2:dc:cf:59:af:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e Validity Not Before: Feb 9 16:01:00 2026 GMT Not After : Feb 10 16:01:00 2026 GMT Subject: CN=1f49af91ce42ca4899bd3019cae6fc993e247767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:c2:2b:5c:01:7a:6e:a6:1b:f9:23:a9:9a: 29:46:c6:e4:13:c1:e9:82:8e:ef:a2:e9:3f:f7:a6: 37:02:c9:a6:13:de:c6:c1:65:41:23:44:d5:69:6f: d9:21:cf:be:f5:f7:5a:64:d3:e8:f3:18:80:27:e1: e4:bc:06:2c:50:25:b5:2a:30:2a:eb:e2:58:99:41: c5:e9:f8:e7:ec:02:11:a7:41:0b:72:83:4a:88:80: af:37:7f:7d:96:31:92:35:b7:17:b4:6d:93:41:ee: d8:bb:7c:a0:52:61:80:7f:aa:5f:60:46:a8:db:f3: 27:2a:ff:f1:c5:e6:39:94:32:2b:b1:c8:fc:42:22: 0b:92:b2:7f:76:6a:cc:7f:7a:64:6e:df:29:16:0d: 11:06:8a:37:28:19:37:cd:8e:58:67:01:04:6c:5e: dd:26:c1:04:9b:24:df:65:3b:1d:e3:1c:fa:c5:7a: ec:31:c9:3d:f4:bd:b3:ea:94:8c:ac:41:db:32:85: bb:28:85:b2:a8:62:df:f3:0c:2c:ac:c3:47:f1:20: 63:d8:ac:1d:03:8e:23:ad:83:4f:5a:11:28:99:cd: 03:ef:d8:e5:db:52:4a:10:46:b6:18:87:cb:be:9b: 11:81:a6:48:f4:5b:19:ce:cb:de:e5:84:b5:79:f4: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:49:AF:91:CE:42:CA:48:99:BD:30:19:CA:E6:FC:99:3E:24:77:67 X509v3 Authority Key Identifier: keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d1:20:1c:cc:a9:bb:46:c8:15:83:dd:63:2b:1c:ae:38:e5: c8:4a:e1:2a:a3:81:cf:9e:81:50:50:3a:cd:1f:75:c6:4d:0e: 7b:25:5b:99:90:ca:ea:dd:ee:09:af:d0:3a:3d:2a:00:d3:9c: 24:84:5d:31:a7:03:70:cf:19:92:da:7f:01:ef:eb:2e:0f:0b: 63:98:3d:74:45:d3:80:ff:39:c9:ce:20:f2:07:46:73:46:e9: 00:3d:bb:b6:2c:e9:bc:89:e3:e5:00:ce:d0:23:34:45:d0:1d: a0:bd:09:95:10:12:97:5f:0b:63:0d:f7:b0:38:5d:aa:e4:a7: 34:37:d9:82:6c:3c:86:b2:97:61:21:b1:c2:7f:34:42:cd:97: 37:15:0d:ab:04:43:64:53:93:cb:1e:52:a1:02:59:c2:d6:22: 20:da:d2:4e:02:2c:b0:48:51:89:fc:99:fd:c5:c4:b3:65:9d: 1e:83:ca:00:85:d3:80:41:46:f2:46:7c:9c:fa:bc:33:88:12: 52:e4:0d:f2:82:f5:06:0d:29:06:4e:9e:d8:7e:8d:4e:dd:7a: a0:49:dc:ee:c5:b8:fd:40:dc:9d:c3:ef:89:10:42:b1:01:54: 8e:b6:5b:a1:9a:88:33:f8:01:b7:32:b5:63:02:de:38:e9:34: c7:c2:6a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIn9OF6/SFkHzotzPWa+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjU0NmRjYTM2YmMwYzRiNWIzNGNlNThkODA3MWU4NzVj M2E0NmUwHhcNMjYwMjA5MTYwMTAwWhcNMjYwMjEwMTYwMTAwWjAzMTEwLwYDVQQD EygxZjQ5YWY5MWNlNDJjYTQ4OTliZDMwMTljYWU2ZmM5OTNlMjQ3NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjzCK1wBem6mG/kjqZopRsbkE8Hp go7vouk/96Y3AsmmE97GwWVBI0TVaW/ZIc++9fdaZNPo8xiAJ+HkvAYsUCW1KjAq 6+JYmUHF6fjn7AIRp0ELcoNKiICvN399ljGSNbcXtG2TQe7Yu3ygUmGAf6pfYEao 2/MnKv/xxeY5lDIrscj8QiILkrJ/dmrMf3pkbt8pFg0RBoo3KBk3zY5YZwEEbF7d JsEEmyTfZTsd4xz6xXrsMck99L2z6pSMrEHbMoW7KIWyqGLf8wwsrMNH8SBj2Kwd A44jrYNPWhEomc0D79jl21JKEEa2GIfLvpsRgaZI9FsZzsve5YS1efRkvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9Jr5HOQspImb0wGcrm/Jk+JHdnMB8GA1UdIwQY MBaAFI21Rtyja8DEtbNM5Y2Aceh1w6RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJWRzNLTnJ3TVMxczB6bGpZQng2SFhEcEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wZTY3M2MtMjUzNC00NTU1LTk0MmUt ODAwYWZhOWJiZmRlLzEvamJWRzNLTnJ3TVMxczB6bGpZQng2SFhEcEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wZTY3M2MtMjUzNC00NTU1LTk0MmUtODAwYWZhOWJiZmRl LzEvamJWRzNLTnJ3TVMxczB6bGpZQng2SFhEcEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstEgHMyp u0bIFYPdYyscrjjlyErhKqOBz56BUFA6zR91xk0OeyVbmZDK6t3uCa/QOj0qANOc JIRdMacDcM8Zktp/Ae/rLg8LY5g9dEXTgP85yc4g8gdGc0bpAD27tizpvInj5QDO 0CM0RdAdoL0JlRASl18LYw33sDhdquSnNDfZgmw8hrKXYSGxwn80Qs2XNxUNqwRD ZFOTyx5SoQJZwtYiINrSTgIssEhRifyZ/cXEs2WdHoPKAIXTgEFG8kZ8nPq8M4gS UuQN8oL1Bg0pBk6e2H6NTt16oEnc7sW4/UDcncPviRBCsQFUjrZboZqIM/gBtzK1 YwLeOOk0x8JqcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:59 2026 by rpki-client