This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json) Hash identifier: Hl0GN6Q2ksqUNWblDMBgZ3yBH/J9EuaChOVtqr4QnJE= Subject key identifier: AF:0E:E2:DC:17:47:0B:3C:08:D5:E9:F0:BF:AD:52:AF:35:50:47:0A Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b Certificate serial: 019C41A242E7C7D249FC52DCA1EBDE90B063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft Manifest number: 02FB Signing time: Mon 09 Feb 2026 09:01:18 +0000 Manifest this update: Mon 09 Feb 2026 09:01:18 +0000 Manifest next update: Tue 10 Feb 2026 09:01:18 +0000 Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: sYRV4m5jyk0GWr7NJuXLo51h8IDHLNTO56oshlsZmnQ=) 2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:42:e7:c7:d2:49:fc:52:dc:a1:eb:de:90:b0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b Validity Not Before: Feb 9 09:01:18 2026 GMT Not After : Feb 10 09:01:18 2026 GMT Subject: CN=af0ee2dc17470b3c08d5e9f0bfad52af3550470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:a9:15:6f:da:a0:4d:c8:88:ba:40:f9:04: e3:06:87:8f:19:98:be:7b:5d:b1:6e:dc:55:a8:96: 01:d7:da:bf:c3:da:6f:2b:a4:ab:0d:92:9f:61:63: 43:5a:a1:96:d8:bb:12:76:1a:be:26:05:3f:b3:26: 39:99:27:d1:38:08:55:e3:28:93:a0:1e:0f:7b:0b: 04:bd:d4:ed:e7:a5:6a:8d:16:ce:e6:a0:0e:f8:9d: 0f:0e:1c:13:61:72:6e:91:fd:50:fa:e6:92:7f:ed: c6:7e:de:42:35:5a:75:2c:98:56:9c:10:ed:9d:55: 2c:1d:b7:40:e1:1f:2f:68:c6:d5:63:29:35:bf:4a: 47:e2:23:9f:29:d7:0b:d5:0e:2a:2f:52:4d:f9:a0: 90:a8:81:4e:0e:1d:08:df:80:ac:35:4c:49:fa:4f: c0:7d:32:6c:b4:bd:db:2f:88:1c:81:39:45:24:93: a0:7c:eb:5a:9f:76:b6:f9:6d:ca:cc:81:80:ae:02: ab:ae:14:f5:5a:49:98:e4:96:28:f3:ee:e1:d8:d9: a1:7c:63:b6:24:bb:84:c1:19:08:aa:2e:83:b3:62: 14:e2:06:80:a8:a5:10:6a:d7:c3:85:32:90:2f:83: 20:a5:dd:07:6b:d7:fa:3e:68:93:61:83:3a:45:4a: e9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0E:E2:DC:17:47:0B:3C:08:D5:E9:F0:BF:AD:52:AF:35:50:47:0A X509v3 Authority Key Identifier: keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:de:6d:fc:ac:43:04:ba:28:d7:90:78:88:ce:e8:06:97:df: 3c:cf:2e:fe:64:fd:67:e0:46:90:9a:0a:13:71:16:a0:61:88: 6a:04:f4:52:50:6f:d0:2f:c3:e9:1b:b9:2d:a5:54:b0:40:74: 18:57:93:34:b9:4d:7c:34:17:04:b2:2b:30:f7:84:ee:37:9c: d1:dd:54:46:86:3a:7a:13:f6:f3:60:d4:b7:e6:60:8c:55:9a: 11:99:fb:3b:06:82:42:81:45:78:93:89:a0:4e:f4:e7:37:06: a4:7f:48:81:79:fa:cc:b2:98:00:c9:58:4f:b6:23:87:95:52: 18:c5:09:f6:eb:a3:1d:1a:b2:c0:2a:dc:9a:c2:6f:b0:a9:3e: 49:cd:cf:33:ad:b3:36:46:68:a6:43:71:23:b0:d0:a0:e9:cb: 6e:74:cd:c2:4e:fb:9d:60:c5:ba:19:9e:fa:3d:72:0e:0e:30: 92:81:ce:aa:00:51:fb:ba:ce:6e:c1:e1:7d:fe:56:80:2b:d2: 4e:4e:a5:36:9f:aa:46:cd:c0:a1:72:74:ab:8e:3d:65:46:84: dd:83:77:1c:e2:9d:bf:84:20:b6:dc:3b:f9:5e:2a:22:96:9a: f0:81:a4:21:db:fd:b8:ca:d1:a7:1f:ed:00:9c:bc:f1:94:4c: da:a9:77:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBokLnx9JJ/FLcoevekLBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz MzMxNmIwHhcNMjYwMjA5MDkwMTE4WhcNMjYwMjEwMDkwMTE4WjAzMTEwLwYDVQQD EyhhZjBlZTJkYzE3NDcwYjNjMDhkNWU5ZjBiZmFkNTJhZjM1NTA0NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM6pFW/aoE3IiLpA+QTjBoePGZi+ e12xbtxVqJYB19q/w9pvK6SrDZKfYWNDWqGW2LsSdhq+JgU/syY5mSfROAhV4yiT oB4PewsEvdTt56VqjRbO5qAO+J0PDhwTYXJukf1Q+uaSf+3Gft5CNVp1LJhWnBDt nVUsHbdA4R8vaMbVYyk1v0pH4iOfKdcL1Q4qL1JN+aCQqIFODh0I34CsNUxJ+k/A fTJstL3bL4gcgTlFJJOgfOtan3a2+W3KzIGArgKrrhT1WkmY5JYo8+7h2NmhfGO2 JLuEwRkIqi6Ds2IU4gaAqKUQatfDhTKQL4Mgpd0Ha9f6PmiTYYM6RUrpXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8O4twXRws8CNXp8L+tUq81UEcKMB8GA1UdIwQY MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJN5t/KxD BLoo15B4iM7oBpffPM8u/mT9Z+BGkJoKE3EWoGGIagT0UlBv0C/D6Ru5LaVUsEB0 GFeTNLlNfDQXBLIrMPeE7jec0d1URoY6ehP282DUt+ZgjFWaEZn7OwaCQoFFeJOJ oE705zcGpH9IgXn6zLKYAMlYT7Yjh5VSGMUJ9uujHRqywCrcmsJvsKk+Sc3PM62z NkZopkNxI7DQoOnLbnTNwk77nWDFuhme+j1yDg4wkoHOqgBR+7rObsHhff5WgCvS Tk6lNp+qRs3AoXJ0q449ZUaE3YN3HOKdv4Qgttw7+V4qIpaa8IGkIdv9uMrRpx/t AJy88ZRM2ql33Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:36 2026 by rpki-client