This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json) Hash identifier: 1gXsdLycwUhBXNtzYDFiZDPtRO2MFMggAbOVXtkQ/NQ= Subject key identifier: 23:BD:F0:6C:7E:15:B2:D5:1B:92:B2:4C:9F:31:A7:B9:0B:86:0A:7E Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd Certificate serial: 019C427D5E10429E75059BED00E4A81D7BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft Manifest number: 0C62 Signing time: Mon 09 Feb 2026 13:00:38 +0000 Manifest this update: Mon 09 Feb 2026 13:00:38 +0000 Manifest next update: Tue 10 Feb 2026 13:00:38 +0000 Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: y+61db1KjCYE/NdSLKEk7uL9/n5pR8VrmoYlwBECm1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:5e:10:42:9e:75:05:9b:ed:00:e4:a8:1d:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd Validity Not Before: Feb 9 13:00:38 2026 GMT Not After : Feb 10 13:00:38 2026 GMT Subject: CN=23bdf06c7e15b2d51b92b24c9f31a7b90b860a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:2f:3a:10:2e:38:99:f0:f4:13:99:e0:1e: 53:f0:92:b9:3e:09:59:55:84:40:84:fe:cc:9d:3e: 8a:05:7b:e7:54:4c:6a:1a:80:d6:2c:49:39:1c:a0: b7:30:d4:06:83:65:03:1d:e3:6a:50:54:6a:3c:30: 4d:9f:ba:b1:c9:66:c8:15:a7:2b:99:d5:9b:c6:05: 20:e3:02:c9:f1:32:c6:21:30:d7:a3:ef:e4:c8:d5: 01:b2:b8:62:62:4f:d7:aa:ed:a5:ee:61:2c:ad:c0: f9:27:e7:f7:fe:6f:db:77:5d:ee:ad:04:cd:43:ea: 12:9b:85:27:ac:bc:6d:28:59:47:54:c1:5d:20:2c: 01:67:f9:7e:c7:ea:74:4d:ff:b3:cf:36:14:b7:9f: 81:1a:4c:7d:f8:52:36:1f:41:f1:3a:92:39:6b:fa: 78:aa:a4:1e:e7:c5:30:84:df:7a:ad:a6:fe:47:92: 68:a5:9e:3c:58:63:21:38:69:b6:d9:eb:70:26:d6: 70:02:18:d4:20:45:89:4d:23:a7:d9:96:6c:49:eb: ca:53:c5:43:44:25:fe:11:8a:2b:5d:01:3c:02:a8: 95:df:68:ed:68:59:3f:5a:a4:3e:03:de:e6:45:4b: 94:c8:a3:10:14:d9:40:c6:70:a2:2f:73:63:aa:d2: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:F0:6C:7E:15:B2:D5:1B:92:B2:4C:9F:31:A7:B9:0B:86:0A:7E X509v3 Authority Key Identifier: keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1e:04:d1:1e:08:cd:f5:91:9e:6b:cd:44:12:6a:38:e3:1b: 3c:c2:0a:90:d7:a2:96:03:6f:f2:0c:16:8f:36:84:fc:34:26: 8a:23:93:b6:21:67:15:68:95:a3:b6:7f:40:4f:fe:40:bb:33: 7d:a9:77:6e:5d:06:76:91:e7:f3:3c:48:37:82:4e:14:0c:44: 7d:1d:1d:70:ce:95:7f:44:81:36:3b:cd:8e:97:2a:b1:ce:bd: 46:0d:6c:46:24:a9:b8:92:4d:d5:46:db:f1:3c:82:c5:c6:4c: a6:70:46:24:85:61:98:40:36:35:ed:40:ad:7f:d5:8e:a5:d4: 49:c9:ab:9f:af:b5:de:38:ea:f5:78:42:01:94:ab:5d:d2:be: fa:b2:aa:2d:95:97:59:65:5f:44:8b:0c:38:b6:be:cf:cd:18: 1e:8c:23:9c:ff:0f:3b:1e:dc:b4:d4:b1:7f:be:90:a9:ff:63: 65:37:e1:a0:54:16:8f:29:ba:93:0a:71:13:1b:19:3d:9e:a8: 96:7c:84:af:ea:cb:62:4e:6d:a1:40:d8:32:d6:ed:8d:0e:13: 5a:2d:dc:8b:09:53:9c:d1:e1:43:8d:c8:ee:b3:d1:f7:db:4a: c7:63:87:09:e8:a4:e6:04:33:c7:02:19:a4:88:87:cc:1c:21: 45:73:14:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfV4QQp51BZvtAOSoHXvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDY2YjZiNmMxMzYwMzUwMWFhMjU2ZmNkYzM3NDBkZjc3 ODAxZGQwHhcNMjYwMjA5MTMwMDM4WhcNMjYwMjEwMTMwMDM4WjAzMTEwLwYDVQQD EygyM2JkZjA2YzdlMTViMmQ1MWI5MmIyNGM5ZjMxYTdiOTBiODYwYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr4vOhAuOJnw9BOZ4B5T8JK5PglZ VYRAhP7MnT6KBXvnVExqGoDWLEk5HKC3MNQGg2UDHeNqUFRqPDBNn7qxyWbIFacr mdWbxgUg4wLJ8TLGITDXo+/kyNUBsrhiYk/Xqu2l7mEsrcD5J+f3/m/bd13urQTN Q+oSm4UnrLxtKFlHVMFdICwBZ/l+x+p0Tf+zzzYUt5+BGkx9+FI2H0HxOpI5a/p4 qqQe58UwhN96rab+R5JopZ48WGMhOGm22etwJtZwAhjUIEWJTSOn2ZZsSevKU8VD RCX+EYorXQE8AqiV32jtaFk/WqQ+A97mRUuUyKMQFNlAxnCiL3NjqtLt/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO98Gx+FbLVG5KyTJ8xp7kLhgp+MB8GA1UdIwQY MBaAFCYGa2tsE2A1Aaolb83DdA33eAHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmIt MTRiNDdmNTkxMWQ3LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmItMTRiNDdmNTkxMWQ3 LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAth4E0R4I zfWRnmvNRBJqOOMbPMIKkNeilgNv8gwWjzaE/DQmiiOTtiFnFWiVo7Z/QE/+QLsz fal3bl0GdpHn8zxIN4JOFAxEfR0dcM6Vf0SBNjvNjpcqsc69Rg1sRiSpuJJN1Ubb 8TyCxcZMpnBGJIVhmEA2Ne1ArX/VjqXUScmrn6+13jjq9XhCAZSrXdK++rKqLZWX WWVfRIsMOLa+z80YHowjnP8POx7ctNSxf76Qqf9jZTfhoFQWjym6kwpxExsZPZ6o lnyEr+rLYk5toUDYMtbtjQ4TWi3ciwlTnNHhQ43I7rPR99tKx2OHCeik5gQzxwIZ pIiHzBwhRXMURg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:12 2026 by rpki-client