This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json) Hash identifier: doWsvoAeErA8/uqp8M7/cne3MKCdNpcJ33MiGbLcPYs= Subject key identifier: 61:C6:36:2B:CF:CE:18:EB:29:7C:A7:98:71:BD:8A:89:1C:5F:CF:89 Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c Certificate serial: 019C4358C1747A7359E805CCECCD819CBE19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft Manifest number: 0291 Signing time: Mon 09 Feb 2026 17:00:15 +0000 Manifest this update: Mon 09 Feb 2026 17:00:15 +0000 Manifest next update: Tue 10 Feb 2026 17:00:15 +0000 Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: pCI1RgE078rf+XCKzWXH09DhPTCcsl9AvToRY4It5OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c1:74:7a:73:59:e8:05:cc:ec:cd:81:9c:be:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c Validity Not Before: Feb 9 17:00:15 2026 GMT Not After : Feb 10 17:00:15 2026 GMT Subject: CN=61c6362bcfce18eb297ca79871bd8a891c5fcf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:01:b6:46:6a:ba:a3:6d:0e:46:46:b7:f4: c0:5b:f1:14:cc:bd:47:ee:b9:a8:f8:00:82:42:ac: 86:96:8c:42:51:66:f2:9c:7d:90:3f:bf:3a:3d:6a: 88:54:39:a5:6d:eb:f9:ef:40:21:45:5b:24:15:4b: 56:ff:1a:c8:37:0d:35:53:0f:00:65:be:3c:d7:d5: 42:e7:1f:a1:48:31:ed:e4:28:2f:65:c7:22:38:be: dd:7c:7a:e4:e5:10:87:56:8b:27:f9:f1:95:61:1c: c8:ef:04:32:c4:1d:98:dc:97:e8:96:2b:a9:19:77: 83:0f:d4:3a:f7:2f:58:4f:cb:fc:29:2a:30:3b:6a: 85:ba:dc:40:81:86:7a:d0:e4:13:75:b8:64:bd:94: cd:a4:89:77:2a:96:ca:b9:96:84:57:d9:04:a6:f5: 9f:f8:65:95:b2:2f:96:8d:be:2e:37:25:c4:4e:4c: 1c:7f:e7:c7:3e:8b:5e:a2:ba:5a:5c:cd:02:dc:a0: 6b:ab:c5:39:54:78:42:96:21:25:a3:79:b1:05:a1: fe:6f:1b:0a:f2:f4:b8:e2:73:2b:64:08:4b:d0:d2: 12:a5:91:08:e8:d8:52:e2:1f:9b:02:eb:ed:1d:44: c5:5b:2d:e3:bc:15:bf:09:45:88:4e:0d:42:be:8c: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:36:2B:CF:CE:18:EB:29:7C:A7:98:71:BD:8A:89:1C:5F:CF:89 X509v3 Authority Key Identifier: keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:54:ca:c6:30:37:eb:c6:7e:ee:11:e9:4e:3d:c2:d5:97:62: b6:a0:2d:b8:76:48:dd:60:c7:89:fd:41:57:7f:b4:20:54:5d: 83:69:81:ae:4c:70:62:f0:08:57:a8:09:37:36:7f:b0:d5:6a: a0:1d:6f:b1:12:56:33:e5:b2:e7:be:52:98:40:7d:ca:b0:44: 05:08:09:27:7e:2b:a7:b6:1b:5c:d1:b7:a3:71:00:7b:0e:19: 4e:50:08:64:d2:fd:ea:ba:c6:4f:56:c5:cf:55:1e:69:d8:7b: a3:cd:9d:a0:ca:d9:97:f9:15:21:19:26:66:74:e8:7b:31:ba: e6:fc:5a:50:f7:e1:c2:cf:a7:9c:37:6e:b9:db:8c:60:57:2b: db:3f:e1:59:68:91:14:b1:5a:67:0b:78:e7:28:25:15:06:c1: 79:93:5b:90:df:a9:d4:38:fa:79:6a:9d:62:83:68:32:72:90: 5a:ad:66:d7:96:bf:cd:f7:3c:8d:a6:e2:af:a8:04:c5:03:22: 62:fe:f3:6d:27:b1:b0:03:7f:4d:cf:b8:c8:29:1f:88:8c:4c: f6:5a:cd:ac:7a:9e:3d:0e:19:06:14:da:8f:c9:f2:09:75:92: 78:ca:6a:45:8e:93:34:fc:0c:23:d8:d7:86:ae:ab:41:44:ff: c7:3c:6c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMF0enNZ6AXM7M2BnL4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MTIyODY5ZDBlYTRmOTg3YWI1MWZiOTc5MTgwMGQ4NDA1 YTlhM2MwHhcNMjYwMjA5MTcwMDE1WhcNMjYwMjEwMTcwMDE1WjAzMTEwLwYDVQQD Eyg2MWM2MzYyYmNmY2UxOGViMjk3Y2E3OTg3MWJkOGE4OTFjNWZjZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9cBtkZquqNtDkZGt/TAW/EUzL1H 7rmo+ACCQqyGloxCUWbynH2QP786PWqIVDmlbev570AhRVskFUtW/xrINw01Uw8A Zb4819VC5x+hSDHt5CgvZcciOL7dfHrk5RCHVosn+fGVYRzI7wQyxB2Y3Jfoliup GXeDD9Q69y9YT8v8KSowO2qFutxAgYZ60OQTdbhkvZTNpIl3KpbKuZaEV9kEpvWf +GWVsi+Wjb4uNyXETkwcf+fHPoteorpaXM0C3KBrq8U5VHhCliElo3mxBaH+bxsK 8vS44nMrZAhL0NISpZEI6NhS4h+bAuvtHUTFWy3jvBW/CUWITg1CvowwlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHGNivPzhjrKXynmHG9iokcX8+JMB8GA1UdIwQY MBaAFCUSKGnQ6k+YerUfuXkYANhAWpo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wZTVkNGItNjI1Yy00NTcxLWJiNDUt ODY5MjIwNjc3YmM2LzEvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wZTVkNGItNjI1Yy00NTcxLWJiNDUtODY5MjIwNjc3YmM2 LzEvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1TKxjA3 68Z+7hHpTj3C1ZditqAtuHZI3WDHif1BV3+0IFRdg2mBrkxwYvAIV6gJNzZ/sNVq oB1vsRJWM+Wy575SmEB9yrBEBQgJJ34rp7YbXNG3o3EAew4ZTlAIZNL96rrGT1bF z1Ueadh7o82doMrZl/kVIRkmZnToezG65vxaUPfhws+nnDduuduMYFcr2z/hWWiR FLFaZwt45yglFQbBeZNbkN+p1Dj6eWqdYoNoMnKQWq1m15a/zfc8jabir6gExQMi Yv7zbSexsAN/Tc+4yCkfiIxM9lrNrHqePQ4ZBhTaj8nyCXWSeMpqRY6TNPwMI9jX hq6rQUT/xzxsLA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:47 2026 by rpki-client