This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json) Hash identifier: +K2zcIq5NbjuZJAWzpVQuW+jkCuxcDrCvjbCJNoK21w= Subject key identifier: 9A:17:36:9F:AD:1D:D0:78:36:71:F9:80:02:4D:8D:AD:75:42:42:57 Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51 Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51 Certificate serial: 019C4323192B6948E62AE870B4A25EAE9CFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft Manifest number: 167A Signing time: Mon 09 Feb 2026 16:01:39 +0000 Manifest this update: Mon 09 Feb 2026 16:01:39 +0000 Manifest next update: Tue 10 Feb 2026 16:01:39 +0000 Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: FlTJ4R85ivxoLyYZZJUOGDo7niMo3ix3eh6lCGCMxZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:19:2b:69:48:e6:2a:e8:70:b4:a2:5e:ae:9c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51 Validity Not Before: Feb 9 16:01:39 2026 GMT Not After : Feb 10 16:01:39 2026 GMT Subject: CN=9a17369fad1dd0783671f980024d8dad75424257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:e4:88:e2:ce:b9:1f:7e:63:62:0b:27:fd: d1:63:61:9b:af:e0:f6:a9:f6:70:25:39:fd:63:e8: 56:31:04:9a:c6:0d:8e:17:be:ff:cc:15:63:4a:d6: 9a:3a:74:0b:a3:74:c1:30:18:52:f1:d3:71:bc:1f: 5a:7f:ae:26:6d:ab:3d:cc:fb:f3:6d:ad:af:c5:bc: 59:50:76:b3:7a:d3:36:3c:37:91:da:7d:61:4b:40: e3:8e:28:e4:5d:72:9f:66:cc:e4:cc:ff:9c:cd:24: 8b:44:5e:c4:5e:5e:46:de:fe:00:35:ea:d6:48:ba: d3:8c:38:67:05:ef:a7:66:e3:82:c8:de:a4:ca:cb: 98:31:e6:99:45:35:7e:80:c6:29:b9:b5:61:c3:ee: 36:ea:00:9e:a4:40:cf:3b:51:90:a8:f2:2c:48:84: 56:bc:3e:a6:51:25:7f:ba:aa:48:77:5b:43:85:34: 3b:b4:6b:5a:4c:02:10:c9:29:e9:27:73:6e:f3:a7: ea:0d:51:16:c3:ec:85:41:2d:07:3e:3b:6c:78:ff: a2:ce:16:25:bf:1c:3a:bb:84:6f:14:fc:84:aa:47: 5c:2b:db:75:98:8c:28:6a:da:c5:06:43:de:2a:22: c4:48:ef:5c:7e:dc:39:cf:79:fc:32:aa:be:6f:ad: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:17:36:9F:AD:1D:D0:78:36:71:F9:80:02:4D:8D:AD:75:42:42:57 X509v3 Authority Key Identifier: keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:24:a7:79:e6:29:41:94:e5:aa:06:c6:0d:2d:11:b6:c0:d4: ac:45:ad:3b:85:01:cc:5c:55:b6:4d:4e:f3:6f:4f:4c:3f:41: 73:26:e9:dd:f9:03:eb:11:cc:81:99:8d:b2:a4:0f:76:2f:e4: 12:b8:46:2d:2a:d5:2e:67:3e:3c:48:36:37:5a:d7:55:a4:ea: a6:33:d7:d7:fe:41:69:75:3b:2c:e3:73:df:cd:d7:39:e9:cf: ed:e4:dd:32:0f:8e:ea:4c:ba:09:44:de:bc:f1:0a:f4:ee:bf: d1:db:7a:e2:1d:00:ae:c1:bf:11:be:6f:f3:88:55:3f:b8:f9: c3:fc:19:d9:e6:ae:48:13:ae:0c:f6:9d:fd:c8:2b:2e:f7:8a: 5d:74:5a:26:30:64:22:9c:bc:f3:46:69:35:9c:e5:94:41:fb: 6e:a4:5e:7d:fd:9f:a3:46:7b:16:4e:93:40:31:9a:f3:54:5d: d0:1f:1f:e6:7b:c3:1a:06:ae:3e:57:0b:1b:86:34:fb:7e:67: 8e:26:6c:97:d8:36:57:2f:79:82:b8:a5:8e:58:41:b3:7f:b7: c6:46:e8:05:c2:26:fe:af:ed:3c:f7:39:f9:83:30:09:0b:31: 0f:c6:58:db:7a:68:3c:60:b6:15:b0:77:c4:43:11:fe:24:d2: 6c:44:59:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIxkraUjmKuhwtKJerpz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2 MjBjNTEwHhcNMjYwMjA5MTYwMTM5WhcNMjYwMjEwMTYwMTM5WjAzMTEwLwYDVQQD Eyg5YTE3MzY5ZmFkMWRkMDc4MzY3MWY5ODAwMjRkOGRhZDc1NDI0MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dbkiOLOuR9+Y2ILJ/3RY2Gbr+D2 qfZwJTn9Y+hWMQSaxg2OF77/zBVjStaaOnQLo3TBMBhS8dNxvB9af64mbas9zPvz ba2vxbxZUHazetM2PDeR2n1hS0DjjijkXXKfZszkzP+czSSLRF7EXl5G3v4ANerW SLrTjDhnBe+nZuOCyN6kysuYMeaZRTV+gMYpubVhw+426gCepEDPO1GQqPIsSIRW vD6mUSV/uqpId1tDhTQ7tGtaTAIQySnpJ3Nu86fqDVEWw+yFQS0HPjtseP+izhYl vxw6u4RvFPyEqkdcK9t1mIwoatrFBkPeKiLESO9cftw5z3n8Mqq+b63mYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoXNp+tHdB4NnH5gAJNja11QkJXMB8GA1UdIwQY MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlySneeYp QZTlqgbGDS0RtsDUrEWtO4UBzFxVtk1O829PTD9Bcybp3fkD6xHMgZmNsqQPdi/k ErhGLSrVLmc+PEg2N1rXVaTqpjPX1/5BaXU7LONz383XOenP7eTdMg+O6ky6CUTe vPEK9O6/0dt64h0ArsG/Eb5v84hVP7j5w/wZ2eauSBOuDPad/cgrLveKXXRaJjBk Ipy880ZpNZzllEH7bqReff2fo0Z7Fk6TQDGa81Rd0B8f5nvDGgauPlcLG4Y0+35n jiZsl9g2Vy95griljlhBs3+3xkboBcIm/q/tPPc5+YMwCQsxD8ZY23poPGC2FbB3 xEMR/iTSbERZTw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:55 2026 by rpki-client