This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json) Hash identifier: SbzVsZcA7mFAJ2gRQiUOu3/LFAIRUdAfqFJ5EFIr8NU= Subject key identifier: BA:64:54:FD:AD:28:C1:C0:2D:6F:9F:99:90:A9:55:81:61:43:10:B6 Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Certificate serial: 019C427D2D50661F2B2AE7AC0C4AFFF6021B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft Manifest number: 135A Signing time: Mon 09 Feb 2026 13:00:25 +0000 Manifest this update: Mon 09 Feb 2026 13:00:25 +0000 Manifest next update: Tue 10 Feb 2026 13:00:25 +0000 Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: vWUJ4LY3XIpLkA+x7zHiajrwboyw9x5Hhyg/dutE/eA=) 2: xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa (hash: RH1WTDRs/8Vp6UylYLIYMotB4x6HLaJVltA1rEKfSrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2d:50:66:1f:2b:2a:e7:ac:0c:4a:ff:f6:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Validity Not Before: Feb 9 13:00:25 2026 GMT Not After : Feb 10 13:00:25 2026 GMT Subject: CN=ba6454fdad28c1c02d6f9f9990a95581614310b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:6a:f6:e6:95:30:64:8d:92:c2:1a:50:a6: e7:dd:d4:06:6d:9f:45:83:c1:ea:5d:81:54:ec:6a: 38:1a:ad:ff:6c:e7:93:ea:8b:d2:b6:b7:2d:4f:a5: 4b:3e:19:24:9a:1d:34:be:63:7c:a0:0a:b9:92:03: 6c:7e:f4:07:1c:f2:ad:b9:fb:e3:cb:f9:9e:ce:a4: 43:6b:c2:84:86:4c:66:45:65:2b:2a:03:c8:57:b2: 57:65:8e:26:e2:07:35:95:e3:17:2f:e9:96:31:72: 51:24:c5:bd:0d:5e:b4:ce:e0:a9:ef:21:50:00:0b: 55:5c:a1:4c:29:50:75:8c:19:32:f5:a8:77:58:f4: 86:ec:d0:86:0a:56:8f:98:93:c8:d7:5e:48:f0:1a: 4a:82:ba:0f:85:78:dd:8a:90:6f:a5:35:64:3d:fb: 18:e3:b5:47:9a:c4:5e:12:65:49:38:3f:65:7e:04: cf:75:c3:3f:05:40:43:43:84:43:c8:38:55:cf:4a: 71:5c:13:ce:5a:65:fa:61:22:92:88:d2:66:3c:f5: f9:37:63:bc:b0:41:35:e5:46:5d:a8:51:ff:95:5d: 27:b0:1e:3b:e7:14:cf:e2:09:e9:60:5d:81:c3:0b: 65:26:9b:fc:cf:2a:03:6d:fa:17:5a:f4:84:7f:eb: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:64:54:FD:AD:28:C1:C0:2D:6F:9F:99:90:A9:55:81:61:43:10:B6 X509v3 Authority Key Identifier: keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:31:e6:72:c6:53:96:5d:1a:b5:4b:f0:a5:97:95:78:7d:54: 08:48:d2:80:39:73:b5:cf:17:e3:6d:f6:59:0a:29:86:14:1d: 1a:0e:a2:ba:26:b9:eb:08:86:ed:e5:24:fa:78:f3:4c:24:ba: e3:01:ba:1d:d3:05:e8:7e:7e:83:41:85:23:be:ce:07:e1:29: 79:23:55:8e:b3:76:3b:c3:81:0f:7b:08:4d:b6:20:4a:17:f5: 57:3f:a8:7d:84:d6:01:f6:32:0e:5e:c5:db:52:e5:c5:bc:c6: d4:a7:6a:9d:b3:e8:5f:8c:7a:3b:d2:8b:29:a5:ba:e5:94:a2: 48:71:a2:67:84:1c:7c:51:81:5f:47:d5:36:6f:bd:97:8f:2f: e6:5d:e1:58:b7:de:e2:43:bc:65:95:3b:52:5c:8c:6d:37:01: e4:a5:93:7b:83:6c:45:66:cb:6d:7b:1d:d4:72:70:dc:14:ab: 0d:91:4a:d4:22:4d:c7:88:5b:d9:ea:98:5d:b3:7d:1e:39:af: b3:a7:2b:34:d1:31:0d:ec:12:f9:5f:2a:70:f6:0b:43:f4:ab: 49:a2:ff:03:17:de:c3:85:2b:16:1e:91:ff:e2:b3:e4:ac:0b: 4c:d3:25:67:5d:4a:a9:62:a8:60:62:85:7a:dd:b0:34:5d:2a: 00:d8:6d:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfS1QZh8rKuesDEr/9gIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OWI1NThjNDg1NTBlMDYyMzRjNWRkZmZjYWExZmNmMmU5 YWM2ZmYwHhcNMjYwMjA5MTMwMDI1WhcNMjYwMjEwMTMwMDI1WjAzMTEwLwYDVQQD EyhiYTY0NTRmZGFkMjhjMWMwMmQ2ZjlmOTk5MGE5NTU4MTYxNDMxMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9q9uaVMGSNksIaUKbn3dQGbZ9F g8HqXYFU7Go4Gq3/bOeT6ovStrctT6VLPhkkmh00vmN8oAq5kgNsfvQHHPKtufvj y/mezqRDa8KEhkxmRWUrKgPIV7JXZY4m4gc1leMXL+mWMXJRJMW9DV60zuCp7yFQ AAtVXKFMKVB1jBky9ah3WPSG7NCGClaPmJPI115I8BpKgroPhXjdipBvpTVkPfsY 47VHmsReEmVJOD9lfgTPdcM/BUBDQ4RDyDhVz0pxXBPOWmX6YSKSiNJmPPX5N2O8 sEE15UZdqFH/lV0nsB475xTP4gnpYF2BwwtlJpv8zyoDbfoXWvSEf+sEiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpkVP2tKMHALW+fmZCpVYFhQxC2MB8GA1UdIwQY MBaAFCSbVYxIVQ4GI0xd3/yqH88umsb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTct MTIxZDUzNTA4NWQ2LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTctMTIxZDUzNTA4NWQ2 LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDHmcsZT ll0atUvwpZeVeH1UCEjSgDlztc8X4232WQophhQdGg6iuia56wiG7eUk+njzTCS6 4wG6HdMF6H5+g0GFI77OB+EpeSNVjrN2O8OBD3sITbYgShf1Vz+ofYTWAfYyDl7F 21LlxbzG1KdqnbPoX4x6O9KLKaW65ZSiSHGiZ4QcfFGBX0fVNm+9l48v5l3hWLfe 4kO8ZZU7UlyMbTcB5KWTe4NsRWbLbXsd1HJw3BSrDZFK1CJNx4hb2eqYXbN9Hjmv s6crNNExDewS+V8qcPYLQ/SrSaL/Axfew4UrFh6R/+Kz5KwLTNMlZ11KqWKoYGKF et2wNF0qANhtHA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:14 2026 by rpki-client