This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json) Hash identifier: ySPqH64u55tvxNf2rGoasCRJ58SdmujA32CmaoYU0MA= Subject key identifier: 1B:B3:D3:F8:F0:71:47:DC:B1:6D:AE:59:B4:62:7C:CF:C3:AB:5A:C5 Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34 Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34 Certificate serial: 019C41A1B1B4847AE613A45CAFCEA9D45525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft Manifest number: 0B05 Signing time: Mon 09 Feb 2026 09:00:41 +0000 Manifest this update: Mon 09 Feb 2026 09:00:41 +0000 Manifest next update: Tue 10 Feb 2026 09:00:41 +0000 Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: dFPjhwt5ViAvwlqzwAscQJhzZ3JZPar3MweTpHneYks=) 2: hKMbuHr2aXc8zzCBYrN1Pl3PnrE.roa (hash: GT98HeqOpegXQJEdGgjawpeJJ5F69fX5SkGY05H68og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:b1:b4:84:7a:e6:13:a4:5c:af:ce:a9:d4:55:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34 Validity Not Before: Feb 9 09:00:41 2026 GMT Not After : Feb 10 09:00:41 2026 GMT Subject: CN=1bb3d3f8f07147dcb16dae59b4627ccfc3ab5ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:36:91:a1:15:b9:47:e5:4f:f6:26:6a:9a: 96:a3:da:b9:4e:3b:51:ea:10:a4:b2:bc:15:9e:44: e9:62:17:b5:a9:79:46:32:4c:77:e5:13:63:e8:38: 72:71:66:7a:02:e9:c2:48:4f:18:3b:8d:8f:b6:b6: c9:39:4b:86:ef:55:ac:ce:38:82:e3:5e:87:dd:39: d4:b9:92:df:69:3c:e1:ee:43:57:3d:04:99:83:c5: 13:04:c4:a9:71:e5:2b:d0:ab:34:ab:1a:e1:d7:0f: 09:65:26:96:26:68:f1:f1:8c:0f:1e:65:11:c2:12: a0:b4:6f:c5:40:0c:14:82:31:c2:06:a9:48:1e:ee: 7d:03:55:0b:a3:3d:d1:1d:86:b2:df:1b:a8:86:ce: 85:ce:38:50:5a:96:9e:a2:23:5c:84:50:6a:e0:f2: cb:5b:36:fc:7a:41:a2:9b:51:5f:ad:64:f6:61:84: d4:11:60:2e:d5:19:bd:ba:da:cd:d6:c8:6d:2a:c0: 38:6c:c2:63:6b:cd:ef:cf:91:4f:89:25:28:79:22: b4:10:b5:37:89:e1:7f:9c:a6:46:7d:8a:c0:1d:46: bb:45:b1:2e:a1:35:b1:a8:a3:0b:0c:36:32:1a:49: aa:19:bb:4c:8f:f9:2c:a5:9e:fc:c2:c8:0b:1f:f5: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:D3:F8:F0:71:47:DC:B1:6D:AE:59:B4:62:7C:CF:C3:AB:5A:C5 X509v3 Authority Key Identifier: keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7c:34:16:00:25:87:e2:7c:22:c2:99:7a:f4:03:5e:5b:17: 1b:f7:7b:96:cd:05:0a:c4:01:8a:ab:90:e0:fc:40:17:15:23: b2:81:04:d8:8b:5a:6a:4b:4b:46:b0:06:9d:47:46:6b:d2:8e: 41:fc:a3:cb:26:1e:d5:49:1c:2b:af:50:1b:56:8b:9f:5e:3e: fb:76:d2:55:8e:0b:48:e7:41:d4:aa:52:d2:3e:e9:03:71:6b: cb:08:64:38:11:46:d1:0a:5b:d8:b6:9f:46:d4:5c:cf:b5:f2: 90:73:19:d4:bd:ac:8b:c3:d5:52:c2:0c:1e:b9:48:86:43:4e: 70:89:67:83:f1:ef:96:8e:e2:67:84:b1:cf:73:a9:c0:4b:83: b3:73:eb:0f:a8:7b:e9:61:5e:10:14:35:7f:14:7b:08:be:aa: f3:4c:bf:14:2c:89:b5:8e:ee:35:dd:d2:67:45:64:cc:e6:07: 41:c9:9f:5b:c4:2c:e8:cd:56:01:d6:6f:66:95:fb:4b:f0:ad: b8:03:29:47:aa:0b:96:fc:4c:8c:d2:61:f6:a5:8b:3f:a2:36: 75:95:68:7c:50:c5:7a:93:8d:e4:fb:27:92:b8:58:48:eb:77: 0c:ce:e8:a0:ad:09:f2:a5:af:f4:55:19:7b:10:e0:93:6e:a1: f5:b3:4f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobG0hHrmE6Rcr86p1FUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OTkyZjMyZDc0ODZkZmI0YTMyYzJlNzgxMDg1NGFjNmE2 NjhlMzQwHhcNMjYwMjA5MDkwMDQxWhcNMjYwMjEwMDkwMDQxWjAzMTEwLwYDVQQD EygxYmIzZDNmOGYwNzE0N2RjYjE2ZGFlNTliNDYyN2NjZmMzYWI1YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPA2kaEVuUflT/YmapqWo9q5TjtR 6hCksrwVnkTpYhe1qXlGMkx35RNj6DhycWZ6AunCSE8YO42PtrbJOUuG71WszjiC 416H3TnUuZLfaTzh7kNXPQSZg8UTBMSpceUr0Ks0qxrh1w8JZSaWJmjx8YwPHmUR whKgtG/FQAwUgjHCBqlIHu59A1ULoz3RHYay3xuohs6FzjhQWpaeoiNchFBq4PLL Wzb8ekGim1FfrWT2YYTUEWAu1Rm9utrN1shtKsA4bMJja83vz5FPiSUoeSK0ELU3 ieF/nKZGfYrAHUa7RbEuoTWxqKMLDDYyGkmqGbtMj/kspZ78wsgLH/VX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuz0/jwcUfcsW2uWbRifM/Dq1rFMB8GA1UdIwQY MBaAFCSZLzLXSG37SjLC54EIVKxqZo40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUt NGIyZTY4MGM3NDkxLzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUtNGIyZTY4MGM3NDkx LzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHw0FgAl h+J8IsKZevQDXlsXG/d7ls0FCsQBiquQ4PxAFxUjsoEE2ItaaktLRrAGnUdGa9KO QfyjyyYe1UkcK69QG1aLn14++3bSVY4LSOdB1KpS0j7pA3FrywhkOBFG0Qpb2Laf RtRcz7XykHMZ1L2si8PVUsIMHrlIhkNOcIlng/Hvlo7iZ4Sxz3OpwEuDs3PrD6h7 6WFeEBQ1fxR7CL6q80y/FCyJtY7uNd3SZ0VkzOYHQcmfW8Qs6M1WAdZvZpX7S/Ct uAMpR6oLlvxMjNJh9qWLP6I2dZVofFDFepON5PsnkrhYSOt3DM7ooK0J8qWv9FUZ exDgk26h9bNPDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:49 2026 by rpki-client