This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json) Hash identifier: ejl5XzjXHfZQyRrEXTMB2KBAIUPyYl7nWG7hvR1d1/U= Subject key identifier: CB:B1:A7:28:90:11:7F:4D:35:12:87:06:F6:32:52:81:7F:1D:5C:F2 Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6 Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6 Certificate serial: 019C420FEAB766EE51AB0ACE598E2C1EFAB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft Manifest number: 13E0 Signing time: Mon 09 Feb 2026 11:01:05 +0000 Manifest this update: Mon 09 Feb 2026 11:01:05 +0000 Manifest next update: Tue 10 Feb 2026 11:01:05 +0000 Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: e6n5iHpDJJ3F4tqAUBA4MsKFNo7xOOXK++VTJjgDwqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ea:b7:66:ee:51:ab:0a:ce:59:8e:2c:1e:fa:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6 Validity Not Before: Feb 9 11:01:05 2026 GMT Not After : Feb 10 11:01:05 2026 GMT Subject: CN=cbb1a72890117f4d35128706f63252817f1d5cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:47:90:63:fc:e3:4b:e5:e4:db:c9:75:d7: 89:44:ec:72:bc:ff:87:f7:cc:7b:28:b2:3a:28:70: e3:83:a9:42:97:7c:36:23:30:70:51:df:1a:bb:50: bc:00:22:57:e8:7d:09:08:db:c4:7f:39:d9:98:36: 2a:8f:4b:fa:22:e4:55:13:db:84:19:db:1a:e2:8f: 42:d7:33:1a:56:69:65:cb:ac:d1:d3:5f:fe:8f:b8: 3e:02:9f:28:c5:f4:2f:08:a2:52:e1:d9:3c:53:b7: 45:f6:a0:d9:b1:3b:fb:24:a2:4d:0d:4c:13:56:c7: a9:e8:3b:ab:ed:d5:da:55:95:a3:c2:1f:71:70:4d: 24:68:95:e5:79:03:4c:79:1b:20:e3:e0:75:48:3c: 10:d3:90:7d:a1:ef:ee:aa:b5:d7:8d:4c:fa:c0:03: ee:af:37:a4:b0:fc:c2:ef:91:dc:72:a4:e3:62:87: cc:e3:85:22:e5:5f:c9:13:16:7e:bf:3a:4b:27:60: c0:1a:2c:d8:74:23:42:32:34:d5:f1:54:d2:0d:10: 1c:b0:e1:93:a1:cc:58:5c:87:94:52:d3:40:51:4e: cd:03:5e:65:82:23:c8:d6:f0:b1:76:a8:2b:9b:0d: 72:da:37:16:da:3d:c3:5f:6e:91:fd:37:95:87:2f: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B1:A7:28:90:11:7F:4D:35:12:87:06:F6:32:52:81:7F:1D:5C:F2 X509v3 Authority Key Identifier: keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:84:43:51:c0:cf:7e:64:f2:79:be:ec:8f:f5:91:f6:d7:5f: 8a:12:8e:c1:b8:9b:08:34:71:d0:c1:cf:1a:0b:86:b5:88:7b: d8:51:18:73:0b:29:d1:4c:0a:03:d0:01:04:22:23:9a:31:2c: 15:c4:14:bd:3f:4b:dd:20:11:bd:0e:8f:7a:5e:26:90:6f:85: fe:29:bd:88:67:60:f9:b7:dd:00:a8:99:b6:1f:4b:08:95:d0: e6:7c:d0:16:54:1c:41:16:16:c4:9f:c1:96:87:2f:2a:b4:1d: 85:7c:69:7e:b4:e2:bc:e0:fe:a8:74:8d:cc:04:b3:43:ec:bf: b8:4e:88:56:f1:e9:c2:94:8a:17:bf:d0:e2:61:26:f4:9d:87: 6f:61:2c:a1:5e:47:92:ec:cc:71:78:b8:42:9d:be:60:15:18: fb:44:73:eb:b8:9d:e7:89:74:1b:b4:c5:3f:f2:16:c3:e7:49: 8f:bc:0e:a5:53:6e:28:29:f9:22:cc:d4:cc:36:97:81:63:72: 64:a9:a1:90:6e:91:ab:01:3e:c0:3d:4b:d9:5c:06:9e:80:3c: be:82:ab:34:20:91:fd:5a:b5:6f:25:17:fa:7a:29:29:cf:89: c3:80:43:e8:42:96:86:78:b1:3c:8e:d4:46:8c:7d:84:e7:53: 26:20:27:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+q3Zu5RqwrOWY4sHvq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm NmViYjYwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD EyhjYmIxYTcyODkwMTE3ZjRkMzUxMjg3MDZmNjMyNTI4MTdmMWQ1Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4JHkGP840vl5NvJddeJROxyvP+H 98x7KLI6KHDjg6lCl3w2IzBwUd8au1C8ACJX6H0JCNvEfznZmDYqj0v6IuRVE9uE Gdsa4o9C1zMaVmlly6zR01/+j7g+Ap8oxfQvCKJS4dk8U7dF9qDZsTv7JKJNDUwT Vsep6Dur7dXaVZWjwh9xcE0kaJXleQNMeRsg4+B1SDwQ05B9oe/uqrXXjUz6wAPu rzeksPzC75HccqTjYofM44Ui5V/JExZ+vzpLJ2DAGizYdCNCMjTV8VTSDRAcsOGT ocxYXIeUUtNAUU7NA15lgiPI1vCxdqgrmw1y2jcW2j3DX26R/TeVhy/P3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuxpyiQEX9NNRKHBvYyUoF/HVzyMB8GA1UdIwQY MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2 LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYRDUcDP fmTyeb7sj/WR9tdfihKOwbibCDRx0MHPGguGtYh72FEYcwsp0UwKA9ABBCIjmjEs FcQUvT9L3SARvQ6Pel4mkG+F/im9iGdg+bfdAKiZth9LCJXQ5nzQFlQcQRYWxJ/B locvKrQdhXxpfrTivOD+qHSNzASzQ+y/uE6IVvHpwpSKF7/Q4mEm9J2Hb2EsoV5H kuzMcXi4Qp2+YBUY+0Rz67id54l0G7TFP/IWw+dJj7wOpVNuKCn5IszUzDaXgWNy ZKmhkG6RqwE+wD1L2VwGnoA8voKrNCCR/Vq1byUX+nopKc+Jw4BD6EKWhnixPI7U Rox9hOdTJiAnoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:16 2026 by rpki-client