This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json) Hash identifier: sz+rJI/BnvV+7bzchCFduc4inRiUrB2+VK9IhZcT8BU= Subject key identifier: FD:A4:3A:BB:69:D9:B6:6E:C3:C6:B7:8C:4A:22:8C:10:20:2D:71:D8 Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0 Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0 Certificate serial: 019C4322A796CAC9535C847574796D9F99CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft Manifest number: 0A5C Signing time: Mon 09 Feb 2026 16:01:10 +0000 Manifest this update: Mon 09 Feb 2026 16:01:10 +0000 Manifest next update: Tue 10 Feb 2026 16:01:10 +0000 Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: sMM4HlT7SNyocoXoiGZ2c2L64lw+EMGxE4mB4OZRLo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a7:96:ca:c9:53:5c:84:75:74:79:6d:9f:99:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0 Validity Not Before: Feb 9 16:01:10 2026 GMT Not After : Feb 10 16:01:10 2026 GMT Subject: CN=fda43abb69d9b66ec3c6b78c4a228c10202d71d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:0a:43:d6:bb:2f:cc:00:1d:14:82:84:b3: 41:f4:7d:f9:b5:f2:f7:25:f7:04:f5:73:3c:c4:39: a3:5c:9e:35:63:17:84:5b:fa:f4:f9:a3:79:63:de: 29:dc:52:68:ce:98:1c:0b:20:eb:43:53:bd:ed:cf: 14:f1:4c:85:f0:17:ac:06:85:ea:a1:9d:ad:b2:68: 6f:90:46:04:1c:1b:20:cf:1c:e3:21:e1:99:dd:6b: 01:70:cd:c5:f3:5f:3c:e4:a2:fb:b9:43:1f:fe:16: 68:0b:89:8b:ba:44:f9:9b:a0:73:7f:d2:1f:34:9e: 51:dd:b4:61:ad:a7:df:26:f6:65:3f:da:d7:a3:55: 9c:a7:23:46:21:5b:b5:9d:07:5e:8f:b8:40:e5:3f: 46:21:5b:06:c0:4b:cb:b8:fb:7a:90:d2:f3:e5:29: 26:aa:5d:cd:b0:c8:98:c6:44:0d:5b:e7:0c:e9:fb: 6b:eb:53:ef:45:68:8e:b7:11:29:81:11:db:b7:0f: 8c:fc:f9:14:5c:c8:f6:a6:9a:ed:d0:30:e1:d8:f7: 2a:be:cd:41:09:08:f2:92:0e:48:c8:7d:d2:4f:c9: e5:8f:52:98:3b:ec:dd:ac:28:0c:b0:23:ec:dd:41: f9:03:1b:3a:2d:bc:a7:b6:2f:e1:18:43:a2:58:f3: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:3A:BB:69:D9:B6:6E:C3:C6:B7:8C:4A:22:8C:10:20:2D:71:D8 X509v3 Authority Key Identifier: keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1b:30:ed:82:3f:fe:ce:4a:ee:cd:57:df:8e:69:0b:4d:2a: e0:e1:04:db:fb:48:e2:f2:ad:f7:18:23:27:5b:b0:08:09:08: b5:58:25:6f:91:f8:d5:59:74:19:f1:4d:b6:37:26:05:2a:8a: 39:6c:58:11:cf:76:0d:f8:6e:fd:81:2e:d0:1b:36:da:61:6d: fc:a8:00:3d:86:aa:31:60:d7:74:b0:f5:7c:cb:84:ad:2c:79: 68:15:20:a0:b9:08:42:db:49:6a:c0:9b:1c:e9:61:4a:8a:8f: 17:c2:dd:4e:22:ce:28:e2:ea:17:a6:79:2f:3b:0d:02:18:3b: b7:3f:fc:fe:8d:df:03:ce:05:31:44:28:26:38:9d:70:b6:e5: 70:a5:15:c6:e5:47:e5:b7:be:19:23:69:96:5c:46:e2:a4:5a: 98:f9:eb:1c:c8:2c:76:19:78:fb:fe:9b:e8:7e:02:cf:95:8a: 1d:de:e0:3f:8d:88:0d:93:33:f8:1d:1d:b9:3f:3f:e7:8d:90: d7:0c:44:55:ef:77:87:02:19:84:40:4c:1a:e6:be:f3:ca:7d: df:88:99:2e:db:46:d0:e9:63:42:dc:f5:ad:3b:1a:90:3a:93: db:23:05:ed:d3:1b:52:9a:c3:54:e5:dd:91:c0:ac:78:7c:18: 44:5b:23:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqeWyslTXIR1dHltn5nPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNzI0NDdjNDFlMjVjNGVmNWI3ODM3NTUyMWM0ZTk3ZTkx YWI1YzAwHhcNMjYwMjA5MTYwMTEwWhcNMjYwMjEwMTYwMTEwWjAzMTEwLwYDVQQD EyhmZGE0M2FiYjY5ZDliNjZlYzNjNmI3OGM0YTIyOGMxMDIwMmQ3MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4KQ9a7L8wAHRSChLNB9H35tfL3 JfcE9XM8xDmjXJ41YxeEW/r0+aN5Y94p3FJozpgcCyDrQ1O97c8U8UyF8BesBoXq oZ2tsmhvkEYEHBsgzxzjIeGZ3WsBcM3F81885KL7uUMf/hZoC4mLukT5m6Bzf9If NJ5R3bRhraffJvZlP9rXo1WcpyNGIVu1nQdej7hA5T9GIVsGwEvLuPt6kNLz5Skm ql3NsMiYxkQNW+cM6ftr61PvRWiOtxEpgRHbtw+M/PkUXMj2pprt0DDh2Pcqvs1B CQjykg5IyH3ST8nlj1KYO+zdrCgMsCPs3UH5Axs6Lbynti/hGEOiWPN0twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2kOrtp2bZuw8a3jEoijBAgLXHYMB8GA1UdIwQY MBaAFI9yRHxB4lxO9beDdVIcTpfpGrXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83MzlmMTAtYTE1Ni00OWFjLTg5NWIt MzYxMzhiZmMxYzIwLzEvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83MzlmMTAtYTE1Ni00OWFjLTg5NWItMzYxMzhiZmMxYzIw LzEvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBsw7YI/ /s5K7s1X345pC00q4OEE2/tI4vKt9xgjJ1uwCAkItVglb5H41Vl0GfFNtjcmBSqK OWxYEc92Dfhu/YEu0Bs22mFt/KgAPYaqMWDXdLD1fMuErSx5aBUgoLkIQttJasCb HOlhSoqPF8LdTiLOKOLqF6Z5LzsNAhg7tz/8/o3fA84FMUQoJjidcLblcKUVxuVH 5be+GSNpllxG4qRamPnrHMgsdhl4+/6b6H4Cz5WKHd7gP42IDZMz+B0duT8/542Q 1wxEVe93hwIZhEBMGua+88p934iZLttG0OljQtz1rTsakDqT2yMF7dMbUprDVOXd kcCseHwYRFsjqw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:51 2026 by rpki-client