This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft File: JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json) Hash identifier: BpMibpBnQg2aEjRNifDwP9NByypJhV/cDDqwcTwrXMg= Subject key identifier: 89:D3:DC:D2:CA:5E:AE:84:EA:24:DB:CC:4F:D5:01:A6:08:59:5B:9A Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A Certificate issuer: /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a Certificate serial: 019C43908C406FE9AFCD76E0D87B70D08D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft Manifest number: 118C Signing time: Mon 09 Feb 2026 18:01:12 +0000 Manifest this update: Mon 09 Feb 2026 18:01:12 +0000 Manifest next update: Tue 10 Feb 2026 18:01:12 +0000 Files and hashes: 1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: yW2vhCHtgJ+PE1ny4P9T9ZUMLSD+u/506KN8Bo/o32o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:8c:40:6f:e9:af:cd:76:e0:d8:7b:70:d0:8d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a Validity Not Before: Feb 9 18:01:12 2026 GMT Not After : Feb 10 18:01:12 2026 GMT Subject: CN=89d3dcd2ca5eae84ea24dbcc4fd501a608595b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:de:43:96:17:95:6b:6c:8a:7b:83:76:c2:fc: cb:c7:63:bd:fd:41:04:11:03:84:b5:5d:68:68:45: 62:41:4e:29:a5:ab:8f:88:7e:90:8d:4f:94:5d:e8: 9f:63:df:c9:52:b1:b3:4e:2e:de:40:77:7b:56:d3: 10:6b:13:9e:b6:20:25:a9:55:1a:d0:fa:08:ad:ec: 67:3d:ad:51:46:c9:0a:40:4c:68:0f:58:f5:35:10: f8:f1:ab:15:f3:69:56:d2:36:64:16:2c:46:0b:1e: a9:d8:76:aa:8b:cc:f4:76:cd:c8:56:26:3f:2f:c4: 7e:c5:bf:98:3f:f9:99:77:ef:d7:d9:d1:c2:21:3a: a7:0d:77:e8:46:01:a3:f9:d5:46:58:40:ba:59:a6: 15:b7:38:20:aa:2e:0f:f3:f4:b0:f9:ef:e5:22:6d: a2:85:01:8d:fd:69:d9:44:29:56:17:75:32:13:8a: d7:48:46:00:ca:0b:40:26:b4:50:5e:16:30:2b:0b: df:38:1d:3d:5c:7f:69:e2:10:bb:ba:0b:47:49:e4: 7c:dc:8d:7d:ee:d5:e0:ae:d8:13:9c:40:69:68:12: 2a:3c:5b:75:98:b5:d2:99:16:ab:4d:c7:50:40:79: 5e:fe:c9:ec:56:78:a5:79:7f:7d:cc:bb:ae:69:7b: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D3:DC:D2:CA:5E:AE:84:EA:24:DB:CC:4F:D5:01:A6:08:59:5B:9A X509v3 Authority Key Identifier: keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:26:a7:cd:9a:a3:57:aa:40:e3:e3:db:f7:f5:39:8f:7b: 5e:63:51:8d:1d:9d:e2:1b:17:38:5b:58:44:c6:c2:f3:dd:5e: db:82:08:9b:d5:74:aa:bb:fa:4b:eb:89:01:ac:05:f7:f4:62: 32:68:7c:6f:ae:9a:92:e3:1e:a8:a0:56:ab:e4:ce:63:57:b2: e0:c6:f8:b0:4f:7a:cd:76:1a:99:11:d9:eb:b6:5c:d8:d0:58: 73:a4:90:a0:40:95:b8:e6:ac:01:b7:d0:8d:2c:ee:05:bf:13: d0:88:41:04:78:d7:4a:1f:ae:d9:7f:6d:07:03:2f:58:0b:13: 0c:a0:f0:1a:6e:0a:8e:09:ce:33:3f:1d:fe:eb:9f:4e:3c:0d: 42:8a:f5:5b:87:4c:53:ec:ee:74:a1:20:f7:1c:34:d5:b7:f2: f0:ac:56:5d:c7:3d:e7:b1:b5:b7:91:64:e0:a6:c8:1b:95:99: d2:32:5d:70:9f:8d:0c:ce:40:d9:cf:13:47:29:a1:78:46:9f: 26:48:82:3f:34:f8:12:9d:ea:6c:43:8b:c6:d2:bf:68:c2:1a: 77:6b:e5:d2:ed:91:1c:46:65:e7:7b:12:81:55:c2:ce:ba:09: 6f:8b:a1:8b:bf:16:c3:9b:71:29:3d:02:a5:d5:17:7d:8b:62: 8d:0a:86:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIxAb+mvzXbg2Htw0I0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDIyYWU3ZDQxMjNkYzdiZjI4OGYxMzc5ZTQzN2Y2ZTFj YjJhOWEwHhcNMjYwMjA5MTgwMTEyWhcNMjYwMjEwMTgwMTEyWjAzMTEwLwYDVQQD Eyg4OWQzZGNkMmNhNWVhZTg0ZWEyNGRiY2M0ZmQ1MDFhNjA4NTk1YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA695DlheVa2yKe4N2wvzLx2O9/UEE EQOEtV1oaEViQU4ppauPiH6QjU+UXeifY9/JUrGzTi7eQHd7VtMQaxOetiAlqVUa 0PoIrexnPa1RRskKQExoD1j1NRD48asV82lW0jZkFixGCx6p2Haqi8z0ds3IViY/ L8R+xb+YP/mZd+/X2dHCITqnDXfoRgGj+dVGWEC6WaYVtzggqi4P8/Sw+e/lIm2i hQGN/WnZRClWF3UyE4rXSEYAygtAJrRQXhYwKwvfOB09XH9p4hC7ugtHSeR83I19 7tXgrtgTnEBpaBIqPFt1mLXSmRarTcdQQHle/snsVnileX99zLuuaXu58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInT3NLKXq6E6iTbzE/VAaYIWVuaMB8GA1UdIwQY MBaAFCVCKufUEj3HvyiPE3nkN/bhyyqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVJcTU5UVNQY2VfS0k4VGVlUTM5dUhMS3BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83YmRkNzEtMTU1My00N2U0LWFhMDAt ZmFhNmJlY2RhZjA1LzEvSlVJcTU5UVNQY2VfS0k4VGVlUTM5dUhMS3BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83YmRkNzEtMTU1My00N2U0LWFhMDAtZmFhNmJlY2RhZjA1 LzEvSlVJcTU5UVNQY2VfS0k4VGVlUTM5dUhMS3BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0gmp82a o1eqQOPj2/f1OY97XmNRjR2d4hsXOFtYRMbC891e24IIm9V0qrv6S+uJAawF9/Ri Mmh8b66akuMeqKBWq+TOY1ey4Mb4sE96zXYamRHZ67Zc2NBYc6SQoECVuOasAbfQ jSzuBb8T0IhBBHjXSh+u2X9tBwMvWAsTDKDwGm4KjgnOMz8d/uufTjwNQor1W4dM U+zudKEg9xw01bfy8KxWXcc957G1t5Fk4KbIG5WZ0jJdcJ+NDM5A2c8TRymheEaf JkiCPzT4Ep3qbEOLxtK/aMIad2vl0u2RHEZl53sSgVXCzroJb4uhi78Ww5txKT0C pdUXfYtijQqGbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:15 2026 by rpki-client