This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json) Hash identifier: 0ZEX2dQCjW/8XOuBnsP4le23wU57BFssNRMdITyxShU= Subject key identifier: A7:6B:6E:3F:35:23:90:88:8A:3D:1D:D6:5E:05:03:DF:44:D1:13:3F Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e Certificate serial: 019C432281F6AA7096280DE80C5AF7C78BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft Manifest number: 0D66 Signing time: Mon 09 Feb 2026 16:01:00 +0000 Manifest this update: Mon 09 Feb 2026 16:01:00 +0000 Manifest next update: Tue 10 Feb 2026 16:01:00 +0000 Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: jWk+C75V4BNFt1P9kOml/7bzOadcjPnY95+VvMiKaVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:81:f6:aa:70:96:28:0d:e8:0c:5a:f7:c7:8b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e Validity Not Before: Feb 9 16:01:00 2026 GMT Not After : Feb 10 16:01:00 2026 GMT Subject: CN=a76b6e3f352390888a3d1dd65e0503df44d1133f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:68:fe:d2:c9:70:fe:03:84:b3:6c:41:51: 66:fd:22:ff:d9:21:1a:ad:fd:21:b8:f7:9d:d3:d9: 98:1f:56:da:7b:c8:4b:10:1c:95:61:63:41:98:c3: b8:7c:b6:f1:00:be:9c:fc:f6:db:89:5b:86:74:02: b6:76:c6:5b:dc:a0:bf:6d:0f:f5:55:da:9c:6e:76: 18:7d:e9:1e:46:e8:aa:21:89:bc:be:43:18:17:35: dd:e0:02:2f:c5:aa:68:6d:f2:fa:c0:df:b1:43:bf: 75:89:de:31:3f:21:17:d5:94:06:e7:44:40:d2:fd: e4:da:d6:43:9b:ed:24:ab:c0:33:57:4b:1d:3e:7b: 75:17:b0:f3:22:19:c2:ff:c3:41:e1:3f:d9:fb:d2: 0e:a2:7e:b4:9f:0c:76:92:2a:2d:c2:34:4d:4e:39: f8:20:67:32:b7:a2:97:62:8d:7e:fb:f8:50:f5:65: f6:d2:bf:7f:40:ba:fd:c4:b3:12:1f:1f:72:8c:19: a8:8f:1d:b8:fe:ad:df:41:5c:63:71:5b:a0:6d:e6: 84:04:87:85:28:4e:9c:5a:83:4b:00:10:29:01:3a: bf:61:94:3f:d3:6e:2d:0f:97:99:2b:f8:f0:c4:fe: 4f:13:53:fc:eb:a9:1b:39:65:d5:7b:d1:a7:1e:72: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6B:6E:3F:35:23:90:88:8A:3D:1D:D6:5E:05:03:DF:44:D1:13:3F X509v3 Authority Key Identifier: keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d7:86:ad:f8:db:ce:13:e8:75:d0:09:bc:5f:65:e3:d1:18: 12:12:0b:32:d9:5c:d3:c8:ce:a1:d4:de:c8:63:18:ea:90:31: 69:ec:0f:d7:6b:b0:20:88:ed:b4:0d:96:6c:f2:ff:62:20:cd: 9d:5d:de:9f:37:f6:07:73:bf:82:3d:5c:45:7f:4c:d9:7c:f4: 6e:4a:97:12:b0:a9:b0:6f:27:0e:71:ad:ef:a0:60:13:e3:49: 58:02:f3:80:ce:22:8a:f7:f6:85:32:45:3d:d0:f3:da:ad:00: 79:e1:36:f1:19:69:7e:e3:65:47:7b:44:94:1e:fd:be:b8:df: 07:50:9f:da:81:f8:23:bf:6f:73:7d:58:e5:94:b0:50:8e:84: e5:97:1d:37:5f:ea:f7:e2:03:b5:4e:32:ef:1c:85:10:b3:61: 17:42:fb:e0:08:f6:4a:5d:ea:f1:44:f7:75:da:90:d5:86:3e: cf:33:bd:6b:d4:3d:fa:d5:b3:5f:2f:92:f3:4d:8b:a2:16:0e: a8:cc:88:b0:b3:2a:44:4c:ac:b1:85:92:51:88:51:ae:2a:5e: 78:f1:8c:8c:fe:4a:4e:f3:58:e1:c4:c0:e7:ee:7c:fe:80:1a: 45:ff:47:fc:b8:9d:47:ee:c9:e1:2a:11:2c:44:7b:35:de:17: f7:52:e8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoH2qnCWKA3oDFr3x4v2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0 MTVkM2UwHhcNMjYwMjA5MTYwMTAwWhcNMjYwMjEwMTYwMTAwWjAzMTEwLwYDVQQD EyhhNzZiNmUzZjM1MjM5MDg4OGEzZDFkZDY1ZTA1MDNkZjQ0ZDExMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFNo/tLJcP4DhLNsQVFm/SL/2SEa rf0huPed09mYH1bae8hLEByVYWNBmMO4fLbxAL6c/PbbiVuGdAK2dsZb3KC/bQ/1 VdqcbnYYfekeRuiqIYm8vkMYFzXd4AIvxapobfL6wN+xQ791id4xPyEX1ZQG50RA 0v3k2tZDm+0kq8AzV0sdPnt1F7DzIhnC/8NB4T/Z+9IOon60nwx2kiotwjRNTjn4 IGcyt6KXYo1++/hQ9WX20r9/QLr9xLMSHx9yjBmojx24/q3fQVxjcVugbeaEBIeF KE6cWoNLABApATq/YZQ/024tD5eZK/jwxP5PE1P866kbOWXVe9GnHnKu0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdrbj81I5CIij0d1l4FA99E0RM/MB8GA1UdIwQY MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9eGrfjb zhPoddAJvF9l49EYEhILMtlc08jOodTeyGMY6pAxaewP12uwIIjttA2WbPL/YiDN nV3enzf2B3O/gj1cRX9M2Xz0bkqXErCpsG8nDnGt76BgE+NJWALzgM4iivf2hTJF PdDz2q0AeeE28RlpfuNlR3tElB79vrjfB1Cf2oH4I79vc31Y5ZSwUI6E5ZcdN1/q 9+IDtU4y7xyFELNhF0L74Aj2Sl3q8UT3ddqQ1YY+zzO9a9Q9+tWzXy+S802LohYO qMyIsLMqREyssYWSUYhRripeePGMjP5KTvNY4cTA5+58/oAaRf9H/LidR+7J4SoR LER7Nd4X91LoAA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:27 2026 by rpki-client