This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json) Hash identifier: UHqj7+sscLhv6oDX2rggLQnrl8We5ChWOH1N7tbJBIA= Subject key identifier: 8F:5E:FA:56:D2:18:B2:19:8E:FC:84:64:CA:15:8C:9F:1A:53:A8:FB Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27 Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27 Certificate serial: 019C41A1F690353F80FD8A55DAE808BD0947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 09:00:59 +0000 Manifest this update: Mon 09 Feb 2026 09:00:59 +0000 Manifest next update: Tue 10 Feb 2026 09:00:59 +0000 Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: RHYwYhhhZQ3uqr1lupZaI+cxvyQpYuD2J1/Qw8iSF0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:f6:90:35:3f:80:fd:8a:55:da:e8:08:bd:09:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27 Validity Not Before: Feb 9 09:00:59 2026 GMT Not After : Feb 10 09:00:59 2026 GMT Subject: CN=8f5efa56d218b2198efc8464ca158c9f1a53a8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7b:10:e8:06:0e:14:0d:54:a1:60:90:61:bc: 3a:3f:77:4d:31:fd:95:da:1d:00:ed:09:46:ea:68: 8e:e2:e6:cb:95:78:79:64:0b:8b:4b:48:d9:50:f8: 9a:46:f5:7d:e2:f5:59:c8:21:a3:6d:be:d0:d5:c9: 06:b1:4d:79:eb:a0:6e:98:93:ae:89:52:b6:37:bf: ce:ab:1c:18:be:34:1a:31:64:2a:0f:1a:13:bd:f4: 2e:ea:09:35:e1:83:05:45:16:e1:e6:c8:06:04:7d: 5c:13:33:73:ba:60:7b:ff:f2:6e:57:51:85:2b:4b: 2e:e3:71:2f:1c:1f:2e:52:39:5b:18:a9:13:26:13: 8f:fe:4c:ee:4d:9d:9d:b0:16:5a:ed:e3:2f:6d:c8: 6d:ad:6e:18:bd:56:9b:85:8e:d4:fc:8a:d0:ca:e3: 6e:cb:06:4f:2e:77:7e:86:fb:16:7b:21:6e:42:c3: 8e:f2:6c:e0:4a:b5:a6:59:0d:c5:41:69:f5:72:e9: 65:32:27:e2:11:a1:93:14:52:13:e6:f3:2e:85:c0: 5d:23:4c:b1:8e:53:2b:db:83:5a:38:5f:67:e6:0a: f7:af:d3:08:4a:50:30:91:8c:33:8d:3e:a6:bc:0e: 74:68:36:0d:53:70:ad:13:b9:f6:58:1c:e7:a2:d1: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:FA:56:D2:18:B2:19:8E:FC:84:64:CA:15:8C:9F:1A:53:A8:FB X509v3 Authority Key Identifier: keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a0:bb:3e:fc:d1:f8:2d:cb:de:43:ef:df:85:31:d6:d6:e2: ea:11:c5:ef:d8:0a:4b:d5:90:6a:1f:2d:67:48:ed:8d:d2:b5: f2:da:2d:d5:b9:71:6d:63:c2:83:08:a4:bf:58:09:ad:0e:f3: 0b:85:9c:0b:a9:84:91:c2:61:1e:5a:53:d9:16:3a:1e:5b:8d: 0f:66:ec:86:80:af:0e:5a:81:21:09:15:04:50:cb:88:11:1c: 04:8f:db:95:bc:5f:e4:f7:35:24:84:07:79:ac:12:f6:14:e9: 55:53:6e:d7:e0:cd:5f:e0:3b:1a:36:3b:f9:c5:d0:d3:0f:b0: 63:7a:fd:a9:d2:0f:65:c7:5a:8d:27:8a:c6:40:9f:ed:27:a5: 0e:39:fd:15:f6:5d:7f:24:b0:7e:b1:d0:a7:5b:8b:88:71:60: bb:d8:4a:27:4f:d7:0a:e3:7e:c4:ef:6f:a8:61:e4:1b:6d:50: 41:74:78:bd:10:3d:ec:d6:fd:ca:a3:a7:76:d6:38:84:27:25: 7b:cc:88:2b:b9:e0:3a:5b:3c:9b:f5:91:7e:8c:5c:44:36:98: b5:91:cf:d2:16:d4:9a:61:21:24:be:55:fd:9e:9c:7e:d3:30: 9c:cf:18:f6:5f:1e:fc:cb:83:79:30:2f:cb:d6:c6:fb:39:cb: 40:32:ca:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofaQNT+A/YpV2ugIvQlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZGI1MzY0N2FkNjQ1YTk0MjBmNjBiODZkNmU5Mzc1ZmNm ODVhMjcwHhcNMjYwMjA5MDkwMDU5WhcNMjYwMjEwMDkwMDU5WjAzMTEwLwYDVQQD Eyg4ZjVlZmE1NmQyMThiMjE5OGVmYzg0NjRjYTE1OGM5ZjFhNTNhOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nsQ6AYOFA1UoWCQYbw6P3dNMf2V 2h0A7QlG6miO4ubLlXh5ZAuLS0jZUPiaRvV94vVZyCGjbb7Q1ckGsU1566BumJOu iVK2N7/OqxwYvjQaMWQqDxoTvfQu6gk14YMFRRbh5sgGBH1cEzNzumB7//JuV1GF K0su43EvHB8uUjlbGKkTJhOP/kzuTZ2dsBZa7eMvbchtrW4YvVabhY7U/IrQyuNu ywZPLnd+hvsWeyFuQsOO8mzgSrWmWQ3FQWn1cullMifiEaGTFFIT5vMuhcBdI0yx jlMr24NaOF9n5gr3r9MISlAwkYwzjT6mvA50aDYNU3CtE7n2WBznotFONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9e+lbSGLIZjvyEZMoVjJ8aU6j7MB8GA1UdIwQY MBaAFCTbU2R61kWpQg9guG1uk3X8+FonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEt NDYxMDcyYmY4YWVmLzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEtNDYxMDcyYmY4YWVm LzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqC7PvzR +C3L3kPv34Ux1tbi6hHF79gKS9WQah8tZ0jtjdK18tot1blxbWPCgwikv1gJrQ7z C4WcC6mEkcJhHlpT2RY6HluND2bshoCvDlqBIQkVBFDLiBEcBI/blbxf5Pc1JIQH eawS9hTpVVNu1+DNX+A7GjY7+cXQ0w+wY3r9qdIPZcdajSeKxkCf7SelDjn9FfZd fySwfrHQp1uLiHFgu9hKJ0/XCuN+xO9vqGHkG21QQXR4vRA97Nb9yqOndtY4hCcl e8yIK7ngOls8m/WRfoxcRDaYtZHP0hbUmmEhJL5V/Z6cftMwnM8Y9l8e/MuDeTAv y9bG+znLQDLKdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:56 2026 by rpki-client