This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft File: JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft (raw, json) Hash identifier: fHuNBZ4MTTTTr9jB9J3HHHDJmMXoaInZd1O8iLqpQro= Subject key identifier: 52:9B:0F:32:F7:16:37:5C:E3:EF:12:AB:D0:A0:2D:C6:65:A0:7D:57 Authority key identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA Certificate issuer: /CN=2736cb723aedd55aec34f400b76cc4678ccba1ba Certificate serial: 019C4358F287BD85EB328951652EA26D2C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft Manifest number: 0164 Signing time: Mon 09 Feb 2026 17:00:28 +0000 Manifest this update: Mon 09 Feb 2026 17:00:28 +0000 Manifest next update: Tue 10 Feb 2026 17:00:28 +0000 Files and hashes: 1: JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl (hash: gkQFcaqZLMIaAUolCNQSbOFXlIrmO7YeNEuur2UtAfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f2:87:bd:85:eb:32:89:51:65:2e:a2:6d:2c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2736cb723aedd55aec34f400b76cc4678ccba1ba Validity Not Before: Feb 9 17:00:28 2026 GMT Not After : Feb 10 17:00:28 2026 GMT Subject: CN=529b0f32f716375ce3ef12abd0a02dc665a07d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:31:63:e9:50:13:95:6c:d4:56:2a:07:33: ba:f7:8f:61:a0:7d:49:b6:d1:2b:6a:60:f4:a4:1b: 2f:17:f9:56:95:3e:5e:df:93:9c:62:3d:dd:a8:a8: 00:e9:6d:2a:dd:01:2a:d5:16:38:1e:11:51:af:a8: 31:5e:de:00:65:43:c8:df:47:2b:2e:73:fb:fb:8d: d9:4e:99:5b:52:f5:41:1a:ce:de:6d:ed:14:3c:da: f1:32:fb:b5:ea:ba:3b:b2:cb:23:2b:16:a4:cb:32: 0c:f9:51:4b:f1:a9:c0:ea:46:18:dd:f2:d2:3d:6f: 10:b9:10:0b:f2:0e:02:1b:04:a2:1f:38:94:d7:96: f2:b1:3e:08:0b:76:f5:46:7e:02:96:88:cc:58:65: d5:ce:77:d1:c1:f8:4e:4d:91:02:cc:a1:4c:07:3e: b9:c3:e6:a1:2e:b5:f4:44:09:f4:25:38:fc:03:da: 9a:24:1d:5d:7d:e5:f3:62:5c:ab:73:bd:ef:b4:4c: 0b:8a:6e:01:dc:a6:14:b3:b2:ec:82:cd:fd:8a:6d: ec:b9:10:6d:80:84:4f:58:b0:c4:a9:ae:31:91:8c: a2:9d:e8:b3:15:b1:1a:cf:a4:ad:cf:7a:4a:6b:1a: 02:41:97:df:54:05:a4:ef:7e:cf:47:08:12:2b:31: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:0F:32:F7:16:37:5C:E3:EF:12:AB:D0:A0:2D:C6:65:A0:7D:57 X509v3 Authority Key Identifier: keyid:27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:19:e2:d6:a1:e2:ac:e7:27:cd:da:a8:51:c6:6f:f7:ba:82: 2c:f4:ea:4b:48:66:4c:5a:02:4d:83:59:98:38:d8:65:25:f8: e3:92:1f:e9:8f:31:02:af:4f:aa:a9:96:fa:0f:59:cb:03:2d: f1:c6:15:fd:88:92:c5:72:f1:53:3c:05:45:aa:be:ee:12:d9: 19:f2:80:0f:8d:09:0a:03:01:59:79:d9:39:df:98:02:22:9f: f5:98:1f:be:c8:4d:f2:03:18:ae:2d:49:55:d2:dd:1e:1d:93: 96:73:9c:30:ff:c7:96:31:81:0a:35:89:3c:27:c8:98:35:6c: 70:5a:e8:a3:19:92:40:1a:37:09:fd:80:7a:7c:8e:e0:37:57: 19:e3:82:a2:67:ee:d5:bd:f6:ad:63:c1:0a:a1:9f:b2:bf:25: c7:dd:63:74:c7:37:22:10:70:23:48:25:36:48:c8:92:6f:31: 68:63:1b:34:f4:96:49:0e:74:67:ba:ec:cd:7d:47:f7:89:ce: a5:3a:11:39:03:6b:72:24:71:73:85:c3:0b:c3:07:26:2a:ce: 47:83:b6:78:f2:d0:ac:91:2d:a6:f0:2a:e5:05:97:b5:94:e1: f7:e8:ca:0b:a0:f1:68:1e:2e:3c:41:cd:7e:68:2f:8c:85:09: 9b:37:da:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPKHvYXrMolRZS6ibSwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzZjYjcyM2FlZGQ1NWFlYzM0ZjQwMGI3NmNjNDY3OGNj YmExYmEwHhcNMjYwMjA5MTcwMDI4WhcNMjYwMjEwMTcwMDI4WjAzMTEwLwYDVQQD Eyg1MjliMGYzMmY3MTYzNzVjZTNlZjEyYWJkMGEwMmRjNjY1YTA3ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuwxY+lQE5Vs1FYqBzO6949hoH1J ttEramD0pBsvF/lWlT5e35OcYj3dqKgA6W0q3QEq1RY4HhFRr6gxXt4AZUPI30cr LnP7+43ZTplbUvVBGs7ebe0UPNrxMvu16ro7sssjKxakyzIM+VFL8anA6kYY3fLS PW8QuRAL8g4CGwSiHziU15bysT4IC3b1Rn4ClojMWGXVznfRwfhOTZECzKFMBz65 w+ahLrX0RAn0JTj8A9qaJB1dfeXzYlyrc73vtEwLim4B3KYUs7Lsgs39im3suRBt gIRPWLDEqa4xkYyineizFbEaz6Stz3pKaxoCQZffVAWk737PRwgSKzFBAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKbDzL3Fjdc4+8Sq9CgLcZloH1XMB8GA1UdIwQY MBaAFCc2y3I67dVa7DT0ALdsxGeMy6G6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpiTGNqcnQxVnJzTlBRQXQyekVaNHpMb2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hYWJiMDMtMmFjOC00MDY1LWFmOGMt NDdlZjJhOThiMjJkLzEvSnpiTGNqcnQxVnJzTlBRQXQyekVaNHpMb2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hYWJiMDMtMmFjOC00MDY1LWFmOGMtNDdlZjJhOThiMjJk LzEvSnpiTGNqcnQxVnJzTlBRQXQyekVaNHpMb2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhni1qHi rOcnzdqoUcZv97qCLPTqS0hmTFoCTYNZmDjYZSX445If6Y8xAq9PqqmW+g9ZywMt 8cYV/YiSxXLxUzwFRaq+7hLZGfKAD40JCgMBWXnZOd+YAiKf9ZgfvshN8gMYri1J VdLdHh2TlnOcMP/HljGBCjWJPCfImDVscFrooxmSQBo3Cf2AenyO4DdXGeOComfu 1b32rWPBCqGfsr8lx91jdMc3IhBwI0glNkjIkm8xaGMbNPSWSQ50Z7rszX1H94nO pToROQNrciRxc4XDC8MHJirOR4O2ePLQrJEtpvAq5QWXtZTh9+jKC6DxaB4uPEHN fmgvjIUJmzfaeg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:40 2026 by rpki-client