This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json) Hash identifier: fAXYFhV1Eu6yvInu28AURzJgVD1WNMBIurYqEqu1zq0= Subject key identifier: 53:43:17:F8:CF:20:DD:CE:FF:E7:4C:86:79:2B:43:B6:70:A4:2B:40 Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18 Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518 Certificate serial: 019C4322F6F88CDB69395D8DB830F3A77755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft Manifest number: 0FB2 Signing time: Mon 09 Feb 2026 16:01:30 +0000 Manifest this update: Mon 09 Feb 2026 16:01:30 +0000 Manifest next update: Tue 10 Feb 2026 16:01:30 +0000 Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: EDPA1p7B0XRZHHRRzXh5uBxu9ByAdsV7dMH2ujIZF/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f6:f8:8c:db:69:39:5d:8d:b8:30:f3:a7:77:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518 Validity Not Before: Feb 9 16:01:30 2026 GMT Not After : Feb 10 16:01:30 2026 GMT Subject: CN=534317f8cf20ddceffe74c86792b43b670a42b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:81:8e:50:ec:90:10:65:59:44:60:7c:26: 00:5f:69:30:f3:1c:5b:6a:48:72:39:a1:d0:97:7e: 8e:46:fc:4b:be:e5:77:b7:75:15:9c:ef:6c:22:4c: 0d:01:7b:fc:1a:b5:76:bb:a5:25:23:46:f5:a3:d0: b5:e8:56:ce:f5:95:38:93:77:70:07:e1:dd:a8:d9: fa:ed:a1:94:f7:ac:d1:47:d0:5c:86:b6:79:67:6a: 2e:8b:f2:3e:1f:71:ca:ad:62:e9:53:cc:0e:c5:0c: 89:5c:61:81:70:5a:bb:48:ee:58:74:1b:6c:07:32: c1:2f:34:34:22:0a:65:eb:c5:bd:f5:e1:94:40:05: b8:44:83:5b:e9:ec:95:be:a3:09:28:91:ac:69:07: d7:18:3e:73:00:56:96:ed:8d:e8:47:1b:9f:b2:7d: 6b:4d:e2:1f:37:f0:4a:1c:d3:59:4e:31:07:64:04: c5:3e:d4:ab:68:13:5d:ea:03:c7:d1:c0:4d:c1:1d: 49:4e:ce:2d:00:8a:6a:8e:7a:53:f7:4b:94:cd:a3: 9c:95:e7:fb:20:96:61:ec:5b:09:96:d2:c4:a1:f2: 77:87:54:fc:9f:e9:f8:a1:92:ad:e3:59:70:59:95: c9:e0:2b:81:d1:64:ef:11:50:db:9d:34:10:21:92: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:17:F8:CF:20:DD:CE:FF:E7:4C:86:79:2B:43:B6:70:A4:2B:40 X509v3 Authority Key Identifier: keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:39:10:9a:e9:93:bc:20:29:dc:0d:cf:8e:17:79:2d:5d:6f: 28:0a:90:cf:06:11:49:d4:82:76:83:21:c6:d2:7c:f5:0f:88: f8:92:c8:06:32:e6:a7:97:1f:41:09:36:4f:0c:75:d9:1d:b1: 2d:cd:76:71:37:e7:40:2a:f9:bf:bf:da:5a:6c:99:3f:40:e3: 78:ce:03:ca:ba:6e:ca:e1:7c:77:1a:0c:2e:d9:94:82:c4:b4: 30:da:ec:c7:56:f7:fc:2f:02:70:1a:a8:54:20:ef:77:5a:43: 45:63:f8:14:1b:ee:84:d4:d2:c0:9d:03:9b:85:cd:f0:b0:f9: 26:94:e5:ff:5f:33:29:43:98:92:64:35:2b:5a:4b:10:74:46: f3:0c:0a:69:a9:ee:71:66:bb:d1:a2:88:9e:c8:91:9e:3f:9e: e4:33:6a:ca:76:ea:7a:09:c9:06:a4:31:a5:43:04:10:66:fe: d3:4c:7d:06:f6:cd:2d:f6:a8:ba:9a:95:fc:56:3d:8f:79:e4: 58:d0:08:dc:b6:0f:9e:57:70:ae:c1:c9:7b:8b:8d:37:91:7e: 80:a9:e8:eb:7e:bb:bb:da:34:f1:9a:3b:d3:1e:a8:29:f7:c9: c1:67:fd:05:35:46:2d:41:4d:9c:c9:c1:93:74:24:f0:ac:5f: 33:dc:a2:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvb4jNtpOV2NuDDzp3dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNmFjM2ZhYzQ1ZjA1ZDkwMjY4ODIzNzVmZTAyYjE1N2Q0 Yjc1MTgwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD Eyg1MzQzMTdmOGNmMjBkZGNlZmZlNzRjODY3OTJiNDNiNjcwYTQyYjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySqBjlDskBBlWURgfCYAX2kw8xxb akhyOaHQl36ORvxLvuV3t3UVnO9sIkwNAXv8GrV2u6UlI0b1o9C16FbO9ZU4k3dw B+HdqNn67aGU96zRR9BchrZ5Z2oui/I+H3HKrWLpU8wOxQyJXGGBcFq7SO5YdBts BzLBLzQ0Igpl68W99eGUQAW4RINb6eyVvqMJKJGsaQfXGD5zAFaW7Y3oRxufsn1r TeIfN/BKHNNZTjEHZATFPtSraBNd6gPH0cBNwR1JTs4tAIpqjnpT90uUzaOclef7 IJZh7FsJltLEofJ3h1T8n+n4oZKt41lwWZXJ4CuB0WTvEVDbnTQQIZLgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNDF/jPIN3O/+dMhnkrQ7ZwpCtAMB8GA1UdIwQY MBaAFIxqw/rEXwXZAmiCN1/gKxV9S3UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgt ODIyMTBjYmY4NDQ4LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgtODIyMTBjYmY4NDQ4 LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzkQmumT vCAp3A3Pjhd5LV1vKAqQzwYRSdSCdoMhxtJ89Q+I+JLIBjLmp5cfQQk2Twx12R2x Lc12cTfnQCr5v7/aWmyZP0DjeM4DyrpuyuF8dxoMLtmUgsS0MNrsx1b3/C8CcBqo VCDvd1pDRWP4FBvuhNTSwJ0Dm4XN8LD5JpTl/18zKUOYkmQ1K1pLEHRG8wwKaanu cWa70aKInsiRnj+e5DNqynbqegnJBqQxpUMEEGb+00x9BvbNLfaoupqV/FY9j3nk WNAI3LYPnldwrsHJe4uNN5F+gKno6367u9o08Zo70x6oKffJwWf9BTVGLUFNnMnB k3Qk8KxfM9yiOA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:07 2026 by rpki-client