This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft File: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft (raw, json) Hash identifier: ivaNlId5HDeGPUKLzJvIYRgyQhLnrTxb65kvc2VBKLQ= Subject key identifier: 7B:67:51:65:B2:62:F4:EB:95:4B:B7:14:0A:C8:98:03:77:5F:5A:4E Authority key identifier: 25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39 Certificate issuer: /CN=253441fe85d3435c71a1894eed0c744147644a39 Certificate serial: 019C4134818B01D70E5731599979271DABBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft Manifest number: 02C6 Signing time: Mon 09 Feb 2026 07:01:25 +0000 Manifest this update: Mon 09 Feb 2026 07:01:25 +0000 Manifest next update: Tue 10 Feb 2026 07:01:25 +0000 Files and hashes: 1: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl (hash: 5y4kj/vwX5OdIr4uiEJQur8AaUEtBz+WnkRt4NJA8EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:81:8b:01:d7:0e:57:31:59:99:79:27:1d:ab:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253441fe85d3435c71a1894eed0c744147644a39 Validity Not Before: Feb 9 07:01:25 2026 GMT Not After : Feb 10 07:01:25 2026 GMT Subject: CN=7b675165b262f4eb954bb7140ac89803775f5a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:c3:bf:b3:8b:82:4a:fa:09:71:87:d0:1c: 96:77:d2:a2:13:38:8b:8b:c0:3f:79:55:b1:5e:76: 9d:9f:41:da:bc:38:98:98:76:9c:10:54:a3:f8:8f: 50:a3:e1:80:65:23:09:8f:91:f9:4d:49:1b:fe:60: af:da:da:13:9e:94:f1:98:5a:d7:9c:46:8d:26:d9: 35:02:b4:a4:7d:83:67:13:c3:75:6d:11:a3:04:9b: a0:41:83:5f:34:ff:5f:b7:69:44:62:63:d1:aa:74: a8:9e:e3:84:5e:cc:eb:23:17:ee:0f:c0:f4:21:ea: c3:1f:42:90:1d:d9:aa:1f:a1:4f:95:05:ed:de:1f: de:07:52:e7:5e:50:3d:f8:dd:6a:bd:f0:3d:9c:25: 1b:72:0e:cf:11:52:87:c9:44:39:91:82:6d:66:db: 13:98:64:3d:37:8b:20:9c:06:f7:a7:69:55:87:de: ea:1c:b0:8e:cb:5c:7c:b0:32:d0:a2:93:b0:a7:6d: 8d:ef:8d:bf:94:43:b1:3a:80:7d:33:7a:89:c8:58: 7a:bf:7c:11:e9:24:1f:de:10:7c:c1:68:1a:76:f9: 3b:28:20:e4:a1:bd:ad:bf:76:18:3a:32:7f:23:57: 73:5f:d7:7b:be:65:01:cf:0a:37:f9:c5:43:91:a1: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:67:51:65:B2:62:F4:EB:95:4B:B7:14:0A:C8:98:03:77:5F:5A:4E X509v3 Authority Key Identifier: keyid:25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:51:02:85:28:9e:c8:a7:5b:a4:56:fe:65:b4:34:cb:b9: e9:f3:54:e9:56:4d:e0:84:10:4b:3d:c9:b0:d5:65:83:5e:a8: e1:75:8a:f0:cf:94:fa:18:51:df:75:91:dd:c8:05:ea:a9:29: fc:80:b7:c5:b1:cb:93:fe:c5:39:a6:0d:e0:bc:30:21:d3:1c: 20:45:8f:d0:14:55:c2:b1:b1:76:af:09:34:03:7e:f8:f0:37: a4:b7:57:8b:5a:c2:ad:df:eb:cd:2a:52:1c:f2:97:33:b3:c5: 2e:78:f7:02:e0:f3:55:c2:3f:3a:af:42:83:d5:ed:df:4c:35: fb:e2:b7:48:74:58:51:6d:40:bc:bd:13:fe:c7:3b:88:ac:9d: 55:6e:80:fe:af:d5:d4:6e:e1:4a:3f:c0:9a:7d:a5:ee:2a:ec: 93:2c:27:0a:07:09:a9:d3:5c:39:ba:6b:b7:83:a6:ff:f9:6c: 64:0c:71:ba:e4:01:cc:54:9e:31:b1:d5:3f:0e:86:12:05:d0: 1f:b4:a9:b6:55:4a:25:a3:96:6e:ac:10:97:1c:d5:2f:39:cb: db:84:62:0f:25:72:94:41:d1:34:36:bc:e3:77:34:7f:06:d8: e9:b2:da:5c:60:a8:19:34:df:26:53:05:5e:3b:65:3a:0f:18: b0:87:c4:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNIGLAdcOVzFZmXknHau/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzQ0MWZlODVkMzQzNWM3MWExODk0ZWVkMGM3NDQxNDc2 NDRhMzkwHhcNMjYwMjA5MDcwMTI1WhcNMjYwMjEwMDcwMTI1WjAzMTEwLwYDVQQD Eyg3YjY3NTE2NWIyNjJmNGViOTU0YmI3MTQwYWM4OTgwMzc3NWY1YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnPDv7OLgkr6CXGH0ByWd9KiEziL i8A/eVWxXnadn0HavDiYmHacEFSj+I9Qo+GAZSMJj5H5TUkb/mCv2toTnpTxmFrX nEaNJtk1ArSkfYNnE8N1bRGjBJugQYNfNP9ft2lEYmPRqnSonuOEXszrIxfuD8D0 IerDH0KQHdmqH6FPlQXt3h/eB1LnXlA9+N1qvfA9nCUbcg7PEVKHyUQ5kYJtZtsT mGQ9N4sgnAb3p2lVh97qHLCOy1x8sDLQopOwp22N742/lEOxOoB9M3qJyFh6v3wR 6SQf3hB8wWgadvk7KCDkob2tv3YYOjJ/I1dzX9d7vmUBzwo3+cVDkaF2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtnUWWyYvTrlUu3FArImAN3X1pOMB8GA1UdIwQY MBaAFCU0Qf6F00NccaGJTu0MdEFHZEo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yOThlYTItM2FmMS00OWY1LTgxNGUt NGVmMzI4NjFjOTE1LzEvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yOThlYTItM2FmMS00OWY1LTgxNGUtNGVmMzI4NjFjOTE1 LzEvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIe9RAoUo nsinW6RW/mW0NMu56fNU6VZN4IQQSz3JsNVlg16o4XWK8M+U+hhR33WR3cgF6qkp /IC3xbHLk/7FOaYN4LwwIdMcIEWP0BRVwrGxdq8JNAN++PA3pLdXi1rCrd/rzSpS HPKXM7PFLnj3AuDzVcI/Oq9Cg9Xt30w1++K3SHRYUW1AvL0T/sc7iKydVW6A/q/V 1G7hSj/Amn2l7irskywnCgcJqdNcObprt4Om//lsZAxxuuQBzFSeMbHVPw6GEgXQ H7SptlVKJaOWbqwQlxzVLznL24RiDyVylEHRNDa843c0fwbY6bLaXGCoGTTfJlMF XjtlOg8YsIfE9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:36 2026 by rpki-client