This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json) Hash identifier: XCk96tN1FgXC8s62IA0dQ9FWQNz7iQNRFr58Rs+7kng= Subject key identifier: 5B:23:6B:09:EB:10:68:5B:2E:DE:FD:D0:CB:03:68:17:21:51:D0:D6 Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Certificate serial: 019C43FD985FF4CAF08B50FB38E2E24B56D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft Manifest number: 06B9 Signing time: Mon 09 Feb 2026 20:00:18 +0000 Manifest this update: Mon 09 Feb 2026 20:00:18 +0000 Manifest next update: Tue 10 Feb 2026 20:00:18 +0000 Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: OFkgPjAJFXKE1WJ25k93cCFNDMj8hpIeWtzCcQpzvaA=) 2: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (hash: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:98:5f:f4:ca:f0:8b:50:fb:38:e2:e2:4b:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Validity Not Before: Feb 9 20:00:18 2026 GMT Not After : Feb 10 20:00:18 2026 GMT Subject: CN=5b236b09eb10685b2edefdd0cb0368172151d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:a7:2b:c5:db:b1:41:c9:60:ea:29:6c:36: dc:f3:f1:e4:a8:e8:2f:ca:b0:0c:b5:4b:be:6b:f8: 00:e7:76:36:7b:08:6f:4e:78:49:22:16:8f:13:47: 0f:69:a9:f9:40:a2:d0:df:cb:23:d2:30:27:ed:34: fd:99:ca:15:9b:b1:71:68:0b:d6:b7:46:66:bb:3e: df:8f:a4:e6:53:fb:53:fe:a0:22:0e:13:a1:46:8b: 0b:87:68:13:f3:11:7b:d6:df:56:ba:2e:f4:c4:65: 22:df:b8:65:3a:7e:5a:27:bf:18:1e:06:72:cf:d9: 2b:da:6c:64:a2:4d:8f:a3:b0:b2:95:37:1d:56:b7: 68:a6:34:53:11:8c:55:13:1f:9e:24:3b:f5:d9:a2: 04:14:04:15:99:21:a6:82:34:86:66:0f:da:7b:94: 61:34:a0:2f:cc:ef:63:da:20:06:e2:66:3a:2b:52: 64:4a:c2:08:b2:f5:80:b0:84:75:24:19:68:95:78: fb:0c:74:e1:2f:fc:e5:53:4f:f2:bc:b0:47:f2:cf: d2:07:64:30:a3:4c:a4:23:d8:cf:a5:c4:91:7d:e0: 7f:d6:87:d4:8d:2d:dc:f0:84:fb:82:62:04:ca:61: c9:04:38:10:84:c8:f6:71:c8:ae:4a:07:b2:fa:6b: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:23:6B:09:EB:10:68:5B:2E:DE:FD:D0:CB:03:68:17:21:51:D0:D6 X509v3 Authority Key Identifier: keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:62:4a:27:b8:6c:9d:f1:21:3c:9c:d3:3f:95:93:e2:34:6a: 08:86:64:17:ca:5f:ea:d2:91:c1:5f:24:86:b2:72:55:9a:a7: bf:09:8f:e0:dd:2a:0f:66:8a:70:a6:05:bc:96:2b:d0:e9:3b: 4b:62:4c:70:88:8e:c1:6f:33:f3:0e:fd:72:a7:a4:66:b7:47: 67:b6:0a:71:d7:cb:bb:42:fb:2d:54:6e:e0:65:1e:49:85:99: 09:54:da:8a:d2:41:92:16:5c:8e:31:c0:d4:88:e6:19:7b:f5: d9:87:64:ab:75:7b:29:a5:07:53:ef:44:c6:b0:5c:6b:26:6b: 65:11:ef:3e:b6:05:fc:c8:ac:9f:36:72:d9:5e:06:db:8e:51: e9:9c:63:4a:af:16:df:70:28:b9:2f:7f:a8:c7:7d:17:66:31: 5c:ae:59:55:20:3b:39:ee:b5:9f:99:e3:e2:a3:b3:26:b3:f2: d3:20:4f:07:ec:13:91:4a:94:51:6f:9c:be:e6:37:7c:0c:79: 5e:14:11:1d:85:cd:0b:42:a9:ec:89:4a:1d:3d:b6:2d:b9:20: ba:ae:f8:88:65:85:d6:ac:c5:b9:6e:02:65:a4:6f:73:40:bc: 97:6f:11:60:7a:b8:65:2c:d4:93:56:7e:45:8d:ec:f5:73:87: 8b:62:85:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/Zhf9Mrwi1D7OOLiS1bQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw YjUxOGYwHhcNMjYwMjA5MjAwMDE4WhcNMjYwMjEwMjAwMDE4WjAzMTEwLwYDVQQD Eyg1YjIzNmIwOWViMTA2ODViMmVkZWZkZDBjYjAzNjgxNzIxNTFkMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEenK8XbsUHJYOopbDbc8/HkqOgv yrAMtUu+a/gA53Y2ewhvTnhJIhaPE0cPaan5QKLQ38sj0jAn7TT9mcoVm7FxaAvW t0Zmuz7fj6TmU/tT/qAiDhOhRosLh2gT8xF71t9Wui70xGUi37hlOn5aJ78YHgZy z9kr2mxkok2Po7CylTcdVrdopjRTEYxVEx+eJDv12aIEFAQVmSGmgjSGZg/ae5Rh NKAvzO9j2iAG4mY6K1JkSsIIsvWAsIR1JBlolXj7DHThL/zlU0/yvLBH8s/SB2Qw o0ykI9jPpcSRfeB/1ofUjS3c8IT7gmIEymHJBDgQhMj2cciuSgey+muRRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsjawnrEGhbLt790MsDaBchUdDWMB8GA1UdIwQY MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2JKJ7hs nfEhPJzTP5WT4jRqCIZkF8pf6tKRwV8khrJyVZqnvwmP4N0qD2aKcKYFvJYr0Ok7 S2JMcIiOwW8z8w79cqekZrdHZ7YKcdfLu0L7LVRu4GUeSYWZCVTaitJBkhZcjjHA 1IjmGXv12Ydkq3V7KaUHU+9ExrBcayZrZRHvPrYF/MisnzZy2V4G245R6ZxjSq8W 33AouS9/qMd9F2YxXK5ZVSA7Oe61n5nj4qOzJrPy0yBPB+wTkUqUUW+cvuY3fAx5 XhQRHYXNC0Kp7IlKHT22Lbkguq74iGWF1qzFuW4CZaRvc0C8l28RYHq4ZSzUk1Z+ RY3s9XOHi2KFSg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:46 2026 by rpki-client