This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json) Hash identifier: 3L/dl1VU3DP/viHUITo31A4REpuOH8ON+5VWcnx9yKQ= Subject key identifier: 24:CA:B9:3E:8D:98:74:BE:B0:2D:A1:D8:C0:EE:36:3E:5D:D0:EC:45 Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0 Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0 Certificate serial: 019C4134196D2BB9EDAEC2ADCB3A6F6F4D1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft Manifest number: 1108 Signing time: Mon 09 Feb 2026 07:00:59 +0000 Manifest this update: Mon 09 Feb 2026 07:00:59 +0000 Manifest next update: Tue 10 Feb 2026 07:00:59 +0000 Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: 58b3IgT6cXY7d9OshH8OOuNnZH5UrAOoJBKqhYKx04U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:19:6d:2b:b9:ed:ae:c2:ad:cb:3a:6f:6f:4d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0 Validity Not Before: Feb 9 07:00:59 2026 GMT Not After : Feb 10 07:00:59 2026 GMT Subject: CN=24cab93e8d9874beb02da1d8c0ee363e5dd0ec45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:c7:ce:c1:a5:ef:ab:3b:ec:7c:74:e2:2a: 1f:6e:d7:ed:98:e1:59:65:a9:dc:8a:16:e8:05:39: 85:b0:ef:ad:87:60:8d:c0:9d:f1:50:f0:95:a4:46: 4e:ed:b0:94:5f:aa:58:30:4c:82:38:7c:ae:11:a8: b8:8f:b0:60:f4:0e:65:7f:8a:69:a9:67:90:aa:b6: ea:04:ef:36:ea:69:d0:5c:c8:2f:b9:3c:48:38:7b: be:b0:24:12:33:33:57:01:fd:4a:7a:ed:f7:80:60: e8:1c:3c:4d:33:df:e7:4a:7f:b3:06:8b:2f:11:3b: 4d:f2:bb:03:9f:97:5a:26:bd:5b:80:f7:2b:ac:35: f3:96:d9:bb:fc:81:af:56:e6:e4:d8:46:1a:0c:b5: 31:0e:e7:54:79:fa:d1:58:3d:97:b9:6d:5b:08:8f: 1b:e1:be:07:e1:47:84:34:d6:49:20:38:7e:81:31: 99:a7:2a:ba:8e:86:0b:13:90:1e:19:29:e9:cd:5e: ec:9f:c5:20:cd:72:38:64:fe:13:6e:c7:d7:a4:62: 64:26:8b:0a:89:83:1a:dd:f4:e4:c1:a3:6c:76:33: 48:8d:24:48:b6:a2:45:b9:83:26:e9:44:4d:1c:72: 96:07:eb:11:59:65:9d:81:b7:ba:2e:e6:3e:dc:0a: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:B9:3E:8D:98:74:BE:B0:2D:A1:D8:C0:EE:36:3E:5D:D0:EC:45 X509v3 Authority Key Identifier: keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:8d:64:92:dd:c7:53:b6:f9:9a:86:09:f4:e9:b1:99:b8:ff: 8e:63:de:e0:ed:c3:f9:26:66:1f:27:3f:68:79:7e:3e:01:33: 12:aa:38:38:7a:cc:fa:e8:8f:7f:66:0e:9e:2c:da:a0:26:72: a5:18:2b:67:04:bd:0d:bd:a3:ff:e4:8d:bf:d6:38:12:9e:f0: 28:8c:0e:37:0a:a4:56:a3:bf:f3:31:ec:36:aa:33:ec:de:71: 5d:5c:d3:42:03:3d:2a:bc:44:53:9e:8b:1e:b7:62:35:c6:bf: 9f:d0:c4:fc:a8:9b:0e:3f:64:0e:51:47:a5:2c:27:96:02:e6: c3:12:ff:b0:5a:03:96:8d:63:5e:05:dc:f5:ca:2f:17:38:d9: e0:ea:30:79:91:ce:32:27:aa:48:ad:60:cc:22:18:a1:cc:39: 37:11:7b:32:ab:f0:14:a9:39:ed:bf:09:0c:ed:77:1b:80:c1: 60:cb:39:44:1b:08:0f:84:e8:ea:29:0e:ec:a5:f7:95:77:42: 02:fe:06:d3:53:b4:08:7f:2d:62:16:38:94:66:f5:57:ef:20: 52:11:97:ac:5d:68:41:e3:1b:2a:5f:7d:62:11:50:fd:ce:66: 0e:2f:f6:5e:aa:ac:dc:60:e6:ad:dd:d4:b3:5b:14:cf:bb:ee: bf:31:7d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNBltK7ntrsKtyzpvb00cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTY2MTY5N2RhOTBiNTgwMGJjNDJhZGY5YjQ1OTUzMjE5 NzU1ZDAwHhcNMjYwMjA5MDcwMDU5WhcNMjYwMjEwMDcwMDU5WjAzMTEwLwYDVQQD EygyNGNhYjkzZThkOTg3NGJlYjAyZGExZDhjMGVlMzYzZTVkZDBlYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/HzsGl76s77Hx04iofbtftmOFZ ZancihboBTmFsO+th2CNwJ3xUPCVpEZO7bCUX6pYMEyCOHyuEai4j7Bg9A5lf4pp qWeQqrbqBO826mnQXMgvuTxIOHu+sCQSMzNXAf1Keu33gGDoHDxNM9/nSn+zBosv ETtN8rsDn5daJr1bgPcrrDXzltm7/IGvVubk2EYaDLUxDudUefrRWD2XuW1bCI8b 4b4H4UeENNZJIDh+gTGZpyq6joYLE5AeGSnpzV7sn8UgzXI4ZP4TbsfXpGJkJosK iYMa3fTkwaNsdjNIjSRItqJFuYMm6URNHHKWB+sRWWWdgbe6LuY+3AoN3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTKuT6NmHS+sC2h2MDuNj5d0OxFMB8GA1UdIwQY MBaAFI5WYWl9qQtYALxCrfm0WVMhl1XQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDIt YTFjOWQzZTVmYmJhLzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDItYTFjOWQzZTVmYmJh LzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxI1kkt3H U7b5moYJ9Omxmbj/jmPe4O3D+SZmHyc/aHl+PgEzEqo4OHrM+uiPf2YOnizaoCZy pRgrZwS9Db2j/+SNv9Y4Ep7wKIwONwqkVqO/8zHsNqoz7N5xXVzTQgM9KrxEU56L HrdiNca/n9DE/KibDj9kDlFHpSwnlgLmwxL/sFoDlo1jXgXc9covFzjZ4OoweZHO MieqSK1gzCIYocw5NxF7MqvwFKk57b8JDO13G4DBYMs5RBsID4To6ikO7KX3lXdC Av4G01O0CH8tYhY4lGb1V+8gUhGXrF1oQeMbKl99YhFQ/c5mDi/2Xqqs3GDmrd3U s1sUz7vuvzF9SA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:29 2026 by rpki-client