This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json) Hash identifier: IutBXTHby3SSPT8I7WCEfGl43liQFB+NFdGUs6tujDM= Subject key identifier: 8B:B8:CE:E8:E9:98:BC:66:B2:AE:67:54:74:70:08:4D:76:A8:40:F4 Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8 Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8 Certificate serial: 019C420F79FF8C1E25F59167096F6F053244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft Manifest number: 1351 Signing time: Mon 09 Feb 2026 11:00:36 +0000 Manifest this update: Mon 09 Feb 2026 11:00:36 +0000 Manifest next update: Tue 10 Feb 2026 11:00:36 +0000 Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: 0I1u+onDPyAmKTWKOx5+pB8lX48EM9b5xsgwYuKghAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:79:ff:8c:1e:25:f5:91:67:09:6f:6f:05:32:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8 Validity Not Before: Feb 9 11:00:36 2026 GMT Not After : Feb 10 11:00:36 2026 GMT Subject: CN=8bb8cee8e998bc66b2ae67547470084d76a840f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:70:f6:41:16:75:25:e5:ef:d7:f9:4d:2d: 3a:67:be:f0:4b:53:2b:ee:88:f2:ba:46:c3:c6:54: be:7f:32:82:06:1c:d4:ab:0e:8b:e9:af:e4:f9:50: 51:2d:a3:b4:df:c1:dd:f6:09:d7:66:cc:b8:71:09: 6a:9f:00:03:e5:07:9f:ea:d5:48:a0:99:14:0c:7e: a9:ef:d5:b7:aa:70:2c:8c:1e:79:40:82:76:48:d0: 2f:3b:c6:57:03:52:06:0b:65:02:3c:7f:c3:0c:45: 0c:4f:2d:f2:d7:67:e3:fd:ad:d8:55:cf:d4:56:76: d4:11:52:bb:29:62:41:e3:98:6a:7a:0b:fd:b1:ef: 2d:f2:aa:eb:2b:b9:85:73:99:56:77:a2:8a:6a:39: 28:a1:dc:f0:dd:d9:d6:78:82:74:1c:e9:01:2c:b1: 6c:c0:df:8e:e6:ef:a9:b0:1a:b6:7d:5e:11:30:e1: 90:64:c2:35:4e:e1:fb:56:ba:63:8e:49:24:a6:b4: 9d:62:db:36:55:b2:41:1e:26:d2:a6:a6:44:39:b0: fc:bc:db:24:44:0b:96:0c:fe:93:41:f7:d3:a1:d2: 58:c3:3d:84:ee:45:bb:7c:e3:a4:68:ce:c0:ae:18: 91:d3:71:5e:34:4b:f2:f4:9a:3d:63:fe:c2:3a:98: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B8:CE:E8:E9:98:BC:66:B2:AE:67:54:74:70:08:4D:76:A8:40:F4 X509v3 Authority Key Identifier: keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:62:18:5b:a7:dc:0f:b8:b4:a8:0e:ea:b8:02:1b:e4:47:80: b0:8c:ea:57:62:ec:fc:73:61:87:8f:79:1f:90:dc:62:a1:85: 43:b7:18:19:a7:a8:20:b4:cd:44:32:65:e7:25:40:1b:0c:74: 04:c7:3a:e5:f4:3f:2a:71:8e:48:93:96:11:f7:40:04:af:20: 04:20:be:cd:6b:19:90:fa:11:8b:5a:7e:fb:b2:a2:cc:a3:f8: f8:ae:d1:56:0f:82:4b:02:b6:6e:77:20:41:3e:3e:39:ea:5e: 22:d3:89:2f:26:68:7a:0d:fd:57:6f:15:20:a3:a4:10:a3:f4: 6a:64:dd:73:c5:f0:92:a9:ad:ae:d0:50:43:c8:54:e9:2e:5a: 24:fe:c7:af:1a:c6:76:f1:b2:96:8f:b3:20:6a:24:e1:4b:e3: de:b3:e4:6b:60:d4:e2:87:93:a1:19:48:66:b5:60:57:45:a5: fe:89:d2:0d:89:16:b6:95:61:7e:7d:48:7c:3f:fb:86:a8:48: 8e:b6:4d:29:89:8c:7b:91:b2:57:aa:f7:6d:0b:9d:71:aa:ab: fd:2d:c0:0e:6f:64:08:d8:f4:e9:b0:3f:1c:a6:d6:0d:84:d7: 48:6f:57:af:27:26:35:5e:62:1a:c7:ac:d5:ac:46:55:2e:be: 3b:5f:42:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3n/jB4l9ZFnCW9vBTJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTM0YjAzNzczMDVlY2JmZTM4M2IyMWI4NzQ3NDEwNmEx ZTRkZDgwHhcNMjYwMjA5MTEwMDM2WhcNMjYwMjEwMTEwMDM2WjAzMTEwLwYDVQQD Eyg4YmI4Y2VlOGU5OThiYzY2YjJhZTY3NTQ3NDcwMDg0ZDc2YTg0MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb9w9kEWdSXl79f5TS06Z77wS1Mr 7ojyukbDxlS+fzKCBhzUqw6L6a/k+VBRLaO038Hd9gnXZsy4cQlqnwAD5Qef6tVI oJkUDH6p79W3qnAsjB55QIJ2SNAvO8ZXA1IGC2UCPH/DDEUMTy3y12fj/a3YVc/U VnbUEVK7KWJB45hqegv9se8t8qrrK7mFc5lWd6KKajkoodzw3dnWeIJ0HOkBLLFs wN+O5u+psBq2fV4RMOGQZMI1TuH7VrpjjkkkprSdYts2VbJBHibSpqZEObD8vNsk RAuWDP6TQffTodJYwz2E7kW7fOOkaM7ArhiR03FeNEvy9Jo9Y/7COphNWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu4zujpmLxmsq5nVHRwCE12qED0MB8GA1UdIwQY MBaAFPyTSwN3MF7L/jg7Ibh0dBBqHk3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmIt OWRlN2Y5MzVmYzAxLzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmItOWRlN2Y5MzVmYzAx LzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWIYW6fc D7i0qA7quAIb5EeAsIzqV2Ls/HNhh495H5DcYqGFQ7cYGaeoILTNRDJl5yVAGwx0 BMc65fQ/KnGOSJOWEfdABK8gBCC+zWsZkPoRi1p++7KizKP4+K7RVg+CSwK2bncg QT4+OepeItOJLyZoeg39V28VIKOkEKP0amTdc8XwkqmtrtBQQ8hU6S5aJP7HrxrG dvGylo+zIGok4Uvj3rPka2DU4oeToRlIZrVgV0Wl/onSDYkWtpVhfn1IfD/7hqhI jrZNKYmMe5GyV6r3bQudcaqr/S3ADm9kCNj06bA/HKbWDYTXSG9XrycmNV5iGses 1axGVS6+O19Cfw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:43 2026 by rpki-client