This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft File: J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json) Hash identifier: JPRuhehT7rgBKdx0Civd20fxbeO3hlAlOflcIW1Dr8k= Subject key identifier: A2:23:34:13:6D:7D:58:F8:E4:7D:C4:97:8A:9C:11:2A:69:77:9D:54 Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14 Certificate issuer: /CN=27b56eb25b05a08826c2648fff1acf36b494d814 Certificate serial: 019C420FFB9244FC2DADAD7F4B6585972078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft Manifest number: 04CB Signing time: Mon 09 Feb 2026 11:01:09 +0000 Manifest this update: Mon 09 Feb 2026 11:01:09 +0000 Manifest next update: Tue 10 Feb 2026 11:01:09 +0000 Files and hashes: 1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: Kco1kODNA7fZ3NMUqT5FGrFV6LBUJlaPlrWoN7BjS2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:fb:92:44:fc:2d:ad:ad:7f:4b:65:85:97:20:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814 Validity Not Before: Feb 9 11:01:09 2026 GMT Not After : Feb 10 11:01:09 2026 GMT Subject: CN=a22334136d7d58f8e47dc4978a9c112a69779d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:68:de:c3:f8:76:d6:6b:84:37:c8:41:7a: 38:ee:03:85:96:36:7b:27:75:ce:2f:cd:9b:c7:25: f1:2c:f8:c0:c1:ac:93:c8:b3:b6:2d:92:44:12:90: 6f:0e:6f:55:33:b2:f8:df:15:0f:f2:8c:11:ca:f1: 40:10:ec:67:ba:bc:ab:b8:b4:79:d1:e3:d2:f0:9f: eb:5a:bf:d0:3e:dc:ed:9a:4b:6a:b7:21:62:29:c0: 85:02:39:70:3b:85:d6:31:7d:08:e6:6e:28:7e:c5: a4:8e:14:f7:c2:76:01:84:16:3a:d1:10:d5:03:1c: 9b:58:06:11:25:23:e5:36:de:85:b5:f7:c8:d9:b5: 45:d7:32:16:5a:d5:f7:52:40:6a:eb:20:9a:89:7e: 6d:7b:e8:cd:92:d9:2d:de:9c:c5:69:f9:47:ea:e4: f5:9d:05:0b:e1:23:d6:8e:8d:db:2a:5b:32:78:df: 5e:0c:a7:b6:a2:b8:2a:6c:d9:9a:d1:d8:d9:6b:69: ce:e5:79:d5:00:4a:08:eb:0f:72:d9:55:2d:d5:c4: b8:02:2f:e4:2f:b8:83:a7:87:13:11:13:8e:26:88: 7e:ce:3a:f1:94:a2:68:d6:a1:2d:e5:8f:7e:77:2d: bb:f4:8f:88:fc:c5:f6:2c:2a:82:96:0a:4d:69:05: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:34:13:6D:7D:58:F8:E4:7D:C4:97:8A:9C:11:2A:69:77:9D:54 X509v3 Authority Key Identifier: keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:35:c8:cf:fe:bd:63:17:46:92:bf:ed:78:d5:e8:cc:e9:c7: 50:4c:0f:89:36:73:69:65:18:4a:3b:c3:3d:fe:0d:80:90:b3: da:54:8b:ab:26:62:d0:84:32:ff:89:ce:fa:b0:1b:d0:f6:96: da:58:97:fa:0e:f5:39:57:07:17:2f:b7:10:84:ed:47:fb:52: 72:34:e9:f7:d7:fe:38:72:50:7d:1e:3e:af:53:58:a9:79:bf: 77:8f:de:ee:a5:9c:f2:0b:c0:ba:b2:c4:12:65:ca:b4:f6:7a: 94:50:75:49:6b:cc:f1:d6:9f:32:e1:96:f3:65:d1:fb:a9:72: f0:78:7d:03:55:ca:f9:83:9d:f2:b8:41:5b:fe:e2:37:d1:40: 21:5b:d2:06:7b:73:d4:01:42:f7:05:a2:60:c4:eb:5f:f9:f3: f8:50:16:f4:66:ed:1e:ba:3d:d0:c8:d9:f9:f7:58:e4:ee:f3: 39:63:2b:e0:81:b5:79:f3:10:dd:34:37:ca:a3:6a:49:03:47: 1e:61:aa:cb:9f:1e:2d:3f:73:87:4c:23:75:1e:5a:ea:0a:d2: 40:72:a6:75:d0:99:e5:1e:9e:46:33:46:a1:2a:ac:84:04:a1: f5:a6:dd:74:cd:12:0b:6f:55:27:51:dc:b0:82:80:02:51:dd: 56:a3:b3:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/uSRPwtra1/S2WFlyB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjU2ZWIyNWIwNWEwODgyNmMyNjQ4ZmZmMWFjZjM2YjQ5 NGQ4MTQwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD EyhhMjIzMzQxMzZkN2Q1OGY4ZTQ3ZGM0OTc4YTljMTEyYTY5Nzc5ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Ro3sP4dtZrhDfIQXo47gOFljZ7 J3XOL82bxyXxLPjAwayTyLO2LZJEEpBvDm9VM7L43xUP8owRyvFAEOxnuryruLR5 0ePS8J/rWr/QPtztmktqtyFiKcCFAjlwO4XWMX0I5m4ofsWkjhT3wnYBhBY60RDV AxybWAYRJSPlNt6FtffI2bVF1zIWWtX3UkBq6yCaiX5te+jNktkt3pzFaflH6uT1 nQUL4SPWjo3bKlsyeN9eDKe2orgqbNma0djZa2nO5XnVAEoI6w9y2VUt1cS4Ai/k L7iDp4cTEROOJoh+zjrxlKJo1qEt5Y9+dy279I+I/MX2LCqClgpNaQUxpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIjNBNtfVj45H3El4qcESppd51UMB8GA1UdIwQY MBaAFCe1brJbBaCIJsJkj/8azza0lNgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTct MDM4ZjE1OTU2M2ZmLzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTctMDM4ZjE1OTU2M2Zm LzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjXIz/69 YxdGkr/teNXozOnHUEwPiTZzaWUYSjvDPf4NgJCz2lSLqyZi0IQy/4nO+rAb0PaW 2liX+g71OVcHFy+3EITtR/tScjTp99f+OHJQfR4+r1NYqXm/d4/e7qWc8gvAurLE EmXKtPZ6lFB1SWvM8dafMuGW82XR+6ly8Hh9A1XK+YOd8rhBW/7iN9FAIVvSBntz 1AFC9wWiYMTrX/nz+FAW9GbtHro90MjZ+fdY5O7zOWMr4IG1efMQ3TQ3yqNqSQNH HmGqy58eLT9zh0wjdR5a6grSQHKmddCZ5R6eRjNGoSqshASh9abddM0SC29VJ1Hc sIKAAlHdVqOzhg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:02 2026 by rpki-client