This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json) Hash identifier: W1bw9fSK9cE97NxtDUR8JslHtm6WghdDU0ZvvfK131E= Subject key identifier: 14:B8:45:6A:AA:6F:95:1A:94:E6:51:3C:B7:69:AC:AB:C3:5C:86:50 Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae Certificate serial: 019C446BA2F3B7070E75B1CF9AF17ADB7786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft Manifest number: 13DF Signing time: Mon 09 Feb 2026 22:00:30 +0000 Manifest this update: Mon 09 Feb 2026 22:00:30 +0000 Manifest next update: Tue 10 Feb 2026 22:00:30 +0000 Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: SojHVHpH52Up4k06+Y35caEctlXcdkFfxjWVroq+XC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:a2:f3:b7:07:0e:75:b1:cf:9a:f1:7a:db:77:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae Validity Not Before: Feb 9 22:00:30 2026 GMT Not After : Feb 10 22:00:30 2026 GMT Subject: CN=14b8456aaa6f951a94e6513cb769acabc35c8650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f1:99:cc:38:3c:47:0e:c5:2d:95:1b:31:75: 5c:84:37:fa:16:65:a7:94:f2:f8:7c:50:29:25:72: 07:6d:46:dd:99:0c:d6:1b:3f:3c:6d:9f:34:36:c7: dc:f2:fc:60:24:6b:ee:3e:a8:ae:f8:93:23:cf:a2: e9:ee:c0:e8:4e:c3:48:31:42:10:7d:10:3e:f6:bb: d3:f5:02:fb:79:f7:49:9f:64:cb:7c:4d:fd:b7:05: 55:f7:bf:c1:06:fd:be:5b:81:0c:81:ee:aa:05:40: d0:aa:1b:3d:a6:e5:01:55:8c:e2:9f:f2:cf:c6:d5: 43:93:e3:5a:4e:9b:2b:2c:93:9b:e1:eb:97:32:97: 0e:29:c0:f8:10:e2:5e:7e:6d:76:cd:d0:10:8b:a8: 1d:6d:15:08:70:e2:c2:d5:31:72:e9:82:42:f1:e8: a4:fb:31:98:e1:4d:2b:e1:ba:08:61:54:3e:6e:cf: f1:af:ab:70:01:f3:9c:78:63:cb:ac:67:17:cd:ab: 41:da:42:2d:55:f1:1a:55:be:3a:2b:c4:7c:a7:a6: ac:18:46:5e:01:6c:54:25:9e:8d:ff:5a:b4:32:83: 53:32:a7:20:ea:82:f5:be:ab:a6:81:4e:e1:2e:47: 73:cd:dc:db:92:b2:3f:f8:8f:09:27:3b:a1:a6:c0: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B8:45:6A:AA:6F:95:1A:94:E6:51:3C:B7:69:AC:AB:C3:5C:86:50 X509v3 Authority Key Identifier: keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:62:1b:8e:af:51:7f:97:1d:e3:a4:65:bb:2e:50:0b:db:2c: bd:70:77:bc:f2:cf:41:d9:64:1f:d1:62:a7:01:d6:eb:26:98: 0b:68:bb:42:58:52:d3:70:d4:eb:19:85:d7:34:b2:29:ab:7a: 81:97:c2:06:b1:38:52:30:47:38:de:18:8b:91:e1:f0:28:1a: e4:5d:1a:ab:33:b1:1d:58:dd:6b:98:ec:de:06:97:7c:72:e3: 4d:01:30:19:7a:6a:8c:bb:cd:bc:28:d5:bb:c2:f2:dc:f1:c3: 7b:46:83:07:4f:77:35:23:c2:4d:7e:67:c1:c0:1f:fb:34:b6: c8:ea:3c:cc:58:c7:30:8d:9b:12:cc:52:f9:15:52:38:15:5f: d1:51:a9:25:b1:e8:47:b2:6a:8c:c5:1d:d5:c9:0e:8b:8b:8d: 71:e5:59:ec:e2:f5:89:82:ca:ce:c6:46:aa:5a:25:ec:80:ce: 77:72:9d:f4:c0:cd:ef:b1:ec:a0:c6:b2:a1:ea:9a:30:f5:9a: 6d:53:6c:67:5d:2b:84:dc:33:cb:a9:cd:5f:3a:19:58:fc:2a: 97:40:23:15:b2:2a:c5:db:d2:e4:2c:ac:f3:6c:93:f0:09:7a: 3a:f2:61:e9:57:f6:50:99:71:36:30:70:2c:c7:5a:63:99:95: 8f:03:56:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa6LztwcOdbHPmvF623eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3N2IzNjgzMzA3YzZmY2MzMmJlZDE3NzIzMmYxZDQ3NDU0 MWZiYWUwHhcNMjYwMjA5MjIwMDMwWhcNMjYwMjEwMjIwMDMwWjAzMTEwLwYDVQQD EygxNGI4NDU2YWFhNmY5NTFhOTRlNjUxM2NiNzY5YWNhYmMzNWM4NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/GZzDg8Rw7FLZUbMXVchDf6FmWn lPL4fFApJXIHbUbdmQzWGz88bZ80Nsfc8vxgJGvuPqiu+JMjz6Lp7sDoTsNIMUIQ fRA+9rvT9QL7efdJn2TLfE39twVV97/BBv2+W4EMge6qBUDQqhs9puUBVYzin/LP xtVDk+NaTpsrLJOb4euXMpcOKcD4EOJefm12zdAQi6gdbRUIcOLC1TFy6YJC8eik +zGY4U0r4boIYVQ+bs/xr6twAfOceGPLrGcXzatB2kItVfEaVb46K8R8p6asGEZe AWxUJZ6N/1q0MoNTMqcg6oL1vqumgU7hLkdzzdzbkrI/+I8JJzuhpsDjFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS4RWqqb5UalOZRPLdprKvDXIZQMB8GA1UdIwQY MBaAFCd7NoMwfG/MMr7RdyMvHUdFQfuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzkt YWM1MjJmOTU3NTRmLzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzktYWM1MjJmOTU3NTRm LzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2Ibjq9R f5cd46Rluy5QC9ssvXB3vPLPQdlkH9FipwHW6yaYC2i7QlhS03DU6xmF1zSyKat6 gZfCBrE4UjBHON4Yi5Hh8Cga5F0aqzOxHVjda5js3gaXfHLjTQEwGXpqjLvNvCjV u8Ly3PHDe0aDB093NSPCTX5nwcAf+zS2yOo8zFjHMI2bEsxS+RVSOBVf0VGpJbHo R7JqjMUd1ckOi4uNceVZ7OL1iYLKzsZGqlol7IDOd3Kd9MDN77HsoMayoeqaMPWa bVNsZ10rhNwzy6nNXzoZWPwql0AjFbIqxdvS5Cys82yT8Al6OvJh6Vf2UJlxNjBw LMdaY5mVjwNWlQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:54 2026 by rpki-client