This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft File: jDJOtM17M3hJro0yb8iZAvUDpMY.mft (raw, json) Hash identifier: SJrZqzYOz+/BczGQbDL1Y7nVCfDFooCUzFqP1KgYtTM= Subject key identifier: F1:F1:BB:CD:08:ED:1E:0B:53:5B:3E:57:C7:36:18:96:63:7B:CB:38 Authority key identifier: 8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6 Certificate issuer: /CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6 Certificate serial: 019C42B43942CE13CF2C4BF549DE316447E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft Manifest number: 02C6 Signing time: Mon 09 Feb 2026 14:00:33 +0000 Manifest this update: Mon 09 Feb 2026 14:00:33 +0000 Manifest next update: Tue 10 Feb 2026 14:00:33 +0000 Files and hashes: 1: jDJOtM17M3hJro0yb8iZAvUDpMY.crl (hash: 2qZxRpsJdSo1495M/Arw2Uv6c2udGsKhii/JPKlxAgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:39:42:ce:13:cf:2c:4b:f5:49:de:31:64:47:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6 Validity Not Before: Feb 9 14:00:33 2026 GMT Not After : Feb 10 14:00:33 2026 GMT Subject: CN=f1f1bbcd08ed1e0b535b3e57c7361896637bcb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:c1:7f:5c:84:0d:4a:f6:66:38:e6:2f:d6: 2b:93:81:2b:f7:a3:1d:a7:d1:83:6e:81:a8:d8:dd: b4:f6:c2:62:e5:2c:4c:11:26:60:ec:6a:75:31:30: d7:45:cb:ab:e7:f5:80:d4:21:b0:81:6c:ba:91:f4: b3:ca:ef:d1:c1:63:e5:d7:0f:25:49:f9:e1:db:59: c6:be:3b:2e:00:1c:12:6a:19:05:06:7d:cf:8a:61: ba:97:49:c1:d1:76:c1:5e:6a:ee:cf:90:e2:d3:68: 2b:63:79:8f:9c:c6:01:6f:b2:16:4a:1e:9c:46:f1: fb:2c:2c:4d:04:64:75:c0:53:25:1e:52:aa:18:27: 63:ea:d9:3b:39:33:1d:2e:db:fe:de:a3:53:d1:5b: c3:f6:1b:93:11:bb:36:0f:2d:4c:88:b0:73:e6:fa: e8:86:04:83:35:ef:60:68:61:86:47:c7:61:52:db: e9:22:0c:3d:0a:6f:63:96:7b:b6:44:16:ee:9f:30: c1:e2:fc:c9:b0:5e:bf:ca:2f:f7:37:6a:f3:38:62: 16:aa:81:67:cb:ab:d5:e4:74:c0:fc:7e:05:9e:f3: 2a:20:48:70:8b:a6:a4:3e:2a:d3:a4:11:7b:75:67: f9:b8:52:27:af:ef:93:8d:c0:e9:0d:47:5e:c9:f3: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F1:BB:CD:08:ED:1E:0B:53:5B:3E:57:C7:36:18:96:63:7B:CB:38 X509v3 Authority Key Identifier: keyid:8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f6:a6:74:2f:00:68:d9:63:1a:b9:93:c3:25:d7:06:65:f2: 9e:91:85:f4:60:80:a9:3f:63:0b:3f:a1:38:ca:63:c7:3c:5e: 75:49:68:24:17:89:73:86:6d:00:b6:76:0d:f9:21:ff:ea:b8: 35:0a:39:27:66:0f:38:73:75:73:be:92:77:8b:6f:5c:9b:e7: 3a:23:ae:d2:49:3d:20:a9:6e:6f:d2:e8:44:94:b5:cf:48:22: e8:a3:a1:99:a5:a4:78:ac:ac:0d:fe:fc:2b:97:a0:0e:0f:9b: 69:8f:f6:b0:c0:dd:4c:f1:fd:6a:8a:e8:20:ce:0d:c4:61:02: e4:db:fa:a9:7c:7d:ad:52:4e:4b:b3:87:64:53:a0:80:e1:2c: 97:5e:09:f5:f6:5b:95:3a:1d:d4:f2:76:3e:8b:eb:8b:1f:d7: b3:fc:cf:83:1d:58:10:d4:99:57:cc:f7:31:10:c4:03:77:11: e9:4a:40:03:67:fc:b0:8e:57:39:57:85:b6:96:85:94:ac:bf: 9e:69:2a:59:7a:9a:1e:3b:e6:2d:45:b5:af:97:57:d5:97:35: 53:20:22:9b:c6:7e:27:8f:df:18:2d:26:01:02:1a:0e:f5:87: e7:d1:51:a4:8d:10:2f:49:94:a5:d0:f0:6e:77:bf:9e:ee:b0: 53:7a:27:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDlCzhPPLEv1Sd4xZEfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzI0ZWI0Y2Q3YjMzNzg0OWFlOGQzMjZmYzg5OTAyZjUw M2E0YzYwHhcNMjYwMjA5MTQwMDMzWhcNMjYwMjEwMTQwMDMzWjAzMTEwLwYDVQQD EyhmMWYxYmJjZDA4ZWQxZTBiNTM1YjNlNTdjNzM2MTg5NjYzN2JjYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtITBf1yEDUr2ZjjmL9Yrk4Er96Md p9GDboGo2N209sJi5SxMESZg7Gp1MTDXRcur5/WA1CGwgWy6kfSzyu/RwWPl1w8l Sfnh21nGvjsuABwSahkFBn3PimG6l0nB0XbBXmruz5Di02grY3mPnMYBb7IWSh6c RvH7LCxNBGR1wFMlHlKqGCdj6tk7OTMdLtv+3qNT0VvD9huTEbs2Dy1MiLBz5vro hgSDNe9gaGGGR8dhUtvpIgw9Cm9jlnu2RBbunzDB4vzJsF6/yi/3N2rzOGIWqoFn y6vV5HTA/H4FnvMqIEhwi6akPirTpBF7dWf5uFInr++TjcDpDUdeyfNHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHxu80I7R4LU1s+V8c2GJZje8s4MB8GA1UdIwQY MBaAFIwyTrTNezN4Sa6NMm/ImQL1A6TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRKT3RNMTdNM2hKcm8weWI4aVpBdlVEcE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmYyOTMtNWYwYS00N2U3LTk4NzQt MTM5NjM2YjFlMjYzLzEvakRKT3RNMTdNM2hKcm8weWI4aVpBdlVEcE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yYmYyOTMtNWYwYS00N2U3LTk4NzQtMTM5NjM2YjFlMjYz LzEvakRKT3RNMTdNM2hKcm8weWI4aVpBdlVEcE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPamdC8A aNljGrmTwyXXBmXynpGF9GCAqT9jCz+hOMpjxzxedUloJBeJc4ZtALZ2Dfkh/+q4 NQo5J2YPOHN1c76Sd4tvXJvnOiOu0kk9IKlub9LoRJS1z0gi6KOhmaWkeKysDf78 K5egDg+baY/2sMDdTPH9aoroIM4NxGEC5Nv6qXx9rVJOS7OHZFOggOEsl14J9fZb lTod1PJ2Povrix/Xs/zPgx1YENSZV8z3MRDEA3cR6UpAA2f8sI5XOVeFtpaFlKy/ nmkqWXqaHjvmLUW1r5dX1Zc1UyAim8Z+J4/fGC0mAQIaDvWH59FRpI0QL0mUpdDw bne/nu6wU3onqw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:22 2026 by rpki-client