This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json) Hash identifier: Py1F+JNx1QN/p9r0BMuAHsuS+I+lZvbnnJf1XEDSfAI= Subject key identifier: EC:EC:82:42:51:5B:08:C5:EE:7A:D9:FA:4A:0A:C6:C6:1F:C0:81:16 Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c Certificate serial: 019C427E100C6B00126B7F9AC9118B77054E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft Manifest number: 0361 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: LvSQcyk8R3eJQ7BDekTbq4E9VGn6U1e3k4i0v8y5ebA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:10:0c:6b:00:12:6b:7f:9a:c9:11:8b:77:05:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a021d2587342c49453f151342208c8de944f2c Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=ecec8242515b08c5ee7ad9fa4a0ac6c61fc08116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:d7:b4:74:f8:a9:f9:a1:e0:9f:0e:5e:7a: 89:53:f0:e4:ec:22:a4:c0:05:f1:c1:40:40:98:43: 29:b4:00:2c:9f:f7:da:19:a8:a3:1d:78:67:dc:7f: 3b:a2:37:00:40:fb:b4:de:c9:4e:e8:7a:cb:e8:e7: 56:8f:9b:37:53:1c:58:b2:fe:d6:17:b1:67:5f:cc: d1:52:20:58:e8:f0:e7:7b:ce:c9:98:b4:36:52:41: ad:86:bd:e5:c8:b8:11:f3:5a:f8:4b:6b:29:47:3d: 97:0d:04:91:f6:76:5d:7e:0b:a1:e3:93:43:92:0b: 23:57:ae:0d:eb:12:47:37:eb:aa:55:22:cb:da:0c: 14:e4:0b:65:12:f5:69:8e:59:40:48:d8:f4:d5:d4: f2:58:8c:1a:35:e9:45:80:f3:91:b4:3d:aa:02:67: 0b:13:a7:a5:9f:85:da:0b:84:0a:b8:c3:e2:6a:5c: 4d:66:c3:27:5f:1b:e2:4e:8e:16:9e:33:52:0e:9e: 18:81:1f:08:cc:f4:01:de:ab:ce:0c:90:a7:28:85: db:69:df:e6:f1:87:3a:fe:39:f7:43:26:ee:5f:51: 04:67:c0:4d:b3:a9:6f:85:9e:17:a7:34:3a:32:d3: 8f:e7:56:f3:86:51:d2:13:e8:fc:db:ae:2b:ad:f3: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EC:82:42:51:5B:08:C5:EE:7A:D9:FA:4A:0A:C6:C6:1F:C0:81:16 X509v3 Authority Key Identifier: keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a6:e7:1e:26:a6:53:42:4b:2c:53:1c:a2:00:32:d8:67:54: 18:6e:62:1e:3b:58:50:e1:de:f8:40:d2:22:c8:4e:64:b0:1f: ef:eb:b7:3e:2f:ec:3e:bd:e1:6b:55:14:49:a4:0d:be:e0:6e: 8c:7e:8b:4c:1c:99:23:ef:ca:2c:a9:f1:00:8f:3d:cc:a5:c6: e8:87:d9:d0:19:e3:98:dc:f0:2b:35:13:c1:df:d7:65:9f:03: 2a:d3:78:1a:78:52:8d:81:79:0b:eb:a9:d2:6f:15:81:4f:b6: 8a:c4:d5:f0:7e:47:fe:28:c1:3b:54:92:44:a0:ff:af:0b:af: 5c:64:b0:7c:5e:a8:5a:5b:68:a7:4c:42:da:57:a8:f4:97:a6: 88:6e:96:38:43:3d:3c:59:a7:b6:8d:9b:0a:09:c2:8e:bd:4b: 23:83:a6:0c:ce:e7:e7:b3:2c:b8:b6:74:8d:e3:55:7f:8b:65: 86:4b:f3:d7:11:c9:56:42:6a:0a:30:cf:52:b2:17:11:c6:8a: 5f:7e:b8:ad:54:21:31:69:30:88:2d:e8:7a:29:66:a0:95:04: f5:d1:1e:8c:06:1d:c4:88:8b:46:23:5b:68:a7:0c:13:fb:b4: 30:03:71:29:46:cd:28:6f:03:f5:84:8b:a1:f4:8c:b3:4b:f1: 6c:c4:6d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhAMawASa3+ayRGLdwVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTAyMWQyNTg3MzQyYzQ5NDUzZjE1MTM0MjIwOGM4ZGU5 NDRmMmMwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EyhlY2VjODI0MjUxNWIwOGM1ZWU3YWQ5ZmE0YTBhYzZjNjFmYzA4MTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCbXtHT4qfmh4J8OXnqJU/Dk7CKk wAXxwUBAmEMptAAsn/faGaijHXhn3H87ojcAQPu03slO6HrL6OdWj5s3UxxYsv7W F7FnX8zRUiBY6PDne87JmLQ2UkGthr3lyLgR81r4S2spRz2XDQSR9nZdfguh45ND kgsjV64N6xJHN+uqVSLL2gwU5AtlEvVpjllASNj01dTyWIwaNelFgPORtD2qAmcL E6eln4XaC4QKuMPialxNZsMnXxviTo4WnjNSDp4YgR8IzPQB3qvODJCnKIXbad/m 8Yc6/jn3QybuX1EEZ8BNs6lvhZ4XpzQ6MtOP51bzhlHSE+j8264rrfP9FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzsgkJRWwjF7nrZ+koKxsYfwIEWMB8GA1UdIwQY MBaAFCagIdJYc0LElFPxUTQiCMjelE8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQt NGEzM2JmNTE4MDFlLzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQtNGEzM2JmNTE4MDFl LzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6bnHiam U0JLLFMcogAy2GdUGG5iHjtYUOHe+EDSIshOZLAf7+u3Pi/sPr3ha1UUSaQNvuBu jH6LTByZI+/KLKnxAI89zKXG6IfZ0BnjmNzwKzUTwd/XZZ8DKtN4GnhSjYF5C+up 0m8VgU+2isTV8H5H/ijBO1SSRKD/rwuvXGSwfF6oWltop0xC2leo9JemiG6WOEM9 PFmnto2bCgnCjr1LI4OmDM7n57MsuLZ0jeNVf4tlhkvz1xHJVkJqCjDPUrIXEcaK X364rVQhMWkwiC3oeilmoJUE9dEejAYdxIiLRiNbaKcME/u0MANxKUbNKG8D9YSL ofSMs0vxbMRtTA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:14 2026 by rpki-client