This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json) Hash identifier: nFZMHws1LpuHVNOaaeU7+YYTQgrv7t+xcJycH2huMuY= Subject key identifier: 79:D9:67:74:83:A8:BD:33:28:D5:B1:26:8B:EC:9A:A7:1D:1B:13:76 Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade Certificate serial: 019C424664D2252260253C298BC34E54CB2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft Manifest number: 060F Signing time: Mon 09 Feb 2026 12:00:35 +0000 Manifest this update: Mon 09 Feb 2026 12:00:35 +0000 Manifest next update: Tue 10 Feb 2026 12:00:35 +0000 Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: 1Ko0BGFfqFEqcPUC0iVjcZ+52gMgIfq4FEUKF6GWgVc=) 2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:64:d2:25:22:60:25:3c:29:8b:c3:4e:54:cb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade Validity Not Before: Feb 9 12:00:35 2026 GMT Not After : Feb 10 12:00:35 2026 GMT Subject: CN=79d9677483a8bd3328d5b1268bec9aa71d1b1376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:e3:49:76:b3:08:a4:91:c3:74:39:2b:bf: 62:15:0a:c3:5f:2c:31:78:2c:61:41:11:92:15:92: f8:38:4d:0f:ea:4f:3b:2e:83:b2:fd:41:7d:9c:ac: 8a:f3:bb:ab:e7:02:7c:1c:66:2f:e7:ec:ec:a6:c1: 6b:87:19:86:9a:6c:34:36:ee:b1:ec:fb:11:85:e1: 66:bd:b0:cd:d7:72:d6:c5:56:2d:09:55:bc:0a:f6: 5b:54:21:62:31:47:60:97:a4:e6:26:d6:4d:86:98: 8d:76:61:51:51:ca:56:5c:00:dd:b9:aa:8d:a2:5a: 8d:a2:17:d4:6f:e7:8c:fd:b1:61:92:19:de:37:c4: dd:96:92:88:d4:88:87:8d:78:bb:4f:e7:ab:ff:7a: 3c:63:01:30:70:e9:7f:c0:06:6f:87:15:25:78:df: e0:fe:57:50:62:71:fc:11:6e:a3:4f:4b:d1:2c:f9: a0:55:3a:f4:08:1f:cf:18:f5:5c:90:67:99:85:78: 10:a7:66:64:ee:1f:8c:32:05:dd:f7:35:38:fc:c7: 0e:a0:2b:a7:d1:ac:a9:0c:0e:69:10:b2:5b:68:5e: d1:f9:b7:62:aa:2d:dd:16:d7:68:7c:48:91:17:cf: 09:df:2a:fb:66:85:5d:d0:7d:0c:57:27:6e:36:fb: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D9:67:74:83:A8:BD:33:28:D5:B1:26:8B:EC:9A:A7:1D:1B:13:76 X509v3 Authority Key Identifier: keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:4d:4d:c0:de:52:a0:7b:b9:fc:02:6e:0a:09:75:fe:72: 95:d1:49:bf:dd:98:90:f4:d7:4c:93:63:ea:7e:63:e8:d0:32: 41:d3:15:f8:9f:f9:9d:a2:d0:77:66:cf:79:21:a8:62:66:fa: 24:65:f9:55:fb:16:7a:fa:47:28:75:20:14:99:1e:cc:0c:f0: 81:93:29:1d:53:f6:51:8b:ff:a7:d1:ac:62:ee:c0:e6:04:ce: 56:c0:22:08:7d:3e:53:e9:04:b2:fd:88:81:e4:d8:f7:94:39: 58:74:2c:0e:dc:df:32:09:10:86:b1:05:30:82:96:9b:ba:1a: 1d:af:cc:93:27:16:f1:dd:ae:92:51:08:98:da:0c:85:82:cc: d3:72:76:1c:4a:2b:88:15:81:f0:45:20:e4:70:a1:74:11:64: ba:32:a2:4c:c4:4e:eb:dd:3f:91:20:80:2b:eb:9f:d4:d1:93: 1c:ba:e1:15:91:34:28:55:be:ea:35:57:e2:65:7e:d4:c5:e0: a2:f1:75:42:cb:55:d7:b4:f5:ab:a7:7d:2a:00:0f:99:cb:b7: 1b:eb:7b:70:86:3e:0a:21:6b:e3:b7:98:05:5e:42:76:ab:56: f7:54:72:9d:64:5e:6d:5d:80:0e:70:ff:fb:f0:9d:40:f1:ab: 99:a8:1b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmTSJSJgJTwpi8NOVMsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTFjNTExMGUwZTkwMzAyZTQ3MDEyZmY1YzgyMzAzYTQ2 NjFhZGUwHhcNMjYwMjA5MTIwMDM1WhcNMjYwMjEwMTIwMDM1WjAzMTEwLwYDVQQD Eyg3OWQ5Njc3NDgzYThiZDMzMjhkNWIxMjY4YmVjOWFhNzFkMWIxMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTTjSXazCKSRw3Q5K79iFQrDXywx eCxhQRGSFZL4OE0P6k87LoOy/UF9nKyK87ur5wJ8HGYv5+zspsFrhxmGmmw0Nu6x 7PsRheFmvbDN13LWxVYtCVW8CvZbVCFiMUdgl6TmJtZNhpiNdmFRUcpWXADduaqN olqNohfUb+eM/bFhkhneN8TdlpKI1IiHjXi7T+er/3o8YwEwcOl/wAZvhxUleN/g /ldQYnH8EW6jT0vRLPmgVTr0CB/PGPVckGeZhXgQp2Zk7h+MMgXd9zU4/McOoCun 0aypDA5pELJbaF7R+bdiqi3dFtdofEiRF88J3yr7ZoVd0H0MVyduNvuPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnZZ3SDqL0zKNWxJovsmqcdGxN2MB8GA1UdIwQY MBaAFCThxREODpAwLkcBL/XIIwOkZhreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYt NjdkYTU0MDkxMTZmLzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYtNjdkYTU0MDkxMTZm LzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNRNTcDe UqB7ufwCbgoJdf5yldFJv92YkPTXTJNj6n5j6NAyQdMV+J/5naLQd2bPeSGoYmb6 JGX5VfsWevpHKHUgFJkezAzwgZMpHVP2UYv/p9GsYu7A5gTOVsAiCH0+U+kEsv2I geTY95Q5WHQsDtzfMgkQhrEFMIKWm7oaHa/MkycW8d2uklEImNoMhYLM03J2HEor iBWB8EUg5HChdBFkujKiTMRO690/kSCAK+uf1NGTHLrhFZE0KFW+6jVX4mV+1MXg ovF1QstV17T1q6d9KgAPmcu3G+t7cIY+CiFr47eYBV5CdqtW91RynWRebV2ADnD/ +/CdQPGrmagb7w== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:06 2026 by rpki-client