This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json) Hash identifier: jFHiUZNMtOQCtWTR1fs31REHLD2HRCcsnkrG8fv15bM= Subject key identifier: 18:84:DE:98:FC:5B:9C:6C:30:64:27:92:AF:FA:D7:E4:3A:E1:F5:F6 Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d Certificate serial: 019C43220375197555E59B92884D89214EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: +XUcs5Rnm49fe8RBvz+mj3r2yAyMQPyZUH+5gSIubRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:03:75:19:75:55:e5:9b:92:88:4d:89:21:4e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=1884de98fc5b9c6c30642792affad7e43ae1f5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:9d:3c:36:55:10:4e:08:a9:bf:58:9a:88: d2:ad:c3:02:d9:9c:5a:e2:6d:da:7d:f1:8b:1c:45: 4f:0d:8b:48:29:ba:ac:cf:b9:16:3c:c3:51:d8:fc: 0d:85:05:2e:1b:ce:d4:29:31:af:5b:ab:04:3b:72: 67:eb:80:9e:81:2d:ed:f9:b5:39:ae:93:7c:55:c5: 45:aa:c1:b2:40:68:97:a1:94:2b:fb:f7:17:c1:4a: 9e:15:37:8b:da:f5:df:4b:ca:46:6b:35:2c:d7:37: 96:28:68:e3:70:52:62:56:9e:00:53:3b:f4:46:8f: bd:cd:2e:cd:5a:bf:d0:e0:69:f0:98:5a:3b:b2:fc: 57:40:fc:bf:96:74:0b:0e:af:b4:17:0d:2c:ef:1d: 30:56:f8:fa:e2:90:c7:45:cd:85:2b:a3:81:d8:6b: f6:e0:58:4a:dd:52:80:b0:69:e9:2c:a4:78:8e:89: 0f:88:fa:02:b0:9d:90:2b:ef:b3:9f:30:0c:30:5f: 72:6f:43:7e:b3:20:ad:49:4e:eb:65:a4:b6:81:e0: 24:62:70:cd:f6:f1:dd:6a:e6:09:43:d9:83:76:ad: 03:ef:fb:ea:ca:18:fa:3b:0e:45:b7:7b:a6:fa:5e: dc:06:47:0a:8f:8e:38:2f:a2:98:96:4e:3a:7d:a6: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:84:DE:98:FC:5B:9C:6C:30:64:27:92:AF:FA:D7:E4:3A:E1:F5:F6 X509v3 Authority Key Identifier: keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:22:2a:1b:79:b0:a9:83:2c:bb:74:0a:c9:09:e5:90:ff:80: c6:f6:1b:b1:1f:c0:e0:62:f0:59:64:2b:9f:24:ed:1b:99:a7: 05:ff:64:23:07:65:63:44:2c:bf:1d:d9:f1:be:13:84:0a:d7: cf:f0:ba:05:b3:73:a4:66:e6:bc:23:5e:49:26:d5:6c:07:63: 10:ea:30:2b:f4:80:ab:3f:dd:b0:02:c2:9c:d1:6a:57:41:a4: 6b:ee:b8:2d:7d:da:f1:8b:6a:0f:41:9c:c5:00:a7:7f:17:38: b6:5f:b3:11:fb:6f:f2:31:59:ea:5b:11:c4:a8:ac:c8:c3:2d: c2:04:62:7f:a4:6c:86:a1:94:92:9b:83:79:d2:46:d1:3d:51: bf:b1:37:1e:78:53:38:b5:79:67:2d:a9:34:61:09:f0:c7:1e: fb:1c:21:a9:a8:8f:45:31:ce:51:26:4a:8d:03:95:c0:e6:37: e0:33:06:87:1d:c0:00:32:b6:bb:56:00:ef:9f:b7:c2:b5:8a: 71:6c:03:26:ce:0e:8c:47:a7:ba:42:49:60:42:32:bf:28:a5: 76:2f:76:76:35:59:ed:3a:bb:de:2e:b7:c9:21:85:79:ce:5e: f6:63:f6:71:ea:8e:3a:7c:8d:0b:38:41:1f:78:9f:61:46:72: 8e:56:11:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgN1GXVV5ZuSiE2JIU6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5 YTRjNWQwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD EygxODg0ZGU5OGZjNWI5YzZjMzA2NDI3OTJhZmZhZDdlNDNhZTFmNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4OdPDZVEE4Iqb9YmojSrcMC2Zxa 4m3affGLHEVPDYtIKbqsz7kWPMNR2PwNhQUuG87UKTGvW6sEO3Jn64CegS3t+bU5 rpN8VcVFqsGyQGiXoZQr+/cXwUqeFTeL2vXfS8pGazUs1zeWKGjjcFJiVp4AUzv0 Ro+9zS7NWr/Q4GnwmFo7svxXQPy/lnQLDq+0Fw0s7x0wVvj64pDHRc2FK6OB2Gv2 4FhK3VKAsGnpLKR4jokPiPoCsJ2QK++znzAMMF9yb0N+syCtSU7rZaS2geAkYnDN 9vHdauYJQ9mDdq0D7/vqyhj6Ow5Ft3um+l7cBkcKj444L6KYlk46fabt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiE3pj8W5xsMGQnkq/61+Q64fX2MB8GA1UdIwQY MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCIqG3mw qYMsu3QKyQnlkP+AxvYbsR/A4GLwWWQrnyTtG5mnBf9kIwdlY0Qsvx3Z8b4ThArX z/C6BbNzpGbmvCNeSSbVbAdjEOowK/SAqz/dsALCnNFqV0Gka+64LX3a8YtqD0Gc xQCnfxc4tl+zEftv8jFZ6lsRxKisyMMtwgRif6RshqGUkpuDedJG0T1Rv7E3HnhT OLV5Zy2pNGEJ8Mce+xwhqaiPRTHOUSZKjQOVwOY34DMGhx3AADK2u1YA75+3wrWK cWwDJs4OjEenukJJYEIyvyildi92djVZ7Tq73i63ySGFec5e9mP2ceqOOnyNCzhB H3ifYUZyjlYRDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:27 2026 by rpki-client