This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json) Hash identifier: cJ9I4K0qamZyg9dGazlUPZMKeRBAMNUnqCZLP+zJ0jc= Subject key identifier: 38:BA:3C:8D:29:D9:1C:CA:8F:8B:91:04:3D:A2:FE:5C:36:60:0C:0E Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27 Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27 Certificate serial: 019C4390C291EB88506FBFFC2F44CEFCD157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 18:01:26 +0000 Manifest this update: Mon 09 Feb 2026 18:01:26 +0000 Manifest next update: Tue 10 Feb 2026 18:01:26 +0000 Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: Ly4na3t0fU8dDp3mGuirkjGMho8sBiDFUgowtKE4Ark=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c2:91:eb:88:50:6f:bf:fc:2f:44:ce:fc:d1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27 Validity Not Before: Feb 9 18:01:26 2026 GMT Not After : Feb 10 18:01:26 2026 GMT Subject: CN=38ba3c8d29d91cca8f8b91043da2fe5c36600c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:05:91:33:97:65:83:d7:28:dd:40:fe:03: 18:92:6e:82:47:1a:45:cc:21:fb:8f:a1:2a:74:7a: 70:8f:55:31:20:a0:73:fa:f2:0a:6d:23:3c:3e:07: 6d:23:51:c7:15:61:5b:31:df:f9:da:16:e8:dd:1c: 1c:86:18:02:70:64:8b:09:32:ad:77:4b:b1:5c:9b: f9:ad:ca:4f:da:98:a9:62:d8:bb:c2:24:9b:60:2a: eb:5d:c2:90:34:47:d0:24:c3:77:b9:59:b2:1d:d8: 9a:5a:f8:5a:1e:61:9c:67:6f:de:fc:73:9f:00:8d: f2:62:4a:e3:69:93:c1:c3:98:71:45:22:46:30:e5: e9:da:c6:15:f7:bf:e0:41:0c:55:d5:65:76:25:11: 3e:4a:3d:70:52:12:ab:24:eb:3f:a0:8e:30:18:8f: 77:0b:a4:97:15:89:5f:cc:72:ff:6c:c3:48:8e:2b: 83:1a:bc:7d:26:f5:d6:b9:08:45:c6:24:42:cf:4e: b8:1a:97:1a:30:78:55:c4:22:32:b3:ee:79:50:0c: 39:f5:dd:4a:1d:95:ec:05:01:fe:07:fe:79:b2:c3: 75:68:ad:52:29:d0:34:a6:0e:fe:c1:26:b2:7c:75: da:bf:6f:d2:b3:f0:0d:e2:08:3b:f5:0c:20:27:ac: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BA:3C:8D:29:D9:1C:CA:8F:8B:91:04:3D:A2:FE:5C:36:60:0C:0E X509v3 Authority Key Identifier: keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:18:ac:5d:9a:3e:bd:b4:3d:56:16:aa:92:80:a4:7a:ab: a1:5e:da:0d:64:71:68:1a:ed:6b:34:3b:18:89:99:7d:a5:f1: 81:fa:69:7b:bd:8a:ff:4b:ac:bd:63:f7:b5:d9:f5:11:91:29: d7:77:5b:7b:84:fa:74:a6:ec:3d:12:fc:36:b8:2f:b3:09:6c: cd:e2:d8:ef:63:20:c1:c8:1b:9f:1a:80:cd:4a:8f:68:89:ae: 42:6c:fc:68:98:eb:9a:45:22:01:41:92:ef:6d:4d:e5:fe:1e: e0:34:07:23:75:94:52:12:f1:3a:af:59:5f:15:de:e0:79:2f: 73:2a:6b:cf:49:4c:70:80:74:be:b2:e3:bc:00:70:59:97:01: 97:b8:82:e9:8c:40:60:1e:90:49:cb:37:d4:f8:99:cd:d5:db: 08:52:89:b5:77:a5:2e:6f:f6:60:ff:49:88:00:7e:f1:1b:06: 95:ef:24:f0:38:1b:41:f1:74:01:53:fc:06:2e:e8:8d:36:89: 27:a0:db:79:12:8b:12:e4:84:16:0b:03:60:f4:7b:70:ac:8c: 72:f9:5e:9c:66:93:9e:50:f6:aa:e2:80:5a:08:91:df:e2:fa: 11:3b:91:06:8a:38:6f:23:44:0a:80:db:89:4e:a0:d5:2b:6a: ed:41:a9:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMKR64hQb7/8L0TO/NFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTYwODYxYjc5ZjRlYWI1MDc0MDgzNzhiYTkwODdjYzFl NDRlMjcwHhcNMjYwMjA5MTgwMTI2WhcNMjYwMjEwMTgwMTI2WjAzMTEwLwYDVQQD EygzOGJhM2M4ZDI5ZDkxY2NhOGY4YjkxMDQzZGEyZmU1YzM2NjAwYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw90FkTOXZYPXKN1A/gMYkm6CRxpF zCH7j6EqdHpwj1UxIKBz+vIKbSM8PgdtI1HHFWFbMd/52hbo3RwchhgCcGSLCTKt d0uxXJv5rcpP2pipYti7wiSbYCrrXcKQNEfQJMN3uVmyHdiaWvhaHmGcZ2/e/HOf AI3yYkrjaZPBw5hxRSJGMOXp2sYV97/gQQxV1WV2JRE+Sj1wUhKrJOs/oI4wGI93 C6SXFYlfzHL/bMNIjiuDGrx9JvXWuQhFxiRCz064GpcaMHhVxCIys+55UAw59d1K HZXsBQH+B/55ssN1aK1SKdA0pg7+wSayfHXav2/Ss/AN4gg79QwgJ6zEHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi6PI0p2RzKj4uRBD2i/lw2YAwOMB8GA1UdIwQY MBaAFCWWCGG3n06rUHQIN4upCHzB5E4nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUt N2E5MDRmMjBmNTNjLzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUtN2E5MDRmMjBmNTNj LzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa4YrF2a Pr20PVYWqpKApHqroV7aDWRxaBrtazQ7GImZfaXxgfppe72K/0usvWP3tdn1EZEp 13dbe4T6dKbsPRL8NrgvswlszeLY72MgwcgbnxqAzUqPaImuQmz8aJjrmkUiAUGS 721N5f4e4DQHI3WUUhLxOq9ZXxXe4Hkvcyprz0lMcIB0vrLjvABwWZcBl7iC6YxA YB6QScs31PiZzdXbCFKJtXelLm/2YP9JiAB+8RsGle8k8DgbQfF0AVP8Bi7ojTaJ J6DbeRKLEuSEFgsDYPR7cKyMcvlenGaTnlD2quKAWgiR3+L6ETuRBoo4byNECoDb iU6g1Stq7UGpAA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:35 2026 by rpki-client