This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json) Hash identifier: fRKgx3GG6xdjHBjOA1xyOdPb/JPqBsSeFHJGZEFCkpM= Subject key identifier: 58:B3:B8:A1:96:4E:95:B0:99:06:4D:97:0E:16:96:9B:EC:8A:4A:B6 Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17 Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117 Certificate serial: 019C4321F777D614284A75FA9C4387195EF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:25 +0000 Manifest this update: Mon 09 Feb 2026 16:00:25 +0000 Manifest next update: Tue 10 Feb 2026 16:00:25 +0000 Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: B8fXM8e2bfJhlffRYYTuK0XtYmcKV9Jr67gnxKBpzNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f7:77:d6:14:28:4a:75:fa:9c:43:87:19:5e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117 Validity Not Before: Feb 9 16:00:25 2026 GMT Not After : Feb 10 16:00:25 2026 GMT Subject: CN=58b3b8a1964e95b099064d970e16969bec8a4ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:d9:01:bd:7b:b4:f8:0e:58:7e:7d:59:f9: e3:41:c1:d6:43:0f:3a:c5:a4:7f:5b:f7:6a:f2:d4: c6:f2:47:8c:33:60:9c:fa:95:22:e5:93:5d:15:8d: 9f:95:1b:e0:0b:48:fa:88:ab:df:01:8f:c0:52:16: 21:0a:8d:dd:f9:0a:b7:47:3f:41:6e:68:c8:69:b2: 7c:31:f2:8c:72:c4:08:b8:9e:b6:0e:88:3b:ae:61: f0:c9:13:67:ba:b4:db:cc:9b:73:53:97:94:8d:00: cb:71:ba:17:84:58:03:e6:b6:e1:df:92:f6:98:7c: 66:90:69:7f:60:27:5f:7c:1d:a2:7b:0d:99:4a:be: 4b:82:bc:15:fc:36:58:f7:e6:47:38:f3:76:7c:68: c8:1d:25:8e:18:c5:62:d5:ae:59:65:e1:c6:c8:98: 9a:ce:77:c7:a5:78:e7:e4:08:d4:e4:18:27:22:74: 07:78:21:cc:7a:90:79:21:be:a7:e0:36:88:c1:bc: 58:10:d8:b4:15:01:8d:d3:cc:97:78:9c:16:86:ae: 1e:ce:d7:d4:fd:68:3e:04:11:6e:56:0c:4d:cb:d2: 0b:b0:5d:99:bb:e8:fc:6e:2d:a0:d0:e3:82:8d:41: f7:fb:db:ba:38:c4:e7:dd:8f:2e:ad:0a:e8:14:a9: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B3:B8:A1:96:4E:95:B0:99:06:4D:97:0E:16:96:9B:EC:8A:4A:B6 X509v3 Authority Key Identifier: keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:82:c1:f2:21:b8:6d:70:7f:e6:15:3e:2b:e4:d6:58:db:00: e0:13:3f:8e:eb:43:d5:09:35:73:6e:d2:d7:2a:49:8a:4a:ab: c8:eb:90:93:0a:8b:4e:31:36:c3:71:13:15:ee:b7:05:cf:cd: 7f:27:0b:70:9f:8c:e9:6e:ed:95:7d:8f:32:02:0b:89:f5:a4: 2b:64:32:f7:dd:6a:ae:51:a7:98:d4:c5:48:f2:1a:c4:ea:13: 74:ce:d1:36:f1:44:c9:a0:d4:d0:c3:61:12:d6:a3:f8:8d:c2: 1d:ec:0c:1d:6a:82:58:95:6a:8a:0b:b2:38:b3:a7:32:63:94: 1a:10:53:87:ab:f1:d1:42:f3:1b:b8:12:0e:4c:fb:cd:7f:7e: 79:28:03:c0:e7:22:46:30:09:a8:b1:34:59:6a:75:d0:69:02: 26:52:54:7e:fd:3f:fa:dd:96:80:ac:ad:81:50:33:22:b6:2e: 87:7a:ec:24:d8:49:b2:19:9f:4c:ee:72:3c:80:50:d1:67:3d: 8f:e1:a7:b5:f8:63:91:7f:e4:29:12:74:12:03:5d:54:6c:c7: 45:03:f4:2f:a6:d4:20:95:13:1a:1e:d8:5d:48:ff:38:60:fb: a9:13:04:3d:85:3f:44:3c:4a:b6:49:15:56:25:3b:21:96:2c: 63:22:d2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfd31hQoSnX6nEOHGV73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzUwMzVkZDM2ZGYwNzQ5ZjRkNjI5OWM4ZmNiZWQ2MTU1 YzAxMTcwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD Eyg1OGIzYjhhMTk2NGU5NWIwOTkwNjRkOTcwZTE2OTY5YmVjOGE0YWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcbZAb17tPgOWH59WfnjQcHWQw86 xaR/W/dq8tTG8keMM2Cc+pUi5ZNdFY2flRvgC0j6iKvfAY/AUhYhCo3d+Qq3Rz9B bmjIabJ8MfKMcsQIuJ62Dog7rmHwyRNnurTbzJtzU5eUjQDLcboXhFgD5rbh35L2 mHxmkGl/YCdffB2iew2ZSr5LgrwV/DZY9+ZHOPN2fGjIHSWOGMVi1a5ZZeHGyJia znfHpXjn5AjU5BgnInQHeCHMepB5Ib6n4DaIwbxYENi0FQGN08yXeJwWhq4eztfU /Wg+BBFuVgxNy9ILsF2Zu+j8bi2g0OOCjUH3+9u6OMTn3Y8urQroFKm+wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFizuKGWTpWwmQZNlw4Wlpvsikq2MB8GA1UdIwQY MBaAFCXFA13TbfB0n01imcj8vtYVXAEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84MDljZDUtZjIzZi00NzIwLThjNjQt NTllYjM4NGUwOTY3LzEvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84MDljZDUtZjIzZi00NzIwLThjNjQtNTllYjM4NGUwOTY3 LzEvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYLB8iG4 bXB/5hU+K+TWWNsA4BM/jutD1Qk1c27S1ypJikqryOuQkwqLTjE2w3ETFe63Bc/N fycLcJ+M6W7tlX2PMgILifWkK2Qy991qrlGnmNTFSPIaxOoTdM7RNvFEyaDU0MNh Etaj+I3CHewMHWqCWJVqiguyOLOnMmOUGhBTh6vx0ULzG7gSDkz7zX9+eSgDwOci RjAJqLE0WWp10GkCJlJUfv0/+t2WgKytgVAzIrYuh3rsJNhJshmfTO5yPIBQ0Wc9 j+GntfhjkX/kKRJ0EgNdVGzHRQP0L6bUIJUTGh7YXUj/OGD7qRMEPYU/RDxKtkkV ViU7IZYsYyLS/w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:54 2026 by rpki-client