This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json) Hash identifier: yCz2SuzhApcpexQJt7kaqQmvQq/UVWyfI4f2K+bsgAE= Subject key identifier: AA:8F:E8:F4:10:55:97:61:A5:76:3B:E7:AF:27:AA:C7:13:9C:DC:8A Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9 Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9 Certificate serial: 019C41D86BA167DA7213B3850B51D0001AC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft Manifest number: 023B Signing time: Mon 09 Feb 2026 10:00:28 +0000 Manifest this update: Mon 09 Feb 2026 10:00:28 +0000 Manifest next update: Tue 10 Feb 2026 10:00:28 +0000 Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: MRGs89ONmA+9pCaq9TOckuGIgEf08thNkyK2I4TT3TU=) 2: ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa (hash: VCOZaoQKdaHYdzLeM6vy+vaxjALR2cSdXmffmC82vmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:6b:a1:67:da:72:13:b3:85:0b:51:d0:00:1a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265649691591e552a14889439cff70de56c08da9 Validity Not Before: Feb 9 10:00:28 2026 GMT Not After : Feb 10 10:00:28 2026 GMT Subject: CN=aa8fe8f410559761a5763be7af27aac7139cdc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:80:71:8f:63:83:9c:03:94:11:64:67:78: 48:06:6e:0e:53:7e:ff:f7:e1:46:22:9a:d3:1a:2a: cb:8c:44:03:57:aa:77:1e:6f:bd:34:44:db:46:fc: bc:5d:93:3d:c8:dc:c6:74:f3:86:b1:ad:44:a8:74: 0a:69:23:51:a0:bd:ce:70:67:8d:d6:cf:1b:35:ec: 59:48:c8:9f:c1:2f:25:63:10:93:e9:af:22:d7:aa: b6:a7:33:2a:f9:fd:e3:ee:e6:a7:35:c8:d4:61:58: f3:c5:1b:44:7a:b6:51:ac:43:ba:9e:39:4f:aa:63: eb:44:de:b9:db:ee:1d:88:5d:87:39:5c:b2:27:fb: 33:ba:4f:8f:47:96:3d:4e:47:d8:10:2d:97:b0:93: 78:e2:2e:a8:00:86:99:ca:e2:48:bb:43:48:ee:bc: 61:7c:c6:70:b0:2a:6d:68:d8:b1:9b:28:0b:fa:b6: 16:20:46:4c:e4:86:84:a8:14:d3:ed:42:db:fd:55: c7:d2:76:ad:da:97:6b:34:47:2f:72:03:c9:e4:a1: 3e:99:9a:ac:c5:a8:6a:12:c2:7f:bf:e6:a2:7d:b7: 11:82:2e:fe:88:1c:e3:21:6e:da:70:a6:d7:7e:1f: fd:68:1a:d8:da:70:a0:1d:5e:95:81:58:98:80:f3: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8F:E8:F4:10:55:97:61:A5:76:3B:E7:AF:27:AA:C7:13:9C:DC:8A X509v3 Authority Key Identifier: keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:da:aa:67:d6:7f:51:97:6c:b0:ac:ce:89:b2:b3:e9:0f:3a: 61:49:95:82:a2:18:b2:80:16:fb:9a:78:69:95:b5:70:23:16: 21:b4:72:a4:75:68:88:e8:5e:07:87:51:3f:cd:cd:23:ce:5a: c7:48:19:43:90:2c:26:8b:70:28:db:d0:0f:45:b3:a5:94:d7: 04:4b:97:4a:2b:80:01:94:b1:ed:54:c5:9e:7d:5c:37:66:9f: 08:20:ed:fa:f4:39:15:e3:ea:3a:e0:e2:4b:5c:ac:43:17:a0: 7a:b9:ef:0d:25:81:6b:37:78:eb:54:4a:3f:af:27:85:9a:c8: e2:ee:28:0a:85:0b:cf:c9:11:a8:49:04:6f:63:5d:9e:c5:4c: 8e:33:29:aa:a0:7c:28:b7:c0:39:fa:03:6d:b1:d1:69:e2:dc: dc:38:c4:9e:7c:95:fb:cb:0b:73:cb:6e:5e:65:94:c2:b6:42: 44:17:40:00:77:04:2f:7a:74:f1:18:f6:83:f5:78:19:9e:5d: 88:5a:9a:79:1d:06:ec:ba:70:a4:7f:d5:b6:7d:3b:36:86:c8: 21:5c:cd:9b:75:8b:5e:01:4c:8b:2f:82:d2:86:38:be:4f:48: a9:3b:ef:b2:33:02:1e:cc:20:08:ca:71:fc:d8:06:9c:c4:ad: 4f:f9:77:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GuhZ9pyE7OFC1HQABrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTY0OTY5MTU5MWU1NTJhMTQ4ODk0MzljZmY3MGRlNTZj MDhkYTkwHhcNMjYwMjA5MTAwMDI4WhcNMjYwMjEwMTAwMDI4WjAzMTEwLwYDVQQD EyhhYThmZThmNDEwNTU5NzYxYTU3NjNiZTdhZjI3YWFjNzEzOWNkYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5GAcY9jg5wDlBFkZ3hIBm4OU37/ 9+FGIprTGirLjEQDV6p3Hm+9NETbRvy8XZM9yNzGdPOGsa1EqHQKaSNRoL3OcGeN 1s8bNexZSMifwS8lYxCT6a8i16q2pzMq+f3j7uanNcjUYVjzxRtEerZRrEO6njlP qmPrRN652+4diF2HOVyyJ/szuk+PR5Y9TkfYEC2XsJN44i6oAIaZyuJIu0NI7rxh fMZwsCptaNixmygL+rYWIEZM5IaEqBTT7ULb/VXH0nat2pdrNEcvcgPJ5KE+mZqs xahqEsJ/v+aifbcRgi7+iBzjIW7acKbXfh/9aBrY2nCgHV6VgViYgPP17wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqP6PQQVZdhpXY7568nqscTnNyKMB8GA1UdIwQY MBaAFCZWSWkVkeVSoUiJQ5z/cN5WwI2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTct MTIxMDA5NGE0OGEzLzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTctMTIxMDA5NGE0OGEz LzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9qqZ9Z/ UZdssKzOibKz6Q86YUmVgqIYsoAW+5p4aZW1cCMWIbRypHVoiOheB4dRP83NI85a x0gZQ5AsJotwKNvQD0WzpZTXBEuXSiuAAZSx7VTFnn1cN2afCCDt+vQ5FePqOuDi S1ysQxegernvDSWBazd461RKP68nhZrI4u4oCoULz8kRqEkEb2NdnsVMjjMpqqB8 KLfAOfoDbbHRaeLc3DjEnnyV+8sLc8tuXmWUwrZCRBdAAHcEL3p08Rj2g/V4GZ5d iFqaeR0G7LpwpH/Vtn07NobIIVzNm3WLXgFMiy+C0oY4vk9IqTvvsjMCHswgCMpx /NgGnMStT/l3ow== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:23 2026 by rpki-client