This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json) Hash identifier: kXlTCiuwDtXaAjGt2gotLmCfyjGoEjDMTBv14A/RNVU= Subject key identifier: 81:0F:CB:DC:79:25:A1:BB:DC:DA:A2:D9:46:69:4E:D9:28:1B:6D:D8 Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc Certificate serial: 019C421000F3427DE13CDB859D658D70211F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft Manifest number: 0A22 Signing time: Mon 09 Feb 2026 11:01:10 +0000 Manifest this update: Mon 09 Feb 2026 11:01:10 +0000 Manifest next update: Tue 10 Feb 2026 11:01:10 +0000 Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: I+yaRk0/d/80I8su93KNi9eyBrAfAHE8SF2nI3vgDyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:00:f3:42:7d:e1:3c:db:85:9d:65:8d:70:21:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc Validity Not Before: Feb 9 11:01:10 2026 GMT Not After : Feb 10 11:01:10 2026 GMT Subject: CN=810fcbdc7925a1bbdcdaa2d946694ed9281b6dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:f5:cd:8a:94:45:55:7b:4c:c9:a0:4f:9c: 8f:cd:27:63:49:8a:72:4b:6a:ca:c2:cf:33:34:87: 4e:8f:a5:69:af:5b:53:ef:ee:95:f5:8f:71:5d:d3: ee:c3:cc:35:11:53:d2:8a:ec:3a:1d:e6:94:af:5e: ad:12:68:a7:99:15:9b:56:fd:ac:e6:1c:a7:93:d9: 2b:af:ae:a9:54:22:c4:21:90:54:79:86:bf:0d:3b: 4a:f8:d4:da:5c:2f:36:cc:e4:ef:ea:86:a7:e1:16: d8:b3:ca:b4:c0:84:c6:d5:5d:2c:4e:9d:bc:73:36: 43:2d:b6:4e:8c:c4:02:fc:2c:f5:37:ae:7a:0e:e3: b4:26:19:60:25:7a:89:89:65:12:8d:19:6c:49:44: 67:91:8c:26:b4:38:9c:61:9a:5a:cb:c6:2c:48:07: 63:27:99:21:55:7f:b5:40:fb:b2:e7:a6:30:62:51: 8a:c9:c6:fe:c2:5a:32:f1:73:37:06:9c:c2:cf:b3: ba:90:e6:82:6a:0a:b4:ac:00:64:67:d6:c1:66:26: a3:ba:13:f1:1d:e2:57:27:cb:da:25:2b:e6:85:a2: c6:c7:ae:2b:85:3f:5d:09:bd:e0:ce:15:79:bd:bb: 4d:74:e7:0d:6f:1f:ca:87:f7:e9:f4:73:55:2c:d0: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0F:CB:DC:79:25:A1:BB:DC:DA:A2:D9:46:69:4E:D9:28:1B:6D:D8 X509v3 Authority Key Identifier: keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d3:18:e4:c8:ca:94:24:b2:9a:1f:2c:a4:fa:77:cb:16:f1: 86:e9:de:8e:97:0b:d9:03:60:a0:bb:37:62:63:30:a4:30:37: c0:49:84:35:d7:85:dd:2b:e0:f1:1f:13:d1:94:fa:5c:f1:e1: 43:2b:0a:04:97:0a:eb:b3:0c:9c:ee:ef:5b:72:6a:6a:4f:46: 95:34:6f:fc:c3:61:83:75:f0:22:24:86:68:00:65:1f:06:9d: 74:78:d4:ec:2a:91:89:a1:fb:5f:f5:db:d4:24:7f:5a:88:7c: e8:ea:3d:db:ea:bf:72:46:4d:b7:10:4a:8c:56:90:47:f7:ef: 66:63:6d:44:ae:99:02:2e:49:8c:f2:80:5f:dd:95:43:90:80: fc:97:f9:6c:cc:2f:06:42:37:be:a4:f1:51:01:7e:42:c0:76: 98:ca:74:78:0e:e9:01:53:3b:86:42:9d:06:0d:7a:29:a6:9e: 50:1d:e7:a9:e3:37:7f:6d:da:41:e2:b1:fc:c6:52:6e:f6:34: f4:5e:c5:61:73:0a:c3:50:1a:dd:e9:40:c4:99:75:b3:b3:af: 9e:c1:b8:c6:7e:01:e2:cc:c2:11:98:d7:49:4b:47:a6:00:74: 17:92:11:0c:60:70:48:25:fa:af:c7:1e:51:e4:80:a2:ab:50: c1:82:42:2c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCEADzQn3hPNuFnWWNcCEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx MDI3YmMwHhcNMjYwMjA5MTEwMTEwWhcNMjYwMjEwMTEwMTEwWjAzMTEwLwYDVQQD Eyg4MTBmY2JkYzc5MjVhMWJiZGNkYWEyZDk0NjY5NGVkOTI4MWI2ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviH1zYqURVV7TMmgT5yPzSdjSYpy S2rKws8zNIdOj6Vpr1tT7+6V9Y9xXdPuw8w1EVPSiuw6HeaUr16tEminmRWbVv2s 5hynk9krr66pVCLEIZBUeYa/DTtK+NTaXC82zOTv6oan4RbYs8q0wITG1V0sTp28 czZDLbZOjMQC/Cz1N656DuO0JhlgJXqJiWUSjRlsSURnkYwmtDicYZpay8YsSAdj J5khVX+1QPuy56YwYlGKycb+wloy8XM3BpzCz7O6kOaCagq0rABkZ9bBZiajuhPx HeJXJ8vaJSvmhaLGx64rhT9dCb3gzhV5vbtNdOcNbx/Kh/fp9HNVLNB7nQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIEPy9x5JaG73Nqi2UZpTtkoG23YMB8GA1UdIwQY MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0 LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdMY 5MjKlCSymh8spPp3yxbxhunejpcL2QNgoLs3YmMwpDA3wEmENdeF3Svg8R8T0ZT6 XPHhQysKBJcK67MMnO7vW3Jqak9GlTRv/MNhg3XwIiSGaABlHwaddHjU7CqRiaH7 X/Xb1CR/Woh86Oo92+q/ckZNtxBKjFaQR/fvZmNtRK6ZAi5JjPKAX92VQ5CA/Jf5 bMwvBkI3vqTxUQF+QsB2mMp0eA7pAVM7hkKdBg16KaaeUB3nqeM3f23aQeKx/MZS bvY09F7FYXMKw1Aa3elAxJl1s7OvnsG4xn4B4szCEZjXSUtHpgB0F5IRDGBwSCX6 r8ceUeSAoqtQwYJCLA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:48 2026 by rpki-client