This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft File: J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json) Hash identifier: m9z3M9jb0ppvYirpdTp1Zp11zBD5WSHy/3ZAdEGvb4g= Subject key identifier: 5A:D8:72:D2:86:7F:1E:A4:51:E8:BC:8E:20:9F:05:33:BE:9A:C3:8D Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f Certificate serial: 019C41D8A37C7AB81870F3CB109A2E230008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft Manifest number: 1495 Signing time: Mon 09 Feb 2026 10:00:42 +0000 Manifest this update: Mon 09 Feb 2026 10:00:42 +0000 Manifest next update: Tue 10 Feb 2026 10:00:42 +0000 Files and hashes: 1: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: vB/zISvKWTTj12B/1GizYwvZ2Uhmivek9kdxoQyk1Pk=) 2: aXD0FFNchQkwK34CB80vuVCFnu8.roa (hash: 7EgFfEGEl824yez9iLAftyJ4zvdxuachpWpx1Yo48rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a3:7c:7a:b8:18:70:f3:cb:10:9a:2e:23:00:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f Validity Not Before: Feb 9 10:00:42 2026 GMT Not After : Feb 10 10:00:42 2026 GMT Subject: CN=5ad872d2867f1ea451e8bc8e209f0533be9ac38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:c3:c0:8e:1d:ec:97:41:6d:2b:c0:c0:42: ad:02:4e:1e:6a:cb:e6:60:72:dc:1f:4a:fb:f3:43: 2b:60:1f:37:8c:16:c1:a7:ae:b4:c4:61:27:53:52: 12:fd:3a:d0:55:fb:ee:a7:25:a9:eb:10:b0:d1:d7: c0:ec:fd:76:75:90:5d:9e:78:93:c9:60:b9:cc:fa: 03:0a:67:c9:5e:4d:b6:7e:da:01:ec:ae:95:86:8b: 0b:fd:71:64:4a:fb:62:2a:72:ca:b2:d5:7f:aa:36: eb:ef:06:ad:f6:47:53:ac:3f:b0:1d:61:a4:b7:85: 58:d1:ea:ce:4a:43:88:35:7c:3a:7b:e3:b6:01:bb: 5d:5a:a4:42:4d:19:77:26:30:ec:d6:e0:17:d9:a7: 2e:4b:ae:5c:df:8c:ec:a2:97:2c:7a:42:32:5b:05: e5:ec:95:f0:15:7d:a5:81:18:c1:c2:04:71:d7:14: 85:60:c1:fd:b5:b4:18:1e:38:49:8d:99:e4:4a:41: 27:aa:7e:a6:49:fc:51:41:a9:d3:c1:1c:52:ee:fc: c5:9a:01:29:39:75:74:8e:ca:26:39:cd:fe:aa:de: 35:96:d9:5a:d5:69:41:0c:c7:4d:59:96:eb:a8:03: 2e:69:5c:6b:63:52:91:3b:7c:91:71:f6:34:61:87: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:72:D2:86:7F:1E:A4:51:E8:BC:8E:20:9F:05:33:BE:9A:C3:8D X509v3 Authority Key Identifier: keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:6e:40:a0:d9:e2:c3:25:ef:8c:64:8f:d9:35:27:d0:e5: be:1c:76:0b:02:72:44:56:9a:99:6c:a2:19:48:bc:c3:a8:38: e4:d5:a7:96:c9:0b:2f:aa:d6:a1:15:98:90:c3:f4:63:88:2c: c4:51:20:29:1e:e9:c7:07:c2:91:86:3c:ee:d8:b1:69:eb:de: 05:e6:0f:95:70:c6:fd:ae:7c:0e:44:6a:cb:2a:6a:e7:b5:c3: 35:fd:7b:c1:bd:34:93:0e:f6:3e:c6:9f:a8:c3:1e:81:89:94: 51:43:a1:76:75:2a:8c:f3:c3:8d:86:ae:a0:80:67:49:a5:ec: 6b:64:79:67:dd:3a:39:56:cd:0e:4c:da:99:41:98:62:80:a0: 18:66:5f:f7:63:0d:72:6d:e2:f9:b8:82:18:2b:81:92:4b:3f: 22:d7:78:27:12:60:bb:75:3e:1b:7d:cc:0c:c8:2c:80:91:99: 86:92:ed:8b:81:0b:66:1e:b6:b1:fa:fa:42:74:bd:37:4d:13: 7a:9d:e8:c5:07:be:1f:2d:37:ea:cc:a3:58:42:4c:d4:f9:04: 2e:c9:3c:0e:cb:1b:0e:3e:f2:ad:5a:58:a6:9d:10:fe:d8:6f: 48:27:60:3e:99:c3:74:66:a5:61:1b:a2:9f:5b:18:92:c4:d7: f2:eb:5b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KN8ergYcPPLEJouIwAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjIxMzMyMTk5ODllNmEzMmQ3MTE1OGQwODUyYTUxNmVi NmY3OWYwHhcNMjYwMjA5MTAwMDQyWhcNMjYwMjEwMTAwMDQyWjAzMTEwLwYDVQQD Eyg1YWQ4NzJkMjg2N2YxZWE0NTFlOGJjOGUyMDlmMDUzM2JlOWFjMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmobDwI4d7JdBbSvAwEKtAk4easvm YHLcH0r780MrYB83jBbBp660xGEnU1IS/TrQVfvupyWp6xCw0dfA7P12dZBdnniT yWC5zPoDCmfJXk22ftoB7K6VhosL/XFkSvtiKnLKstV/qjbr7wat9kdTrD+wHWGk t4VY0erOSkOINXw6e+O2AbtdWqRCTRl3JjDs1uAX2acuS65c34zsopcsekIyWwXl 7JXwFX2lgRjBwgRx1xSFYMH9tbQYHjhJjZnkSkEnqn6mSfxRQanTwRxS7vzFmgEp OXV0jsomOc3+qt41ltla1WlBDMdNWZbrqAMuaVxrY1KRO3yRcfY0YYc10wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrYctKGfx6kUei8jiCfBTO+msONMB8GA1UdIwQY MBaAFCeyEzIZmJ5qMtcRWNCFKlFutvefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWIt YzJlOGEwMzAzZmMzLzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jNjY2MDYtMmFlOC00YWRhLWIzNWItYzJlOGEwMzAzZmMz LzEvSjdJVE1obVlubW95MXhGWTBJVXFVVzYyOTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI5uQKDZ 4sMl74xkj9k1J9Dlvhx2CwJyRFaamWyiGUi8w6g45NWnlskLL6rWoRWYkMP0Y4gs xFEgKR7pxwfCkYY87tixaeveBeYPlXDG/a58DkRqyypq57XDNf17wb00kw72Psaf qMMegYmUUUOhdnUqjPPDjYauoIBnSaXsa2R5Z906OVbNDkzamUGYYoCgGGZf92MN cm3i+biCGCuBkks/Itd4JxJgu3U+G33MDMgsgJGZhpLti4ELZh62sfr6QnS9N00T ep3oxQe+Hy036syjWEJM1PkELsk8DssbDj7yrVpYpp0Q/thvSCdgPpnDdGalYRui n1sYksTX8utbgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:05 2026 by rpki-client