This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json) Hash identifier: XtC/cltMdIYUmipjVTnkLpjbAAUmO+f0BCwbcKd6MVg= Subject key identifier: 73:00:1D:4C:AE:E9:B0:9E:3D:75:B2:18:AE:E5:FE:4F:E5:DB:9D:59 Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Certificate serial: 019C42464AF45834353405BD16EE8E98E4FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft Manifest number: 04EE Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: 59ZcMvgFsxtwGZ6SVe9Bdo9ppuCdjrZJiwdXoao7RSg=) 2: kXVWM7U0cKI60RelO6wOYdiqnaw.roa (hash: RkWa64rezT/93m8EhIZeu8XZ0jmEEJeR0Zr1faMUwPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:4a:f4:58:34:35:34:05:bd:16:ee:8e:98:e4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349 Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=73001d4caee9b09e3d75b218aee5fe4fe5db9d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:a6:e6:49:47:62:08:bc:a3:f1:d9:6d:e5: 33:50:12:99:fe:c5:f8:8b:1e:b1:0d:24:56:10:a8: d7:ad:3a:4c:64:64:0a:42:47:d7:28:eb:4a:56:3d: 4f:bb:6c:42:8f:b9:60:ef:64:9e:26:49:a6:2d:0d: 4d:9e:32:59:83:da:27:05:a1:fe:36:9c:93:ff:42: 71:1b:2d:98:7f:f4:78:66:2a:49:bc:b1:32:13:bd: a3:d0:a6:2c:4b:dc:b4:5a:9b:36:59:7b:bd:10:1e: 88:b6:33:64:9a:49:51:4b:fc:ca:68:8f:51:2c:e6: 6b:24:40:40:6c:98:a1:ba:7e:e7:81:e3:cc:2e:cc: 22:5a:fb:41:97:21:eb:f4:e5:ce:28:95:07:f6:af: 53:50:23:2e:f9:ba:3b:4e:08:56:9d:2b:93:48:50: ff:3b:68:b6:bf:d5:d1:ed:32:06:af:fa:5c:79:d6: ef:54:e9:9c:05:54:46:5c:fa:24:82:46:88:e9:53: c1:e8:6c:ba:0b:f6:13:30:18:6f:9a:60:8f:d5:ca: 9f:8e:e9:d9:49:2f:44:b6:c3:65:f2:38:1b:c9:10: 9c:ab:27:c0:5d:15:13:9e:53:fc:e0:24:f0:10:fb: 9b:91:6e:e0:5e:1b:1d:e2:a6:47:e9:27:4a:07:fd: 3b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:00:1D:4C:AE:E9:B0:9E:3D:75:B2:18:AE:E5:FE:4F:E5:DB:9D:59 X509v3 Authority Key Identifier: keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2a:40:ac:29:92:d7:6f:83:ac:89:e3:05:c8:f1:c3:49:42: da:67:6a:39:54:b1:47:f7:71:a6:e3:17:51:07:02:09:ca:3f: 77:6b:31:e5:5c:90:df:48:7c:20:e5:33:e2:ea:47:7f:ca:b7: 00:72:bc:03:d7:13:32:22:68:93:9b:11:c3:cf:52:12:f3:05: b6:06:96:ec:c6:9b:0e:9e:37:e4:62:83:f4:5c:53:0c:61:3e: 68:96:51:31:b6:21:e7:10:ba:5a:a7:6b:68:30:25:fc:af:88: 29:d6:81:69:de:2b:5f:83:90:49:14:63:2b:9d:09:77:9b:fa: 22:12:5f:f4:8e:7c:35:1c:96:3e:d2:ec:84:92:64:78:36:22: 70:a6:39:c3:01:2b:c1:15:55:87:34:40:61:98:05:33:bd:6a: f4:c0:c8:0d:a3:b9:45:f7:08:97:3b:a4:81:d8:2e:05:28:2a: 90:a8:d6:24:99:4f:38:c7:46:bd:1a:2b:ab:ad:aa:91:59:cd: 69:1f:25:ac:06:25:73:e0:02:04:b5:99:18:eb:1b:6d:b3:72: ed:d7:19:43:07:ac:af:32:5f:71:90:c7:04:bf:96:f0:b4:8d: 98:b8:93:8d:e3:4e:94:1c:e5:ec:11:8b:4f:c9:a8:ad:ae:a2: b7:61:8d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkr0WDQ1NAW9Fu6OmOT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm NzQzNDkwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD Eyg3MzAwMWQ0Y2FlZTliMDllM2Q3NWIyMThhZWU1ZmU0ZmU1ZGI5ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbCm5klHYgi8o/HZbeUzUBKZ/sX4 ix6xDSRWEKjXrTpMZGQKQkfXKOtKVj1Pu2xCj7lg72SeJkmmLQ1NnjJZg9onBaH+ NpyT/0JxGy2Yf/R4ZipJvLEyE72j0KYsS9y0Wps2WXu9EB6ItjNkmklRS/zKaI9R LOZrJEBAbJihun7ngePMLswiWvtBlyHr9OXOKJUH9q9TUCMu+bo7TghWnSuTSFD/ O2i2v9XR7TIGr/pcedbvVOmcBVRGXPokgkaI6VPB6Gy6C/YTMBhvmmCP1cqfjunZ SS9EtsNl8jgbyRCcqyfAXRUTnlP84CTwEPubkW7gXhsd4qZH6SdKB/07IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMAHUyu6bCePXWyGK7l/k/l251ZMB8GA1UdIwQY MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCpArCmS 12+DrInjBcjxw0lC2mdqOVSxR/dxpuMXUQcCCco/d2sx5VyQ30h8IOUz4upHf8q3 AHK8A9cTMiJok5sRw89SEvMFtgaW7MabDp435GKD9FxTDGE+aJZRMbYh5xC6Wqdr aDAl/K+IKdaBad4rX4OQSRRjK50Jd5v6IhJf9I58NRyWPtLshJJkeDYicKY5wwEr wRVVhzRAYZgFM71q9MDIDaO5RfcIlzukgdguBSgqkKjWJJlPOMdGvRorq62qkVnN aR8lrAYlc+ACBLWZGOsbbbNy7dcZQwesrzJfcZDHBL+W8LSNmLiTjeNOlBzl7BGL T8mora6it2GNEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:01 2026 by rpki-client