This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json) Hash identifier: AoyYeHDOSHapgEf0azLNow7cC8pEYf40aQYLRJLiZYA= Subject key identifier: E9:94:9A:68:DB:A4:9E:A6:E8:4E:FE:53:E1:A0:93:8B:8A:D1:B3:9F Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Certificate serial: 019C4321C76164F95935C0256827C8594937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft Manifest number: 0A2A Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: 60AHSuUboOvLCfUBcTdLxKfKDc67+wz2XRTq36gAq0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c7:61:64:f9:59:35:c0:25:68:27:c8:59:49:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=e9949a68dba49ea6e84efe53e1a0938b8ad1b39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:5d:8c:7f:0e:27:df:dc:c0:2d:80:4c:78: 2f:9c:cf:9e:31:9e:97:b0:5a:3d:50:3b:0c:7e:d9: 14:09:d4:6a:a7:41:2a:6e:f3:82:dc:ea:a9:84:a5: d0:0c:c1:a4:3e:07:39:51:cf:9f:09:fa:f6:2c:6f: db:ca:fa:04:3a:9c:1d:e5:76:71:fc:36:62:ba:cc: b6:a7:62:7c:0f:9f:8d:e8:cd:7e:6f:2d:6a:70:16: fd:43:c9:71:ec:a7:22:73:38:cc:46:3e:1b:dd:b3: 35:3f:50:32:75:97:60:80:7f:0f:89:6c:66:35:ee: f9:c6:44:cb:07:5f:ae:88:de:0b:b8:cc:84:3a:4f: e7:eb:9b:fe:5f:84:0a:79:eb:c3:4e:f1:9f:49:ea: 50:2c:03:e3:d2:99:69:af:f6:4f:1b:f5:42:04:98: d0:17:0d:0a:4e:25:36:07:43:b2:f7:d3:df:73:08: 9f:9c:ad:aa:c9:2e:a9:cb:f7:63:be:77:a1:2d:9d: da:bd:64:4f:75:a6:1e:5a:dd:cd:fe:d1:16:6d:fd: 58:31:52:31:c9:8e:09:fc:cb:f7:17:43:9a:d3:a7: b5:7a:8d:fe:b8:f4:8a:6f:92:fb:2b:65:4e:83:69: 6e:2e:2e:a7:a4:d6:60:28:69:df:dd:f8:a8:f8:81: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:9A:68:DB:A4:9E:A6:E8:4E:FE:53:E1:A0:93:8B:8A:D1:B3:9F X509v3 Authority Key Identifier: keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3a:0d:65:61:02:da:b7:41:c7:44:f2:5e:a1:bb:ce:12:8d: 94:82:49:2c:50:42:08:af:97:f4:5d:e7:c8:a6:78:f2:cd:7a: 56:48:1f:7f:df:3c:77:b7:32:ea:10:f4:63:c5:1d:12:8e:93: 17:5f:c6:83:0c:74:82:9f:9b:42:1d:27:62:ac:15:81:90:d7: b8:54:70:ab:26:7d:e9:d6:43:f2:79:01:5b:c6:39:09:0c:1b: 37:ca:37:b0:ee:c1:27:5f:d2:a8:81:ac:80:51:71:69:78:be: cc:8f:44:5b:de:9a:b1:0e:0a:51:fd:6a:8e:8e:91:b8:0f:41: a3:04:9f:ff:38:95:76:5e:a6:cd:d7:bf:78:8d:31:d2:a8:77: 51:62:70:51:43:a1:cd:28:2e:80:77:de:af:11:79:0f:fa:0e: 8f:86:8d:45:0f:66:9b:a8:c5:83:57:d5:b8:29:38:bf:e2:8f: 85:5c:4c:4c:a3:db:58:70:55:ff:0a:ea:ec:35:29:17:d9:db: 4f:18:f7:c8:48:1e:4c:21:00:e0:d0:51:64:87:d4:01:4c:ed: 7b:f5:0d:b5:8d:a6:df:f2:d0:a5:63:58:1e:c0:b1:39:bb:69: bd:b0:c5:9a:06:31:3e:ec:7f:22:8c:41:f1:81:36:45:44:62: cd:d9:ea:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcdhZPlZNcAlaCfIWUk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTdkY2M3ZTUyZjU4YjM0MmI3MGM4M2RhYTIxYTEwNmFj NTkyOTEwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD EyhlOTk0OWE2OGRiYTQ5ZWE2ZTg0ZWZlNTNlMWEwOTM4YjhhZDFiMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T5djH8OJ9/cwC2ATHgvnM+eMZ6X sFo9UDsMftkUCdRqp0EqbvOC3OqphKXQDMGkPgc5Uc+fCfr2LG/byvoEOpwd5XZx /DZiusy2p2J8D5+N6M1+by1qcBb9Q8lx7KciczjMRj4b3bM1P1AydZdggH8PiWxm Ne75xkTLB1+uiN4LuMyEOk/n65v+X4QKeevDTvGfSepQLAPj0plpr/ZPG/VCBJjQ Fw0KTiU2B0Oy99PfcwifnK2qyS6py/djvnehLZ3avWRPdaYeWt3N/tEWbf1YMVIx yY4J/Mv3F0Oa06e1eo3+uPSKb5L7K2VOg2luLi6npNZgKGnf3fio+IEIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmUmmjbpJ6m6E7+U+Ggk4uK0bOfMB8GA1UdIwQY MBaAFIxX3MflL1izQrcMg9qiGhBqxZKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYt NDEzMDZjMjdkNmYwLzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYtNDEzMDZjMjdkNmYw LzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejoNZWEC 2rdBx0TyXqG7zhKNlIJJLFBCCK+X9F3nyKZ48s16Vkgff988d7cy6hD0Y8UdEo6T F1/Ggwx0gp+bQh0nYqwVgZDXuFRwqyZ96dZD8nkBW8Y5CQwbN8o3sO7BJ1/SqIGs gFFxaXi+zI9EW96asQ4KUf1qjo6RuA9BowSf/ziVdl6mzde/eI0x0qh3UWJwUUOh zSgugHferxF5D/oOj4aNRQ9mm6jFg1fVuCk4v+KPhVxMTKPbWHBV/wrq7DUpF9nb Txj3yEgeTCEA4NBRZIfUAUzte/UNtY2m3/LQpWNYHsCxObtpvbDFmgYxPux/IoxB 8YE2RURizdnqSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:33 2026 by rpki-client