This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/66aef2-59c8-4b1d-8320-4c4e4fb425b1/1/JRVNjv9JPDnSy2FL23qqstXSWQk.mft File: JRVNjv9JPDnSy2FL23qqstXSWQk.mft (raw, json) Hash identifier: 7K1iQxFevnYkknUNbJ8LBav6DSlMqNzSl4Za1tYaN0g= Subject key identifier: BA:38:9D:D0:B7:AF:BD:80:09:94:7D:47:55:A9:AA:8B:B6:E5:0A:68 Authority key identifier: 25:15:4D:8E:FF:49:3C:39:D2:CB:61:4B:DB:7A:AA:B2:D5:D2:59:09 Certificate issuer: /CN=25154d8eff493c39d2cb614bdb7aaab2d5d25909 Certificate serial: 019C4390C395C7F1D07B8C0FF7C878D875DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRVNjv9JPDnSy2FL23qqstXSWQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/66aef2-59c8-4b1d-8320-4c4e4fb425b1/1/JRVNjv9JPDnSy2FL23qqstXSWQk.mft Manifest number: 73 Signing time: Mon 09 Feb 2026 18:01:26 +0000 Manifest this update: Mon 09 Feb 2026 18:01:26 +0000 Manifest next update: Tue 10 Feb 2026 18:01:26 +0000 Files and hashes: 1: JRVNjv9JPDnSy2FL23qqstXSWQk.crl (hash: Me6z/XxBnZgTlBhzYCXaHHnbuwM9bCLxyZJK70HJNCg=) 2: TMlO6AnGXcNsROAhkS5JIDNDec4.roa (hash: ukR+IVcQtxtVvJJ5kvn7AX1uPqReF7U+G980fOjPOR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/66aef2-59c8-4b1d-8320-4c4e4fb425b1/1/JRVNjv9JPDnSy2FL23qqstXSWQk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/66aef2-59c8-4b1d-8320-4c4e4fb425b1/1/JRVNjv9JPDnSy2FL23qqstXSWQk.mft rsync://rpki.ripe.net/repository/DEFAULT/JRVNjv9JPDnSy2FL23qqstXSWQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c3:95:c7:f1:d0:7b:8c:0f:f7:c8:78:d8:75:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25154d8eff493c39d2cb614bdb7aaab2d5d25909 Validity Not Before: Feb 9 18:01:26 2026 GMT Not After : Feb 10 18:01:26 2026 GMT Subject: CN=ba389dd0b7afbd8009947d4755a9aa8bb6e50a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:0f:27:da:8c:6d:bf:b7:17:69:2e:4e:b2: 6b:ee:9f:77:be:ea:78:94:ca:47:77:52:9f:28:b8: 6d:a0:0a:da:7a:dd:9f:82:be:5b:80:ab:5e:35:b4: ee:a8:a2:72:e2:e9:4e:bc:33:81:f1:ca:c9:fc:93: 49:eb:80:10:0d:5c:3b:9d:7e:c9:61:7c:9c:a7:b1: dc:1c:1b:20:44:32:01:c0:e9:75:a4:80:01:c7:34: 00:90:39:ba:44:32:73:47:06:7c:ae:47:02:58:be: 03:b3:7c:b1:36:98:c2:61:fa:c6:38:18:fb:71:68: 4b:e0:72:a8:0c:34:19:88:0d:2a:f4:b4:be:a5:91: 5f:56:06:a1:b0:02:3a:a5:83:1e:de:82:ca:61:51: a9:2e:8a:c7:09:ec:55:01:a2:ce:b4:73:5c:54:28: fb:a1:47:84:e9:d9:fe:f1:ae:fd:f9:a9:e1:86:5b: b5:38:51:a2:fc:44:34:71:c5:74:ae:da:27:31:28: c0:7f:55:11:56:18:9b:cc:5f:7c:09:72:60:d5:64: 9a:13:2d:07:4d:ff:43:fc:3c:7b:7c:8b:42:94:08: ac:91:1a:22:44:43:76:e2:f3:a0:8d:9e:93:2b:b9: 92:6b:d7:79:7f:2a:7b:14:b6:df:3e:b1:35:d6:b0: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:38:9D:D0:B7:AF:BD:80:09:94:7D:47:55:A9:AA:8B:B6:E5:0A:68 X509v3 Authority Key Identifier: keyid:25:15:4D:8E:FF:49:3C:39:D2:CB:61:4B:DB:7A:AA:B2:D5:D2:59:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRVNjv9JPDnSy2FL23qqstXSWQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/66aef2-59c8-4b1d-8320-4c4e4fb425b1/1/JRVNjv9JPDnSy2FL23qqstXSWQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/66aef2-59c8-4b1d-8320-4c4e4fb425b1/1/JRVNjv9JPDnSy2FL23qqstXSWQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:ab:93:28:15:99:1d:52:1d:74:d1:1a:28:1f:eb:dc:f0: 7d:35:b7:35:03:89:f8:17:10:a5:8b:bd:a5:4d:89:68:50:e2: c1:b7:39:61:07:fb:46:de:44:a8:5a:ae:cb:eb:08:03:fb:19: 01:2c:ae:ad:72:b6:f0:e4:64:fd:fe:ee:ba:88:78:4b:aa:a0: 3b:13:82:46:36:e6:22:a4:e3:6e:c5:a8:7a:10:38:a6:87:06: 10:3a:12:fe:f5:fd:ce:83:f9:6e:bd:d5:89:a4:5c:3e:1f:cb: 79:71:f8:0a:70:00:00:e6:9b:17:2f:e8:d0:04:9f:ff:6d:c9: 50:91:00:30:5e:ce:82:ae:77:3d:24:3b:37:c4:c8:63:63:58: 1d:8e:9c:62:f0:64:65:ee:e7:a7:59:49:8d:44:98:c3:87:e5: 51:da:ac:e6:91:63:a0:c5:a4:d5:ba:a0:60:8c:3b:9a:a6:b6: cf:39:36:59:72:7c:45:98:1c:46:6a:1a:f2:0d:3c:da:72:ec: d8:5b:f5:1a:3e:fc:53:02:e0:32:e3:e4:88:7f:d0:67:2a:e6: 01:f4:75:27:43:67:fa:51:07:92:c7:7e:d1:67:25:33:40:31: 1f:c5:35:2e:5d:46:b1:7c:d1:88:cd:89:f1:30:87:2b:b6:d0: 33:38:ee:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMOVx/HQe4wP98h42HXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MTU0ZDhlZmY0OTNjMzlkMmNiNjE0YmRiN2FhYWIyZDVk MjU5MDkwHhcNMjYwMjA5MTgwMTI2WhcNMjYwMjEwMTgwMTI2WjAzMTEwLwYDVQQD EyhiYTM4OWRkMGI3YWZiZDgwMDk5NDdkNDc1NWE5YWE4YmI2ZTUwYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dsPJ9qMbb+3F2kuTrJr7p93vup4 lMpHd1KfKLhtoAraet2fgr5bgKteNbTuqKJy4ulOvDOB8crJ/JNJ64AQDVw7nX7J YXycp7HcHBsgRDIBwOl1pIABxzQAkDm6RDJzRwZ8rkcCWL4Ds3yxNpjCYfrGOBj7 cWhL4HKoDDQZiA0q9LS+pZFfVgahsAI6pYMe3oLKYVGpLorHCexVAaLOtHNcVCj7 oUeE6dn+8a79+anhhlu1OFGi/EQ0ccV0rtonMSjAf1URVhibzF98CXJg1WSaEy0H Tf9D/Dx7fItClAiskRoiREN24vOgjZ6TK7mSa9d5fyp7FLbfPrE11rDWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo4ndC3r72ACZR9R1Wpqou25QpoMB8GA1UdIwQY MBaAFCUVTY7/STw50sthS9t6qrLV0lkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlJWTmp2OUpQRG5TeTJGTDIzcXFzdFhTV1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NmFlZjItNTljOC00YjFkLTgzMjAt NGM0ZTRmYjQyNWIxLzEvSlJWTmp2OUpQRG5TeTJGTDIzcXFzdFhTV1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82NmFlZjItNTljOC00YjFkLTgzMjAtNGM0ZTRmYjQyNWIx LzEvSlJWTmp2OUpQRG5TeTJGTDIzcXFzdFhTV1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnerkygV mR1SHXTRGigf69zwfTW3NQOJ+BcQpYu9pU2JaFDiwbc5YQf7Rt5EqFquy+sIA/sZ ASyurXK28ORk/f7uuoh4S6qgOxOCRjbmIqTjbsWoehA4pocGEDoS/vX9zoP5br3V iaRcPh/LeXH4CnAAAOabFy/o0ASf/23JUJEAMF7Ogq53PSQ7N8TIY2NYHY6cYvBk Ze7np1lJjUSYw4flUdqs5pFjoMWk1bqgYIw7mqa2zzk2WXJ8RZgcRmoa8g082nLs 2Fv1Gj78UwLgMuPkiH/QZyrmAfR1J0Nn+lEHksd+0WclM0AxH8U1Ll1GsXzRiM2J 8TCHK7bQMzjuyA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:43 2026 by rpki-client