This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json) Hash identifier: 8t6+ezFsWxcJog//rbfzdHd/zcjJxQaSd2l/UouQXTE= Subject key identifier: FF:97:E1:DF:9D:EA:61:5B:E2:8B:DC:DF:27:E1:EA:E8:BE:1A:E6:FB Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Certificate serial: 019C427D28565709C65FD92D01A3E05BAEFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft Manifest number: 0AF0 Signing time: Mon 09 Feb 2026 13:00:24 +0000 Manifest this update: Mon 09 Feb 2026 13:00:24 +0000 Manifest next update: Tue 10 Feb 2026 13:00:24 +0000 Files and hashes: 1: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: ZtrZgA8xqQo+q7E2Lf20bgQ3XYkYK/E93T96njVJVPA=) 2: tjHQL9126jSlMadUbx0UtwRmVpI.roa (hash: KKrhOiqiGWD/PXAF5L7Zxc0Yltf6jS4noyHNe6KHHoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:28:56:57:09:c6:5f:d9:2d:01:a3:e0:5b:ae:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0 Validity Not Before: Feb 9 13:00:24 2026 GMT Not After : Feb 10 13:00:24 2026 GMT Subject: CN=ff97e1df9dea615be28bdcdf27e1eae8be1ae6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:14:be:8a:62:3f:8d:66:4b:d2:ec:20:e5: ef:2e:f2:37:0f:a1:4f:dd:80:ca:6a:fc:c4:d7:da: dd:fd:fb:fc:85:61:89:25:d7:b9:69:70:ea:5a:bb: e7:44:1e:22:f0:85:1d:01:76:1a:5c:9b:9c:d4:53: ab:12:6a:37:65:33:d7:54:96:25:1e:d4:65:ae:3e: aa:b0:e5:8a:98:cf:33:26:23:69:ac:1d:02:67:04: d6:73:8c:e3:e9:2e:ec:6e:a5:e1:65:8d:86:d9:16: 92:dd:d5:29:a6:66:aa:f1:53:14:c3:d9:95:40:69: a8:f1:3e:82:3a:e8:5c:1f:5e:80:a0:29:8d:1f:a0: c6:43:34:3f:e1:15:9a:e4:41:43:5e:20:90:3c:7d: a9:b0:1d:c3:ab:18:f5:c9:ac:98:8d:69:29:13:0e: ad:6b:02:3b:8c:2b:e3:15:60:2d:12:92:16:2f:f7: af:ad:d4:46:e0:47:d2:f6:35:94:11:54:c6:59:b2: 55:4c:8e:bc:d6:54:09:ee:28:e3:a3:03:fd:a3:6d: 6c:b9:2d:d8:5d:64:88:f3:a8:be:50:4e:f5:54:47: 3b:95:be:85:be:18:14:1d:80:ed:5a:55:09:40:6c: 2f:f4:fe:40:13:14:9e:a2:47:00:48:bf:85:1a:af: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:97:E1:DF:9D:EA:61:5B:E2:8B:DC:DF:27:E1:EA:E8:BE:1A:E6:FB X509v3 Authority Key Identifier: keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fc:a6:18:c4:bd:74:d7:e2:e0:65:f3:dd:71:85:5e:03:ec: 2b:be:0f:6a:4c:c8:09:79:3b:64:bd:12:06:a9:40:99:b9:0b: d8:08:fe:fe:ac:f8:41:62:2d:07:ea:12:82:2e:2f:cf:09:d6: db:f7:af:f6:30:ec:81:87:a4:d8:ce:0b:21:9b:dd:60:e2:ab: d4:65:7b:48:ed:e7:f1:fa:d5:72:fa:bc:fa:1f:c8:49:ad:22: 30:0b:c0:c3:b6:47:97:71:69:b9:59:cb:09:76:5b:98:8d:a4: 54:38:f4:72:42:e4:12:86:c9:e4:52:29:3e:64:7d:ce:8b:85: 26:59:e3:d6:ed:6e:fe:ec:76:a3:65:a5:9e:ca:c9:77:c0:7c: 35:80:ca:fb:32:89:6c:13:3d:15:20:b8:98:9d:01:2a:e2:a1: 8b:4d:be:90:d9:ef:c7:4d:5f:7c:83:31:15:8d:17:2a:fb:9c: a4:7f:d3:9a:ae:fd:4f:82:40:6f:0a:8f:1e:e1:02:cc:5f:3e: a1:5a:9e:4c:ff:05:56:68:db:a1:77:63:90:c6:3e:60:14:e9: ed:0a:fa:62:e7:d8:1c:4a:70:28:b4:0a:f3:b9:a4:f9:15:13: a0:de:69:aa:09:85:ab:fb:8a:05:bd:41:f0:22:86:5b:46:62: ef:a2:d9:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfShWVwnGX9ktAaPgW67/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OGY2MmYzYTVmODQ3MjI4NTJmYzcwZjA1MmNmMTNkZWEy Mzc0ZDAwHhcNMjYwMjA5MTMwMDI0WhcNMjYwMjEwMTMwMDI0WjAzMTEwLwYDVQQD EyhmZjk3ZTFkZjlkZWE2MTViZTI4YmRjZGYyN2UxZWFlOGJlMWFlNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhQUvopiP41mS9LsIOXvLvI3D6FP 3YDKavzE19rd/fv8hWGJJde5aXDqWrvnRB4i8IUdAXYaXJuc1FOrEmo3ZTPXVJYl HtRlrj6qsOWKmM8zJiNprB0CZwTWc4zj6S7sbqXhZY2G2RaS3dUppmaq8VMUw9mV QGmo8T6COuhcH16AoCmNH6DGQzQ/4RWa5EFDXiCQPH2psB3Dqxj1yayYjWkpEw6t awI7jCvjFWAtEpIWL/evrdRG4EfS9jWUEVTGWbJVTI681lQJ7ijjowP9o21suS3Y XWSI86i+UE71VEc7lb6FvhgUHYDtWlUJQGwv9P5AExSeokcASL+FGq9DWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+X4d+d6mFb4ovc3yfh6ui+Gub7MB8GA1UdIwQY MBaAFCePYvOl+EcihS/HDwUs8T3qI3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3Njgt NTM1YmY5YjFlOGI3LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3NjgtNTM1YmY5YjFlOGI3 LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/ymGMS9 dNfi4GXz3XGFXgPsK74PakzICXk7ZL0SBqlAmbkL2Aj+/qz4QWItB+oSgi4vzwnW 2/ev9jDsgYek2M4LIZvdYOKr1GV7SO3n8frVcvq8+h/ISa0iMAvAw7ZHl3FpuVnL CXZbmI2kVDj0ckLkEobJ5FIpPmR9zouFJlnj1u1u/ux2o2WlnsrJd8B8NYDK+zKJ bBM9FSC4mJ0BKuKhi02+kNnvx01ffIMxFY0XKvucpH/Tmq79T4JAbwqPHuECzF8+ oVqeTP8FVmjboXdjkMY+YBTp7Qr6YufYHEpwKLQK87mk+RUToN5pqgmFq/uKBb1B 8CKGW0Zi76LZVg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:16 2026 by rpki-client