This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json) Hash identifier: X16zqidEPKIgqIL+tp+ILhqY2TfokVhqxVaGvkllkYY= Subject key identifier: 3A:82:5A:30:5E:07:9C:D2:AB:1F:63:3A:CA:25:34:37:3E:F2:DF:44 Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Certificate serial: 019C42EB16AC1AE17D97308CA8BF12CC2F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft Manifest number: 156C Signing time: Mon 09 Feb 2026 15:00:28 +0000 Manifest this update: Mon 09 Feb 2026 15:00:28 +0000 Manifest next update: Tue 10 Feb 2026 15:00:28 +0000 Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: z9/EDpqxGB8a9z8tA+wiLBUnygSEFtUznoIiV962obw=) 2: MAhA7gXCpIgcNBSezx0_LDNuYeE.roa (hash: gtd0FuYBYyd/LSXZ+56QOfyLvd9q78kArCStkyYOOCk=) 3: mzscA40zEoiH9Kq_9VBI19qX6D0.roa (hash: uudB9v4jzWmfwl14GqVDG6tHwsesFOICQ29lxjuw2OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:16:ac:1a:e1:7d:97:30:8c:a8:bf:12:cc:2f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Validity Not Before: Feb 9 15:00:28 2026 GMT Not After : Feb 10 15:00:28 2026 GMT Subject: CN=3a825a305e079cd2ab1f633aca2534373ef2df44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:a0:ee:ab:ce:6a:75:88:b0:8f:62:bd:8e: 8e:6d:eb:f3:99:4b:2c:ee:bf:a6:79:64:1f:70:1d: 44:58:2e:2e:3f:a8:e7:05:d2:c0:44:a9:e4:2b:6f: e5:63:c0:62:61:42:83:07:bb:9a:85:8f:41:0e:f2: 2c:27:22:1b:74:4d:96:8f:72:e9:20:a4:ec:7f:fd: 42:c3:2f:7a:d1:eb:e7:86:41:9c:21:10:e5:53:c0: 3a:20:b1:99:88:b2:81:e7:3f:d8:8e:07:b9:b5:da: ae:ba:dc:e9:55:61:ef:77:da:18:26:4e:f7:74:78: 03:02:8a:72:d4:f3:3c:fa:7e:80:9b:9c:33:f6:61: ed:2d:ad:aa:d9:60:57:30:cd:f5:91:52:bb:53:d1: a4:1c:bc:31:48:a0:f6:a1:6a:ec:74:43:11:12:08: 8d:d7:6c:9b:5f:ff:17:7f:56:03:f6:60:5e:7a:fe: b4:47:3c:e1:3c:81:db:7f:ce:37:0d:2f:7e:25:db: 03:d4:2e:3d:26:ff:0c:79:74:25:63:54:e0:bc:0e: 7e:e1:65:f4:5c:e3:33:aa:70:f8:9c:98:cc:e9:6d: 4c:10:77:56:d3:6c:7a:45:41:e3:ec:5c:15:54:4a: 8c:35:d4:88:85:ed:82:af:1e:92:a1:81:7d:f2:9d: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:82:5A:30:5E:07:9C:D2:AB:1F:63:3A:CA:25:34:37:3E:F2:DF:44 X509v3 Authority Key Identifier: keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6a:fa:0c:6e:40:a0:a9:26:89:b2:14:5a:a7:23:8d:bf:b3: 00:7b:07:53:b6:55:eb:a1:bc:d3:09:b4:bf:48:e3:38:fc:bb: 9d:fa:66:5a:41:78:19:a4:64:ca:89:6d:2f:ad:0f:a2:d2:ad: 81:d5:94:12:7c:90:08:ce:e4:b8:da:33:70:76:8a:36:b3:84: 87:ba:b2:b9:61:3e:fb:c0:d4:2a:9d:ce:58:84:59:2b:3e:10: d2:7e:2a:9c:63:fd:7e:6b:49:a1:22:4d:c6:00:73:d8:5d:8c: 2a:44:3e:51:69:41:18:40:ad:0f:ef:80:df:29:82:8e:10:37: 6a:01:e4:5d:f8:5b:ea:e4:7a:ca:e5:51:77:9c:1d:10:31:d5: c4:63:66:fc:81:27:a0:45:4d:74:ec:e8:1e:01:c8:c9:24:8f: 70:0c:ec:50:3e:15:5d:10:b9:3e:8e:aa:55:d0:87:8b:2a:ff: b7:dc:1e:ac:7d:09:a7:45:07:66:c0:f5:59:ec:85:43:4d:dd: 76:30:cd:d4:33:7e:07:27:77:84:bb:fc:82:4d:0e:d5:95:35: e6:0b:6b:62:4a:ec:ec:81:e8:24:6d:40:8c:37:64:cd:8a:82: b4:7e:33:ac:dd:2b:e7:63:e7:7f:db:13:44:1e:59:24:c4:23: fb:20:38:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xasGuF9lzCMqL8SzC8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj NjcyNGYwHhcNMjYwMjA5MTUwMDI4WhcNMjYwMjEwMTUwMDI4WjAzMTEwLwYDVQQD EygzYTgyNWEzMDVlMDc5Y2QyYWIxZjYzM2FjYTI1MzQzNzNlZjJkZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHag7qvOanWIsI9ivY6ObevzmUss 7r+meWQfcB1EWC4uP6jnBdLARKnkK2/lY8BiYUKDB7uahY9BDvIsJyIbdE2Wj3Lp IKTsf/1Cwy960evnhkGcIRDlU8A6ILGZiLKB5z/Yjge5tdquutzpVWHvd9oYJk73 dHgDAopy1PM8+n6Am5wz9mHtLa2q2WBXMM31kVK7U9GkHLwxSKD2oWrsdEMREgiN 12ybX/8Xf1YD9mBeev60RzzhPIHbf843DS9+JdsD1C49Jv8MeXQlY1TgvA5+4WX0 XOMzqnD4nJjM6W1MEHdW02x6RUHj7FwVVEqMNdSIhe2Crx6SoYF98p0P9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqCWjBeB5zSqx9jOsolNDc+8t9EMB8GA1UdIwQY MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1 LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGr6DG5A oKkmibIUWqcjjb+zAHsHU7ZV66G80wm0v0jjOPy7nfpmWkF4GaRkyoltL60PotKt gdWUEnyQCM7kuNozcHaKNrOEh7qyuWE++8DUKp3OWIRZKz4Q0n4qnGP9fmtJoSJN xgBz2F2MKkQ+UWlBGECtD++A3ymCjhA3agHkXfhb6uR6yuVRd5wdEDHVxGNm/IEn oEVNdOzoHgHIySSPcAzsUD4VXRC5Po6qVdCHiyr/t9werH0Jp0UHZsD1WeyFQ03d djDN1DN+Byd3hLv8gk0O1ZU15gtrYkrs7IHoJG1AjDdkzYqCtH4zrN0r52Pnf9sT RB5ZJMQj+yA45w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:07 2026 by rpki-client