This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json) Hash identifier: kcUvU4VOvCuvApOq5Aq6z15Z21LbYStncLxU09bVN6M= Subject key identifier: FD:95:24:D9:50:54:EF:AD:AB:11:D7:F0:36:2D:1D:81:09:8A:49:E1 Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Certificate serial: 019C42B46567F8543DA41CCFE834548C5A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft Manifest number: 0539 Signing time: Mon 09 Feb 2026 14:00:44 +0000 Manifest this update: Mon 09 Feb 2026 14:00:44 +0000 Manifest next update: Tue 10 Feb 2026 14:00:44 +0000 Files and hashes: 1: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: GMynPM9N6xPNhZ3BIi4SPrQq8SxblasTG4ZcfvknP+8=) 2: NDuQ_OtavgDxJgqTGMxRkvnClUg.roa (hash: RwHWV50blJ9xPPPNp0Q0TSF1YnwX98auqS4GRNgN9sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:65:67:f8:54:3d:a4:1c:cf:e8:34:54:8c:5a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Validity Not Before: Feb 9 14:00:44 2026 GMT Not After : Feb 10 14:00:44 2026 GMT Subject: CN=fd9524d95054efadab11d7f0362d1d81098a49e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:d3:96:8a:aa:01:3e:ff:05:22:b1:69:58: 90:69:60:89:22:f8:10:3a:d5:b2:c1:83:02:4f:81: 13:30:a6:06:bc:38:b9:ba:cf:f1:fb:39:6e:19:91: 17:e6:57:eb:38:3f:f4:68:70:ab:b9:a9:b7:1b:38: 3f:fe:50:86:90:70:e8:a9:dd:7d:8b:38:d6:21:69: 63:87:bc:0e:a1:f1:27:1d:4f:e8:81:c3:72:23:ca: b2:73:9c:30:bf:17:95:4f:07:c9:95:5d:61:82:21: f5:b2:d0:43:40:e2:9f:50:c4:96:9c:0e:00:0a:6c: cb:c3:0d:ca:67:88:fe:b2:0e:4e:0f:46:10:75:f0: 78:6a:95:43:4c:b9:fb:fd:39:4b:c6:2c:8e:ac:ed: b5:a9:5c:4c:28:a3:7e:8f:69:57:3a:d4:9f:6c:19: d6:fd:59:11:5c:eb:14:c7:f5:fe:f7:81:7e:82:bf: c6:01:ac:e5:7e:c2:08:58:22:3b:f8:69:d6:84:b2: 35:75:ca:bb:f0:5d:6c:0b:fe:93:e9:c3:e5:2e:6d: dd:82:d0:f3:ed:cd:ea:af:1a:6c:7e:8c:2d:cb:78: ed:40:e2:13:02:25:18:5d:f5:30:b7:d0:3c:60:09: e3:89:0a:b1:3d:41:2f:5c:d1:86:f9:b9:50:12:f8: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:95:24:D9:50:54:EF:AD:AB:11:D7:F0:36:2D:1D:81:09:8A:49:E1 X509v3 Authority Key Identifier: keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:36:dc:e9:a4:5e:da:2a:e7:39:bb:96:11:d7:4f:ca:64:8d: 33:94:a5:87:02:81:30:02:b3:32:10:76:df:03:c6:3f:95:29: 02:30:a6:6f:e5:20:bd:ea:e3:fc:30:bf:a5:58:55:24:5d:c0: 01:8c:db:0f:fc:a7:fc:e4:f3:a8:43:84:a2:52:20:ee:2a:07: e3:5d:31:4e:0e:45:8b:b7:3b:d2:53:bf:09:f3:af:6a:92:33: 11:8a:57:07:e4:fe:c4:64:42:2d:1b:7d:d2:2d:45:49:81:6f: 90:20:5d:ae:75:a1:09:4d:89:e1:c2:dd:ca:11:2d:1e:f1:f3: 62:17:1b:57:de:b6:8c:c7:b4:bb:c1:ff:e1:8b:aa:84:a4:53: 5c:1d:c3:29:f9:74:0e:95:e7:3a:a2:08:20:e5:32:d8:96:66: 26:a4:63:47:25:a7:41:35:14:6e:b1:19:23:73:97:27:07:2e: 14:23:d5:3d:ee:72:d7:10:00:b5:00:86:29:07:59:78:be:0f: 23:3b:f5:52:d3:68:02:21:5b:00:12:60:89:6d:d0:5e:45:71: 8e:02:b0:2f:20:3c:64:c9:5b:cc:b0:ae:45:7a:eb:af:13:f0: 11:50:b3:27:49:98:6b:4c:80:3c:64:3b:e9:8a:2c:c9:75:79: e6:0a:64:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGVn+FQ9pBzP6DRUjFoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl MWQxNmIwHhcNMjYwMjA5MTQwMDQ0WhcNMjYwMjEwMTQwMDQ0WjAzMTEwLwYDVQQD EyhmZDk1MjRkOTUwNTRlZmFkYWIxMWQ3ZjAzNjJkMWQ4MTA5OGE0OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytfTloqqAT7/BSKxaViQaWCJIvgQ OtWywYMCT4ETMKYGvDi5us/x+zluGZEX5lfrOD/0aHCruam3Gzg//lCGkHDoqd19 izjWIWljh7wOofEnHU/ogcNyI8qyc5wwvxeVTwfJlV1hgiH1stBDQOKfUMSWnA4A CmzLww3KZ4j+sg5OD0YQdfB4apVDTLn7/TlLxiyOrO21qVxMKKN+j2lXOtSfbBnW /VkRXOsUx/X+94F+gr/GAazlfsIIWCI7+GnWhLI1dcq78F1sC/6T6cPlLm3dgtDz 7c3qrxpsfowty3jtQOITAiUYXfUwt9A8YAnjiQqxPUEvXNGG+blQEvhipwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2VJNlQVO+tqxHX8DYtHYEJiknhMB8GA1UdIwQY MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTbc6aRe 2irnObuWEddPymSNM5SlhwKBMAKzMhB23wPGP5UpAjCmb+Ugverj/DC/pVhVJF3A AYzbD/yn/OTzqEOEolIg7ioH410xTg5Fi7c70lO/CfOvapIzEYpXB+T+xGRCLRt9 0i1FSYFvkCBdrnWhCU2J4cLdyhEtHvHzYhcbV962jMe0u8H/4YuqhKRTXB3DKfl0 DpXnOqIIIOUy2JZmJqRjRyWnQTUUbrEZI3OXJwcuFCPVPe5y1xAAtQCGKQdZeL4P Izv1UtNoAiFbABJgiW3QXkVxjgKwLyA8ZMlbzLCuRXrrrxPwEVCzJ0mYa0yAPGQ7 6YosyXV55gpkqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:17 2026 by rpki-client