This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json) Hash identifier: iTNQrI/WppuRiTTYyWeKyR2o7lbGqciG06ArqIKbzNQ= Subject key identifier: 1B:96:48:96:1B:B6:07:BA:E2:DF:51:F5:1D:6A:9A:CE:E5:C8:10:36 Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef Certificate serial: 019C4133DAC5379C2F5A28A942613B5258A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft Manifest number: 0DB7 Signing time: Mon 09 Feb 2026 07:00:43 +0000 Manifest this update: Mon 09 Feb 2026 07:00:43 +0000 Manifest next update: Tue 10 Feb 2026 07:00:43 +0000 Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: I5IX5VosoYnamki3Jgn3eLwrbLn8m+qYAF8Lqbfhwcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:da:c5:37:9c:2f:5a:28:a9:42:61:3b:52:58:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef Validity Not Before: Feb 9 07:00:43 2026 GMT Not After : Feb 10 07:00:43 2026 GMT Subject: CN=1b9648961bb607bae2df51f51d6a9acee5c81036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:d9:9d:c7:88:38:89:a7:f3:c6:d4:60:85: 04:2b:23:ce:cf:1d:b8:fb:5c:b9:d9:51:06:6e:9a: 8c:f0:56:49:30:f0:fb:a2:2e:11:ab:70:aa:6f:ac: d6:28:e5:23:20:ac:b0:17:e5:e8:fc:4b:72:d7:1a: 35:cf:a1:78:81:38:94:a5:e0:b2:65:f2:d4:dd:ec: 45:34:c7:76:e9:09:41:79:f9:eb:8a:b7:30:2c:b8: 7d:d9:56:01:8f:6f:56:1f:7f:83:33:76:05:df:f8: 89:ab:0b:d5:cb:30:34:9a:5e:3c:f8:cf:e2:ec:70: 0d:e1:2d:41:52:24:56:47:52:af:73:55:fb:9c:fe: 26:78:e2:15:9b:d0:87:dd:86:8b:80:e9:40:ce:7f: 96:9a:86:97:cf:47:44:bb:27:2c:32:7c:f3:0e:c4: 78:bb:9e:05:a6:e0:30:5c:89:27:a7:ac:11:53:fa: 4e:c4:c4:ad:65:0c:03:45:6d:71:63:3c:66:93:7d: 82:11:4f:33:bf:87:c0:6e:c2:1a:b1:bf:eb:0c:85: d5:aa:a4:78:92:5b:7c:ff:d5:48:13:dc:d0:f2:b9: 5e:aa:e2:62:5f:94:66:5e:47:f3:7f:81:42:ae:f3: b0:af:3e:8a:ea:bf:4f:a7:8f:4c:e5:16:af:a9:2f: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:96:48:96:1B:B6:07:BA:E2:DF:51:F5:1D:6A:9A:CE:E5:C8:10:36 X509v3 Authority Key Identifier: keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:23:df:dc:6d:44:16:39:a2:cb:7e:0b:f7:50:12:79:d0:ef: 06:17:32:26:35:4e:44:02:60:4a:ba:99:50:7b:5f:46:48:2f: 86:af:01:b5:30:93:f7:be:a4:b9:fd:75:d1:ff:d6:7e:41:59: e5:1d:59:3c:68:3c:48:0e:c4:61:cf:62:8a:21:7d:b5:8f:2f: 8a:81:5c:98:ba:78:c2:9a:b3:7e:f7:cc:05:6b:5b:5c:67:ca: a0:ae:89:38:37:a7:a4:b1:bc:8d:9c:8c:02:75:cf:b5:ae:52: 4c:d9:ae:1f:39:27:0e:e0:c8:53:38:ef:59:35:d7:a0:3d:6d: bf:60:be:7d:f5:99:ce:0f:64:c1:aa:86:a0:91:40:35:e3:89: 9c:a0:f2:14:e9:4f:01:db:3a:81:1c:7e:99:09:41:a9:77:79: 35:ba:a0:79:3e:5d:83:91:55:c9:25:b9:30:d2:f9:0c:99:2c: 58:b5:b7:7b:c2:a1:3b:e3:82:48:5f:4e:1b:1f:e6:2e:77:23: cf:d7:9d:3e:aa:0a:cd:22:a5:53:98:f8:25:fd:b2:b6:7d:2c: 27:20:b9:f1:b4:2c:1a:17:e9:7f:81:a1:6d:c4:0f:17:bb:6e: ec:03:1d:ef:86:78:5d:0f:32:86:a1:1c:d1:8d:77:4d:58:cf: 6e:5e:cb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM9rFN5wvWiipQmE7UlioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5 OTcwZWYwHhcNMjYwMjA5MDcwMDQzWhcNMjYwMjEwMDcwMDQzWjAzMTEwLwYDVQQD EygxYjk2NDg5NjFiYjYwN2JhZTJkZjUxZjUxZDZhOWFjZWU1YzgxMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z/ZnceIOImn88bUYIUEKyPOzx24 +1y52VEGbpqM8FZJMPD7oi4Rq3Cqb6zWKOUjIKywF+Xo/Ety1xo1z6F4gTiUpeCy ZfLU3exFNMd26QlBefnrircwLLh92VYBj29WH3+DM3YF3/iJqwvVyzA0ml48+M/i 7HAN4S1BUiRWR1Kvc1X7nP4meOIVm9CH3YaLgOlAzn+WmoaXz0dEuycsMnzzDsR4 u54FpuAwXIknp6wRU/pOxMStZQwDRW1xYzxmk32CEU8zv4fAbsIasb/rDIXVqqR4 klt8/9VIE9zQ8rlequJiX5RmXkfzf4FCrvOwrz6K6r9Pp49M5RavqS929wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuWSJYbtge64t9R9R1qms7lyBA2MB8GA1UdIwQY MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSPf3G1E Fjmiy34L91ASedDvBhcyJjVORAJgSrqZUHtfRkgvhq8BtTCT976kuf110f/WfkFZ 5R1ZPGg8SA7EYc9iiiF9tY8vioFcmLp4wpqzfvfMBWtbXGfKoK6JODenpLG8jZyM AnXPta5STNmuHzknDuDIUzjvWTXXoD1tv2C+ffWZzg9kwaqGoJFANeOJnKDyFOlP Ads6gRx+mQlBqXd5NbqgeT5dg5FVySW5MNL5DJksWLW3e8KhO+OCSF9OGx/mLncj z9edPqoKzSKlU5j4Jf2ytn0sJyC58bQsGhfpf4GhbcQPF7tu7AMd74Z4XQ8yhqEc 0Y13TVjPbl7Lrg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:41 2026 by rpki-client