This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json) Hash identifier: +otkmqFuVb8cR/KDyMfEn3ZhNdc+RPReTe3nKydtIjI= Subject key identifier: 1E:BE:99:76:C8:52:8F:7E:65:90:6E:42:13:CB:89:29:EE:69:63:69 Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Certificate serial: 019C420FAE5A6630DD74E408864A802C2DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft Manifest number: 0979 Signing time: Mon 09 Feb 2026 11:00:49 +0000 Manifest this update: Mon 09 Feb 2026 11:00:49 +0000 Manifest next update: Tue 10 Feb 2026 11:00:49 +0000 Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: 7xFMJDbt0OvNkjGLMgw2vhs/GfwT2xS2I9SEOhAgeXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ae:5a:66:30:dd:74:e4:08:86:4a:80:2c:2d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Validity Not Before: Feb 9 11:00:49 2026 GMT Not After : Feb 10 11:00:49 2026 GMT Subject: CN=1ebe9976c8528f7e65906e4213cb8929ee696369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:e5:e8:70:eb:4f:c0:03:cf:38:c1:af:bd: 59:49:e8:31:41:06:29:80:19:d7:b1:35:af:6e:20: 4d:7d:44:65:dc:26:8c:ff:5a:77:99:07:f6:40:3e: d8:76:e4:b9:0f:7d:63:7b:88:7d:45:49:d7:3a:22: 00:03:5f:3c:e3:c4:0a:a3:d0:c9:a1:ef:41:22:84: 2c:65:15:58:bd:9f:db:82:60:92:6a:22:59:a1:a5: 4b:90:6a:4f:75:03:44:98:fd:bb:ed:50:be:39:6d: a3:d3:39:fd:e6:c4:1e:f2:f7:10:b0:2c:4f:34:95: fa:69:72:72:1d:59:b3:94:e3:56:6c:48:f4:60:d7: cb:fd:96:26:09:59:ff:b4:5c:bd:0b:3a:72:98:76: 23:c5:3b:38:09:1d:eb:16:1a:58:86:4f:ae:e5:7a: 4e:12:01:59:ad:dd:41:11:a0:fb:9f:a9:81:b4:22: d3:ce:e1:a3:4b:86:64:dc:62:db:b6:31:ea:8a:d5: d4:46:2c:51:44:98:67:a6:1e:d8:b1:79:c9:00:ff: b7:fb:ea:0c:12:26:12:9f:00:7f:70:d5:b0:87:80: 91:95:8a:cf:7d:30:39:f1:b4:d9:15:bb:98:78:0d: 9b:79:11:ad:06:0d:4f:44:0f:4c:df:ad:a4:0b:1a: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:99:76:C8:52:8F:7E:65:90:6E:42:13:CB:89:29:EE:69:63:69 X509v3 Authority Key Identifier: keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:49:77:bc:c5:58:9f:20:76:88:22:be:59:f6:3d:0b:c8:41: 81:3b:54:00:2c:85:4e:ed:b9:88:90:b3:fb:e4:ac:f3:e7:f2: 00:17:dd:3c:f9:81:52:96:ad:c8:13:f5:c7:b6:32:d6:34:e3: d0:d1:81:b2:ce:26:9b:f8:64:13:4c:30:34:8d:15:c1:a5:05: de:c3:4d:5a:3e:37:84:bf:4a:68:f9:18:e1:13:4b:89:11:e1: 95:ca:5e:7f:e2:34:a8:09:ea:4d:07:1a:d0:cd:12:4c:ef:75: e9:03:bd:40:09:1a:17:f3:79:de:b8:b1:a7:23:b9:01:87:39: ea:9f:23:e2:fc:1a:43:be:d0:e2:02:05:bf:f9:67:e5:e2:59: 83:26:bb:08:b1:77:53:57:3f:9d:81:23:91:6a:0a:74:07:d6: 24:28:4d:d7:55:28:dd:f8:24:cb:1b:9d:75:85:d9:c7:b0:29: a9:95:68:1a:37:6c:34:4d:15:e5:6f:af:c6:63:a9:da:f8:e7: a4:4e:16:3b:f2:42:d5:21:94:e6:f0:13:54:29:6a:b7:73:41: 53:ab:fe:93:c1:a2:34:f9:9a:5c:6d:76:d6:54:87:5d:41:48: 1d:58:07:aa:17:06:0f:55:1d:f4:58:87:4e:5b:9a:70:11:08: f0:eb:1a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD65aZjDddOQIhkqALC3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWE0MDM4YmRlYjE4OTI0MmYyOGY5ZDg1YzQwZWM0ZDdk MzIxZWIwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD EygxZWJlOTk3NmM4NTI4ZjdlNjU5MDZlNDIxM2NiODkyOWVlNjk2MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlurl6HDrT8ADzzjBr71ZSegxQQYp gBnXsTWvbiBNfURl3CaM/1p3mQf2QD7YduS5D31je4h9RUnXOiIAA18848QKo9DJ oe9BIoQsZRVYvZ/bgmCSaiJZoaVLkGpPdQNEmP277VC+OW2j0zn95sQe8vcQsCxP NJX6aXJyHVmzlONWbEj0YNfL/ZYmCVn/tFy9CzpymHYjxTs4CR3rFhpYhk+u5XpO EgFZrd1BEaD7n6mBtCLTzuGjS4Zk3GLbtjHqitXURixRRJhnph7YsXnJAP+3++oM EiYSnwB/cNWwh4CRlYrPfTA58bTZFbuYeA2beRGtBg1PRA9M362kCxrM2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6+mXbIUo9+ZZBuQhPLiSnuaWNpMB8GA1UdIwQY MBaAFCcaQDi96xiSQvKPnYXEDsTX0yHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzct ODg2MmM3NDI5NDI1LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzctODg2MmM3NDI5NDI1 LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkl3vMVY nyB2iCK+WfY9C8hBgTtUACyFTu25iJCz++Ss8+fyABfdPPmBUpatyBP1x7Yy1jTj 0NGBss4mm/hkE0wwNI0VwaUF3sNNWj43hL9KaPkY4RNLiRHhlcpef+I0qAnqTQca 0M0STO916QO9QAkaF/N53rixpyO5AYc56p8j4vwaQ77Q4gIFv/ln5eJZgya7CLF3 U1c/nYEjkWoKdAfWJChN11Uo3fgkyxuddYXZx7ApqZVoGjdsNE0V5W+vxmOp2vjn pE4WO/JC1SGU5vATVClqt3NBU6v+k8GiNPmaXG121lSHXUFIHVgHqhcGD1Ud9FiH TluacBEI8Osazw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:24 2026 by rpki-client