This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft File: JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft (raw, json) Hash identifier: oWlRXbr3nGfP/GcS2NM6lXOagBq/blGIrnlVpwFPv4o= Subject key identifier: A9:D4:C6:98:62:92:E0:0D:F8:1F:0A:60:81:F7:39:16:34:5B:1E:D6 Authority key identifier: 25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19 Certificate issuer: /CN=25fa5fc46274edcde5cdceb0a948db120e339219 Certificate serial: 019C43C6C24CA1E51B6E6DFF6A0FB42D19CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft Manifest number: 02E5 Signing time: Mon 09 Feb 2026 19:00:25 +0000 Manifest this update: Mon 09 Feb 2026 19:00:25 +0000 Manifest next update: Tue 10 Feb 2026 19:00:25 +0000 Files and hashes: 1: JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl (hash: ww6MsY+ReOSsRMTWLVN7sz2k9vFfHa2yJ7ZVK8ZFFIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c2:4c:a1:e5:1b:6e:6d:ff:6a:0f:b4:2d:19:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25fa5fc46274edcde5cdceb0a948db120e339219 Validity Not Before: Feb 9 19:00:25 2026 GMT Not After : Feb 10 19:00:25 2026 GMT Subject: CN=a9d4c6986292e00df81f0a6081f73916345b1ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:82:b3:56:31:8b:68:b6:ad:59:19:36:93: f8:e1:90:f2:9b:02:a5:55:8d:5e:f4:40:eb:7d:14: 39:33:5e:fb:1c:73:29:27:1a:c5:9c:be:72:75:0f: fc:9c:05:d7:cd:50:70:03:91:b6:4b:9e:f2:33:51: cf:71:f7:f6:63:2f:3c:97:bb:67:05:93:11:62:5a: ee:e9:56:37:fa:3f:43:e7:e4:f1:19:22:1e:25:46: 74:5f:8a:c5:5e:85:b5:59:c2:c0:2e:1a:69:c7:db: 32:bb:46:b4:61:30:af:49:00:ad:e4:0d:86:a2:84: e7:75:18:93:66:07:27:1b:99:a6:6d:da:62:b0:eb: 09:2e:7d:4c:ca:b7:1d:04:b0:ac:f8:28:55:06:01: ac:71:71:a8:d1:35:e8:a5:c7:dd:39:19:26:cb:99: 3d:b5:33:a9:26:54:a2:ca:2d:4c:92:a4:3c:86:f3: 67:1d:2f:47:d0:38:06:fe:fa:b2:cb:a5:e8:e8:6a: 4c:99:1f:b2:0c:a5:78:90:6a:aa:25:ce:db:e5:30: 9a:c7:f7:4b:6a:05:25:f2:0b:de:60:60:4e:14:b7: 4c:e9:fb:0f:9a:b3:e5:74:7c:d2:5a:b4:92:dd:80: 28:d4:c8:4a:3f:06:46:57:35:0d:54:85:d1:de:5a: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D4:C6:98:62:92:E0:0D:F8:1F:0A:60:81:F7:39:16:34:5B:1E:D6 X509v3 Authority Key Identifier: keyid:25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:81:6d:b2:6c:8b:9b:dc:9b:9a:f8:9f:fd:14:62:de:dd:4e: 24:8e:28:99:68:e7:a7:6c:7b:72:0c:6b:52:62:08:b1:f4:16: 82:10:b3:19:64:a2:6a:d2:79:66:41:c9:dd:c1:1c:4c:b8:c1: 87:cb:37:93:f9:56:3f:38:b2:25:25:1e:80:93:c3:f0:e1:0c: 70:de:29:01:12:81:03:f0:be:3a:b7:22:5b:15:75:33:4c:d1: 73:88:f8:66:d7:f7:f2:75:c6:3a:f3:e5:06:58:92:2c:57:74: 06:87:b1:bb:87:48:0a:95:dc:b7:07:b3:81:90:de:fb:a4:fc: a4:df:12:a6:18:de:cc:30:6c:f1:64:41:8a:2e:6a:eb:9f:fb: 35:2a:ec:bc:6a:04:92:0d:2e:0a:e7:49:5f:79:cd:8e:cc:16: c4:31:55:2f:e4:49:54:34:a0:88:aa:36:93:8e:c0:29:8b:ba: 2e:a9:15:c5:07:40:23:9d:d0:4e:2e:7c:3a:e7:41:6c:47:26: 35:eb:b6:53:8c:d9:e8:4d:ab:01:0d:9a:cf:07:9f:a1:d9:62: 33:05:f1:fe:bc:50:bb:72:8e:13:45:91:6e:d1:2b:68:9e:fa: 2d:f0:92:35:22:c1:1f:8d:96:76:d2:0a:d2:50:28:44:b9:06: 90:22:93:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsJMoeUbbm3/ag+0LRnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZmE1ZmM0NjI3NGVkY2RlNWNkY2ViMGE5NDhkYjEyMGUz MzkyMTkwHhcNMjYwMjA5MTkwMDI1WhcNMjYwMjEwMTkwMDI1WjAzMTEwLwYDVQQD EyhhOWQ0YzY5ODYyOTJlMDBkZjgxZjBhNjA4MWY3MzkxNjM0NWIxZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6Cs1Yxi2i2rVkZNpP44ZDymwKl VY1e9EDrfRQ5M177HHMpJxrFnL5ydQ/8nAXXzVBwA5G2S57yM1HPcff2Yy88l7tn BZMRYlru6VY3+j9D5+TxGSIeJUZ0X4rFXoW1WcLALhppx9syu0a0YTCvSQCt5A2G ooTndRiTZgcnG5mmbdpisOsJLn1MyrcdBLCs+ChVBgGscXGo0TXopcfdORkmy5k9 tTOpJlSiyi1MkqQ8hvNnHS9H0DgG/vqyy6Xo6GpMmR+yDKV4kGqqJc7b5TCax/dL agUl8gveYGBOFLdM6fsPmrPldHzSWrSS3YAo1MhKPwZGVzUNVIXR3lpjfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnUxphikuAN+B8KYIH3ORY0Wx7WMB8GA1UdIwQY MBaAFCX6X8RidO3N5c3OsKlI2xIOM5IZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmZwZnhHSjA3YzNsemM2d3FVamJFZzR6a2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81M2YyNjMtY2Y0MC00ZGM1LTg4NjUt N2RmZjQ4YzExZGI2LzEvSmZwZnhHSjA3YzNsemM2d3FVamJFZzR6a2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81M2YyNjMtY2Y0MC00ZGM1LTg4NjUtN2RmZjQ4YzExZGI2 LzEvSmZwZnhHSjA3YzNsemM2d3FVamJFZzR6a2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYFtsmyL m9ybmvif/RRi3t1OJI4omWjnp2x7cgxrUmIIsfQWghCzGWSiatJ5ZkHJ3cEcTLjB h8s3k/lWPziyJSUegJPD8OEMcN4pARKBA/C+OrciWxV1M0zRc4j4Ztf38nXGOvPl BliSLFd0Boexu4dICpXctwezgZDe+6T8pN8SphjezDBs8WRBii5q65/7NSrsvGoE kg0uCudJX3nNjswWxDFVL+RJVDSgiKo2k47AKYu6LqkVxQdAI53QTi58OudBbEcm Neu2U4zZ6E2rAQ2azwefodliMwXx/rxQu3KOE0WRbtEraJ76LfCSNSLBH42WdtIK 0lAoRLkGkCKT4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:08 2026 by rpki-client