This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json) Hash identifier: mjUeC8gAfiyAjLXVKIhmeZu3aV/Pw8novI3bGjfPzGQ= Subject key identifier: 34:E3:95:C3:5F:AF:5B:EA:8A:E2:5A:BC:0A:17:A2:F8:14:5C:31:C2 Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f Certificate serial: 019C4390441A3F035C9A30075FBED59A6D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft Manifest number: 118C Signing time: Mon 09 Feb 2026 18:00:53 +0000 Manifest this update: Mon 09 Feb 2026 18:00:53 +0000 Manifest next update: Tue 10 Feb 2026 18:00:53 +0000 Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: D5zuC6ITGh5W4cYY/WrHTf6rm5BIfjKDsik8U36llpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:44:1a:3f:03:5c:9a:30:07:5f:be:d5:9a:6d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f Validity Not Before: Feb 9 18:00:53 2026 GMT Not After : Feb 10 18:00:53 2026 GMT Subject: CN=34e395c35faf5bea8ae25abc0a17a2f8145c31c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:b8:fe:c6:1d:25:9f:55:37:91:6f:b7:35: 20:6f:ea:d6:e4:83:2d:83:08:c8:af:2d:2e:5f:81: c5:ed:17:70:f8:e2:79:62:84:65:4d:31:f3:f0:f1: ae:28:1c:7b:b5:41:67:17:b7:b0:72:a8:45:dc:fe: d4:bd:8b:75:ca:13:8d:13:49:75:b5:f1:bb:73:93: 87:38:f8:02:6d:4f:16:d1:79:fb:10:8d:bf:d3:73: 94:0b:d0:31:c7:9e:0e:65:0f:3f:b8:2a:37:05:c7: e5:52:36:bb:5b:8c:47:11:04:91:77:20:fc:6d:f6: 84:69:b1:bd:1e:a1:8d:44:3c:af:be:e5:27:ec:73: 89:85:1a:4c:2b:d6:ac:f1:ad:07:e4:fa:da:af:a1: cb:1a:56:f6:c8:2b:45:b0:f3:50:8c:53:a3:9d:69: 16:47:10:d6:a9:b7:ce:9b:33:17:ac:09:aa:32:ef: c3:13:3a:9d:5e:1a:a0:67:12:23:07:be:32:2c:48: 5c:d6:0b:cd:2a:83:58:dd:59:e2:d1:c4:2e:ce:c7: cc:f2:ba:cf:f7:e6:88:c0:86:f6:67:81:25:83:91: 69:df:f7:b4:ce:d0:1b:c1:11:78:99:81:48:01:d4: a5:36:a5:8e:8c:bf:00:42:92:c7:07:33:97:9d:6c: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:95:C3:5F:AF:5B:EA:8A:E2:5A:BC:0A:17:A2:F8:14:5C:31:C2 X509v3 Authority Key Identifier: keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8d:40:1a:26:66:d4:2d:19:11:cc:0a:b7:b2:dc:fe:13:47: 54:b1:29:8e:f7:72:35:d2:f2:18:15:58:01:b3:53:22:d8:a2: 80:79:83:db:c8:a8:48:a2:65:34:a9:7f:ac:fa:32:24:3b:01: c2:62:9a:30:ed:bd:2c:d9:0e:39:fa:b4:76:0f:e9:f8:49:4f: 8b:b2:16:04:f0:54:1d:02:f4:29:2d:2a:9c:52:b0:58:83:d8: 62:52:47:30:71:f4:28:24:bb:79:44:6b:08:19:e8:a7:9d:c8: 95:bb:29:37:46:3c:02:2e:c5:9d:56:73:6d:c5:c9:1d:16:ae: 9a:7d:fb:66:b8:7f:a7:b9:d2:70:e1:1c:d5:cc:54:fc:5e:f7: b8:d8:58:f0:28:14:04:b2:68:51:52:78:bb:bb:56:f5:4f:66: 56:42:39:8f:c0:85:e5:ed:51:09:92:22:f7:f0:60:e4:a3:dc: 27:aa:9e:f6:bc:9b:59:60:d0:1e:92:83:13:6e:0c:a9:c0:25: 09:a8:25:ad:d9:3b:c6:ac:e2:72:76:12:0c:95:a9:63:e5:e6: 55:ad:1b:93:b0:90:ff:49:83:54:76:de:ee:d6:cc:d9:75:78: aa:4e:b2:75:1f:75:9b:c5:4c:3b:04:80:17:a0:a5:31:47:7b: 14:0b:e0:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEQaPwNcmjAHX77Vmm1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYzI0NWZhMDI1YjUxNTdjODc5ZGIxN2FmYjZhOGZkZGUz ZjhmNGYwHhcNMjYwMjA5MTgwMDUzWhcNMjYwMjEwMTgwMDUzWjAzMTEwLwYDVQQD EygzNGUzOTVjMzVmYWY1YmVhOGFlMjVhYmMwYTE3YTJmODE0NWMzMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWG4/sYdJZ9VN5FvtzUgb+rW5IMt gwjIry0uX4HF7Rdw+OJ5YoRlTTHz8PGuKBx7tUFnF7ewcqhF3P7UvYt1yhONE0l1 tfG7c5OHOPgCbU8W0Xn7EI2/03OUC9Axx54OZQ8/uCo3BcflUja7W4xHEQSRdyD8 bfaEabG9HqGNRDyvvuUn7HOJhRpMK9as8a0H5Prar6HLGlb2yCtFsPNQjFOjnWkW RxDWqbfOmzMXrAmqMu/DEzqdXhqgZxIjB74yLEhc1gvNKoNY3Vni0cQuzsfM8rrP 9+aIwIb2Z4Elg5Fp3/e0ztAbwRF4mYFIAdSlNqWOjL8AQpLHBzOXnWz8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTjlcNfr1vqiuJavAoXovgUXDHCMB8GA1UdIwQY MBaAFK7CRfoCW1FXyHnbF6+2qP3eP49PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMWEwNmYtMmM2OS00Mzk1LThiZGQt NzRlN2M5NTY3MTQ3LzEvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wMWEwNmYtMmM2OS00Mzk1LThiZGQtNzRlN2M5NTY3MTQ3 LzEvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho1AGiZm 1C0ZEcwKt7Lc/hNHVLEpjvdyNdLyGBVYAbNTItiigHmD28ioSKJlNKl/rPoyJDsB wmKaMO29LNkOOfq0dg/p+ElPi7IWBPBUHQL0KS0qnFKwWIPYYlJHMHH0KCS7eURr CBnop53IlbspN0Y8Ai7FnVZzbcXJHRaumn37Zrh/p7nScOEc1cxU/F73uNhY8CgU BLJoUVJ4u7tW9U9mVkI5j8CF5e1RCZIi9/Bg5KPcJ6qe9rybWWDQHpKDE24MqcAl Caglrdk7xqzicnYSDJWpY+XmVa0bk7CQ/0mDVHbe7tbM2XV4qk6ydR91m8VMOwSA F6ClMUd7FAvgEg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:00 2026 by rpki-client