This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json) Hash identifier: cuDVsl015H3JUJiyBIae0xGIN6kcU8SfceYc5CfYwsA= Subject key identifier: AD:D0:4A:42:88:8A:85:DD:B0:CE:20:4D:7C:11:B2:EA:58:DE:1A:E1 Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a Certificate serial: 019C4359675C7EEF583304ED0FFF346BA3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft Manifest number: 0A75 Signing time: Mon 09 Feb 2026 17:00:58 +0000 Manifest this update: Mon 09 Feb 2026 17:00:58 +0000 Manifest next update: Tue 10 Feb 2026 17:00:58 +0000 Files and hashes: 1: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: 7aDy29HtcxJQOxHXCctmlqO/u9wyFJ8fe6X45dgcLjw=) 2: Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa (hash: COQQhfCQ5pueYBwG1/nepox+6Hyg8CKRyfOh9o2cEpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:67:5c:7e:ef:58:33:04:ed:0f:ff:34:6b:a3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a Validity Not Before: Feb 9 17:00:58 2026 GMT Not After : Feb 10 17:00:58 2026 GMT Subject: CN=add04a42888a85ddb0ce204d7c11b2ea58de1ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:33:88:b9:8e:26:ef:57:ce:5b:85:d7:36: 07:c2:5e:b5:e1:88:8c:b6:1e:86:c8:7d:82:01:78: 4d:a8:51:a7:1a:c3:9b:e4:d0:90:c9:61:e8:a9:a0: b2:b6:54:01:64:96:4f:75:1c:ec:cb:e8:23:67:f8: 5c:b0:ea:6a:7d:53:34:ff:c1:ea:1f:df:a3:ff:1a: 00:b0:48:2f:01:1e:9c:c6:d1:9b:5b:9d:d3:72:08: 6c:80:e8:7c:af:43:20:c1:02:f1:db:bd:0c:85:15: ec:93:40:f1:e4:ae:90:d7:68:9a:72:9e:c1:1c:b7: 04:33:ad:22:b1:a2:ae:d2:9f:20:b5:13:c0:e5:90: e6:38:8a:65:a8:46:61:70:45:78:85:53:3a:ad:9b: 8b:6d:3a:53:7f:6a:f6:7f:11:ad:f3:41:24:3f:d0: 60:fc:14:2b:35:28:f6:c5:f3:8e:d2:52:12:19:f6: cd:c0:c4:2f:6c:3b:2b:17:59:18:23:ce:df:99:df: ec:04:9d:e9:88:82:fb:6d:b4:56:eb:82:f4:a4:c7: 7b:0d:96:22:81:04:8c:6f:8c:92:2d:26:66:5c:be: 01:ca:db:d7:8d:22:bd:33:8b:33:05:d0:c5:6d:d1: 24:76:cc:1c:26:11:9d:d4:dd:ef:3f:bc:e0:e4:35: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:4A:42:88:8A:85:DD:B0:CE:20:4D:7C:11:B2:EA:58:DE:1A:E1 X509v3 Authority Key Identifier: keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:f5:cb:b5:9c:92:19:85:99:45:15:ff:bf:94:fd:72:73: a8:88:41:3f:6a:cf:fd:b1:72:be:9d:2a:a8:ca:c1:66:c2:54: c3:1b:00:ed:c9:a9:03:57:a5:71:92:17:2e:64:c0:ab:20:c5: 88:1c:9e:cc:67:91:e7:48:71:b7:f8:7f:57:67:3d:b8:8b:10: 60:38:e5:13:44:9d:1e:b8:7b:db:99:07:f4:c0:cb:90:65:04: 9d:0e:97:cb:0a:4d:b1:6a:3e:b4:2f:57:0a:f3:6a:54:5a:f7: f7:c3:73:5e:71:e2:9f:18:d5:53:86:d8:12:d4:a3:e5:e0:98: 45:69:1d:47:9d:f7:55:43:b1:74:94:6e:5d:47:04:8a:a5:54: 53:8f:47:60:a6:61:cb:ce:92:18:f2:a9:c5:8f:0a:eb:02:5c: 3c:fa:0e:e6:55:ef:9d:97:0d:18:23:0b:0b:ff:4d:ab:e3:e5: a6:77:29:d2:7a:30:a4:91:7d:72:0d:16:80:b3:70:27:a9:36: 27:d8:4e:82:52:71:4b:9a:08:8d:0a:0b:f2:7c:f2:3b:76:c1: ab:e0:4e:b3:18:6b:11:13:0f:dd:7a:d5:02:fb:e1:77:5a:30: 62:48:f4:8a:46:d3:3f:29:f6:78:b3:ee:c0:84:35:71:82:01: a4:df:a8:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWdcfu9YMwTtD/80a6P0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl NDU4MGEwHhcNMjYwMjA5MTcwMDU4WhcNMjYwMjEwMTcwMDU4WjAzMTEwLwYDVQQD EyhhZGQwNGE0Mjg4OGE4NWRkYjBjZTIwNGQ3YzExYjJlYTU4ZGUxYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz4ziLmOJu9XzluF1zYHwl614YiM th6GyH2CAXhNqFGnGsOb5NCQyWHoqaCytlQBZJZPdRzsy+gjZ/hcsOpqfVM0/8Hq H9+j/xoAsEgvAR6cxtGbW53TcghsgOh8r0MgwQLx270MhRXsk0Dx5K6Q12iacp7B HLcEM60isaKu0p8gtRPA5ZDmOIplqEZhcEV4hVM6rZuLbTpTf2r2fxGt80EkP9Bg /BQrNSj2xfOO0lISGfbNwMQvbDsrF1kYI87fmd/sBJ3piIL7bbRW64L0pMd7DZYi gQSMb4ySLSZmXL4BytvXjSK9M4szBdDFbdEkdswcJhGd1N3vP7zg5DXT6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3QSkKIioXdsM4gTXwRsupY3hrhMB8GA1UdIwQY MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4 LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbz1y7Wc khmFmUUV/7+U/XJzqIhBP2rP/bFyvp0qqMrBZsJUwxsA7cmpA1elcZIXLmTAqyDF iByezGeR50hxt/h/V2c9uIsQYDjlE0SdHrh725kH9MDLkGUEnQ6XywpNsWo+tC9X CvNqVFr398NzXnHinxjVU4bYEtSj5eCYRWkdR533VUOxdJRuXUcEiqVUU49HYKZh y86SGPKpxY8K6wJcPPoO5lXvnZcNGCMLC/9Nq+Plpncp0nowpJF9cg0WgLNwJ6k2 J9hOglJxS5oIjQoL8nzyO3bBq+BOsxhrERMP3XrVAvvhd1owYkj0ikbTPyn2eLPu wIQ1cYIBpN+olQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:39 2026 by rpki-client