This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json) Hash identifier: gFN/cV7w1estI1T7u5YRcUSSo+BXPsMSFI+zQC1awwQ= Subject key identifier: 8E:AD:23:5B:09:82:D8:9D:4D:23:3B:7D:17:73:B1:86:32:A7:F9:44 Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09 Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009 Certificate serial: 019BF4D0784587061737364451D52D06B839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft Manifest number: 124D Signing time: Sun 25 Jan 2026 11:01:01 +0000 Manifest this update: Sun 25 Jan 2026 11:01:01 +0000 Manifest next update: Mon 26 Jan 2026 11:01:01 +0000 Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: wRAkSoKLCuBBwOhaGc0kNWotaKq7rEXmeDMr8iLNzWk=) 2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:78:45:87:06:17:37:36:44:51:d5:2d:06:b8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009 Validity Not Before: Jan 25 11:01:01 2026 GMT Not After : Jan 26 11:01:01 2026 GMT Subject: CN=8ead235b0982d89d4d233b7d1773b18632a7f944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:e1:be:58:41:29:5f:8e:40:c0:32:05:93: 85:55:df:2c:dc:7f:1d:89:2f:5e:cb:fd:b4:46:66: 7c:5e:cc:28:7b:76:7e:ee:c4:4f:3f:da:58:b1:28: 20:93:79:17:d9:8f:20:da:59:5c:fd:36:2d:50:6c: 98:36:6c:45:be:ac:b2:90:ad:a9:aa:45:df:d5:4c: e0:59:a8:7f:66:6c:6a:2e:70:1c:f5:f8:19:23:87: 78:b7:23:ba:00:ab:a2:c6:75:4c:b8:4e:6a:da:70: 46:29:7a:c8:ca:00:97:c3:65:5c:bf:0a:83:b9:91: cf:a7:f5:53:8b:4a:4b:59:92:41:47:0c:7b:0a:5c: 6a:29:3a:09:48:1d:9d:17:07:e2:df:c5:2b:2c:1b: 28:70:4f:85:74:8a:ba:00:bb:40:f9:99:e7:d9:53: 83:26:f8:cc:54:68:8b:c0:53:cd:5f:fe:e7:5d:34: 56:b7:99:78:a4:14:40:b6:13:c4:ed:b9:6e:ed:fe: 9f:56:93:4e:cc:43:d5:22:5c:38:08:b9:11:80:cf: 3d:ba:ac:e4:67:1d:53:97:b7:2d:e8:2d:08:66:21: ec:63:84:2f:a9:0b:e2:ca:00:c6:c9:79:8e:a1:68: de:c2:7d:bd:94:82:1b:86:88:e0:8a:fd:53:99:c1: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AD:23:5B:09:82:D8:9D:4D:23:3B:7D:17:73:B1:86:32:A7:F9:44 X509v3 Authority Key Identifier: keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5d:5c:28:d2:a7:03:14:84:8c:ec:7d:08:b7:4c:bf:96:c1: 9d:6c:37:31:fe:ef:fa:08:f3:df:b8:fd:f7:5e:d7:16:4e:a9: db:32:5b:44:1e:ba:42:f1:4c:ec:54:20:1f:9e:5c:5c:9b:1a: 14:18:01:1d:37:8b:97:9a:fe:36:be:dd:bc:5b:32:8d:5c:aa: a2:e3:9f:ad:53:b1:4d:65:32:f0:fb:85:38:83:d9:c9:5e:4d: cd:f2:05:10:62:f1:d7:91:13:fa:d2:ef:6b:66:1e:29:fc:cc: be:78:76:b2:77:2f:ed:d2:8b:dd:92:49:80:57:34:83:37:97: fd:43:52:51:7c:0f:98:65:e0:cc:10:2b:60:6c:68:21:e8:50: ff:44:32:4a:34:6b:3f:91:f7:a8:4d:23:19:e4:e9:77:46:0e: 8f:c1:7d:16:44:10:6e:31:5c:0f:53:d5:67:61:68:de:94:df: b0:cf:ec:23:8f:75:c5:de:09:07:f6:29:70:0a:18:0b:4a:18: 37:1e:c7:ad:72:8f:a8:fd:13:98:2a:a9:3b:7f:31:bb:6e:52: 61:1e:97:bb:1c:84:ea:34:4e:2d:e6:35:21:43:c6:67:44:4d: 03:c9:3c:53:ee:f2:68:91:35:10:d7:6f:b2:15:5d:1b:cd:d9: 2d:ff:87:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00HhFhwYXNzZEUdUtBrg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh MGIwMDkwHhcNMjYwMTI1MTEwMTAxWhcNMjYwMTI2MTEwMTAxWjAzMTEwLwYDVQQD Eyg4ZWFkMjM1YjA5ODJkODlkNGQyMzNiN2QxNzczYjE4NjMyYTdmOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RjhvlhBKV+OQMAyBZOFVd8s3H8d iS9ey/20RmZ8Xswoe3Z+7sRPP9pYsSggk3kX2Y8g2llc/TYtUGyYNmxFvqyykK2p qkXf1UzgWah/ZmxqLnAc9fgZI4d4tyO6AKuixnVMuE5q2nBGKXrIygCXw2VcvwqD uZHPp/VTi0pLWZJBRwx7ClxqKToJSB2dFwfi38UrLBsocE+FdIq6ALtA+Znn2VOD JvjMVGiLwFPNX/7nXTRWt5l4pBRAthPE7blu7f6fVpNOzEPVIlw4CLkRgM89uqzk Zx1Tl7ct6C0IZiHsY4QvqQviygDGyXmOoWjewn29lIIbhojgiv1TmcF2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6tI1sJgtidTSM7fRdzsYYyp/lEMB8GA1UdIwQY MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV1cKNKn AxSEjOx9CLdMv5bBnWw3Mf7v+gjz37j9917XFk6p2zJbRB66QvFM7FQgH55cXJsa FBgBHTeLl5r+Nr7dvFsyjVyqouOfrVOxTWUy8PuFOIPZyV5NzfIFEGLx15ET+tLv a2YeKfzMvnh2sncv7dKL3ZJJgFc0gzeX/UNSUXwPmGXgzBArYGxoIehQ/0QySjRr P5H3qE0jGeTpd0YOj8F9FkQQbjFcD1PVZ2Fo3pTfsM/sI491xd4JB/YpcAoYC0oY Nx7HrXKPqP0TmCqpO38xu25SYR6XuxyE6jROLeY1IUPGZ0RNA8k8U+7yaJE1ENdv shVdG83ZLf+H7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:37 2026 by rpki-client