This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft File: jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json) Hash identifier: YmlLQnhP2wVCIZI5lPaUPds4hxQ3kQ+z5oOPE+TNNNg= Subject key identifier: 3D:85:0F:F9:4B:AC:3C:5F:D6:1B:33:63:6B:F4:B1:4E:3C:3E:43:F8 Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec Certificate serial: 019BFA9B8D59CDD186C5A7ED8EDF44ACB8AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft Manifest number: 1767 Signing time: Mon 26 Jan 2026 14:00:56 +0000 Manifest this update: Mon 26 Jan 2026 14:00:56 +0000 Manifest next update: Tue 27 Jan 2026 14:00:56 +0000 Files and hashes: 1: W9QORcGeUP3iLWU0X9nRIs0WJkY.roa (hash: hIl0UXb0kykXac0sKp+S7Vm2Hm+hm3Ey7N0z0BeyVKw=) 2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: DFnCsznfVDIbOn5DqhXNZU/yuvFSG55V+x0qxWw+3eE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:8d:59:cd:d1:86:c5:a7:ed:8e:df:44:ac:b8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec Validity Not Before: Jan 26 14:00:56 2026 GMT Not After : Jan 27 14:00:56 2026 GMT Subject: CN=3d850ff94bac3c5fd61b33636bf4b14e3c3e43f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3e:78:54:82:26:4b:49:bb:a3:00:cb:fb:8e: ef:c4:2a:be:34:23:02:e2:4a:81:53:ca:7a:6f:7d: 42:f4:d6:75:b8:32:e4:da:b2:4f:81:a8:35:a9:9e: 4f:6d:6e:f1:ef:1d:7f:39:79:27:50:2d:a9:c0:a3: e5:8b:f9:f2:98:d3:23:a9:11:fd:09:7a:ac:7a:ca: f2:de:ca:bd:c8:07:ef:72:81:ae:6e:9f:ae:b5:0a: 8b:23:c3:18:68:85:d3:14:13:91:98:b0:29:f6:5c: c0:b4:2a:bb:a8:5f:ba:79:97:9c:ea:35:87:f0:ef: 75:44:aa:9e:5c:d2:72:53:58:56:c0:d0:20:44:72: 68:04:b0:4f:06:b6:a6:34:69:8f:41:be:b9:21:93: b6:06:ed:46:38:8c:7f:19:06:9c:72:d8:eb:3d:84: 99:ef:bf:f2:d1:30:77:cc:f5:3b:8d:a9:c0:75:5e: c5:1e:15:cd:b8:85:c1:20:83:11:16:05:6d:f0:22: 88:dc:6a:73:7b:cd:39:2c:0c:5e:54:49:7f:92:9b: 84:55:e2:2a:4f:40:0c:00:f6:1e:b3:6b:fd:9c:3b: de:a7:75:9c:44:9c:67:a6:ae:62:96:8b:ea:62:a1: d1:1b:f3:81:14:a2:bf:12:44:af:f6:e7:bc:04:f5: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:0F:F9:4B:AC:3C:5F:D6:1B:33:63:6B:F4:B1:4E:3C:3E:43:F8 X509v3 Authority Key Identifier: keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:a4:05:89:aa:fc:37:bd:b6:30:1e:62:9f:31:7a:c8:d5:4c: 0f:ed:77:42:1e:c4:6d:eb:c9:df:97:67:40:87:26:dd:c5:c5: 06:d2:a4:81:fd:8a:de:bd:51:5f:48:89:9e:c9:d6:fb:65:39: 3a:46:eb:28:02:d7:57:76:57:3a:c4:4f:42:63:56:04:70:84: 55:93:cb:e0:80:b9:64:23:10:e7:f6:ba:39:8e:df:a7:f5:4e: 3e:a6:a1:6d:c5:51:79:83:d6:d5:c5:d7:ca:d7:7e:05:2a:1a: e4:2f:c0:3f:0a:b3:d4:39:5f:48:94:12:30:92:d0:8f:19:a1: 6a:62:fe:42:93:44:d0:26:8a:61:40:0e:e6:84:ca:51:81:7b: e4:50:03:50:ea:6f:3a:14:bf:30:41:87:75:9c:76:c5:8d:ef: ee:5f:aa:60:07:1e:c3:e6:c5:ca:70:5f:22:0a:56:ea:41:39: d1:c3:08:2c:82:7e:76:e0:57:43:8c:0c:97:11:58:68:64:58: c4:48:2c:32:aa:c3:22:2e:ca:b7:96:71:60:13:30:6a:5e:09: de:a3:5f:0a:ee:e1:07:d7:ad:fd:25:94:f2:ca:6f:59:3f:5b: 9b:93:a8:a1:4b:8a:75:ba:1b:83:62:0b:5c:45:fa:32:69:e6: 89:2c:82:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m41ZzdGGxaftjt9ErLiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2I2ZTE4M2M4ZDUyY2M0NjA1YmE4YjVkYWRkYzY2MzI2 MjkzZWMwHhcNMjYwMTI2MTQwMDU2WhcNMjYwMTI3MTQwMDU2WjAzMTEwLwYDVQQD EygzZDg1MGZmOTRiYWMzYzVmZDYxYjMzNjM2YmY0YjE0ZTNjM2U0M2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT54VIImS0m7owDL+47vxCq+NCMC 4kqBU8p6b31C9NZ1uDLk2rJPgag1qZ5PbW7x7x1/OXknUC2pwKPli/nymNMjqRH9 CXqsesry3sq9yAfvcoGubp+utQqLI8MYaIXTFBORmLAp9lzAtCq7qF+6eZec6jWH 8O91RKqeXNJyU1hWwNAgRHJoBLBPBramNGmPQb65IZO2Bu1GOIx/GQacctjrPYSZ 77/y0TB3zPU7janAdV7FHhXNuIXBIIMRFgVt8CKI3Gpze805LAxeVEl/kpuEVeIq T0AMAPYes2v9nDvep3WcRJxnpq5ilovqYqHRG/OBFKK/EkSv9ue8BPVwSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2FD/lLrDxf1hszY2v0sU48PkP4MB8GA1UdIwQY MBaAFIx7bhg8jVLMRgW6i12t3GYyYpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUt YjZlODY3OTQxZjdlLzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUtYjZlODY3OTQxZjdl LzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqQFiar8 N722MB5inzF6yNVMD+13Qh7EbevJ35dnQIcm3cXFBtKkgf2K3r1RX0iJnsnW+2U5 OkbrKALXV3ZXOsRPQmNWBHCEVZPL4IC5ZCMQ5/a6OY7fp/VOPqahbcVReYPW1cXX ytd+BSoa5C/APwqz1DlfSJQSMJLQjxmhamL+QpNE0CaKYUAO5oTKUYF75FADUOpv OhS/MEGHdZx2xY3v7l+qYAcew+bFynBfIgpW6kE50cMILIJ+duBXQ4wMlxFYaGRY xEgsMqrDIi7Kt5ZxYBMwal4J3qNfCu7hB9et/SWU8spvWT9bm5OooUuKdbobg2IL XEX6MmnmiSyC0A== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:24 2026 by rpki-client