This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json) Hash identifier: +YpeUVjk/RKTzaie9K7FJ2y9vFrrTukAuVUtXvM9Ch8= Subject key identifier: 2D:35:9D:14:50:47:E6:4C:19:A4:D2:DB:20:5D:63:C8:80:62:A3:CD Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Certificate serial: 019BF8ADBD061B1D7C4FCF32CE1F5676A1B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft Manifest number: 0261 Signing time: Mon 26 Jan 2026 05:01:34 +0000 Manifest this update: Mon 26 Jan 2026 05:01:34 +0000 Manifest next update: Tue 27 Jan 2026 05:01:34 +0000 Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: YrN+zOrrudQLeyG67k8JBgFAzfl5sGf2Z0I46Cv6vuA=) 2: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (hash: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:bd:06:1b:1d:7c:4f:cf:32:ce:1f:56:76:a1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Validity Not Before: Jan 26 05:01:34 2026 GMT Not After : Jan 27 05:01:34 2026 GMT Subject: CN=2d359d145047e64c19a4d2db205d63c88062a3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:2e:93:c5:a4:4b:48:03:63:d2:f8:ea:05: 64:8d:90:d6:43:2b:ee:46:b7:23:1c:83:b7:0f:48: dd:f1:85:85:5f:99:1b:0a:ec:ce:eb:91:0c:7b:fd: 11:fc:fe:ed:49:e0:01:25:33:62:fc:b2:a5:4e:61: 5f:f2:66:8b:31:cb:00:42:d9:05:34:60:31:bf:d9: 01:f9:37:bd:25:fa:ab:8f:b7:06:ae:1e:df:1a:83: a8:61:d5:ce:f1:1f:0b:f7:6f:66:e7:26:b2:dd:8f: 79:c7:5a:fc:71:f5:e9:0f:47:55:43:ce:1b:ad:54: 4b:e9:fa:08:d8:29:16:1c:be:56:c9:4a:0f:ed:24: 5d:11:a9:9d:66:26:92:a6:1e:8f:5f:8d:63:c1:ac: b4:16:a7:98:18:57:c3:ab:e0:15:85:70:70:70:de: ed:54:f9:30:b4:10:20:33:44:0e:3d:f0:c5:7b:c8: 85:94:26:e5:83:f8:bf:d9:38:eb:0b:a2:19:f0:01: 30:02:77:50:57:7b:0f:eb:7a:29:f8:18:9e:2c:dc: 5e:ea:fb:f8:31:ed:9b:df:c6:0c:38:97:29:31:a9: 71:ae:18:6c:8e:dc:13:45:b6:bb:f4:e1:f9:10:90: 09:6c:34:cc:77:2d:ee:cb:19:34:2c:0f:5b:b7:8b: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:9D:14:50:47:E6:4C:19:A4:D2:DB:20:5D:63:C8:80:62:A3:CD X509v3 Authority Key Identifier: keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8b:bf:ef:38:d2:0e:cf:51:c6:2a:04:84:47:a1:0b:25:f3: 1f:b3:7b:78:59:e1:a6:a5:10:a1:e3:e4:17:c4:fe:32:b3:3d: b3:fd:91:8e:28:51:19:40:52:df:45:fa:46:72:18:79:83:19: bb:8b:76:ad:aa:a2:47:72:4a:ea:fc:23:2a:67:46:18:45:ac: 1f:a3:6e:58:ba:e7:ef:64:a1:38:c3:cc:23:36:21:c2:70:b4: 8b:7d:51:22:14:5b:8d:1f:d2:22:d3:7e:e3:de:7f:0d:3d:38: 80:a9:d6:db:a1:c8:5e:67:82:1b:ad:f6:98:d0:da:9b:54:4e: a3:17:74:1a:b0:39:b8:37:80:e3:d8:d4:de:f5:8b:69:75:cb: d2:13:ba:16:6e:60:06:56:22:8f:0a:c2:ea:81:5d:e0:cc:78: 95:c0:da:2f:56:4f:19:a7:86:d6:18:fb:72:19:91:ba:ff:13: 02:fc:7a:70:59:4b:84:bc:59:c7:02:ee:f0:cb:ac:af:08:17: cb:1c:2a:0e:51:74:ca:61:b4:8f:15:59:46:b9:63:c7:74:31: 19:38:0e:ae:5d:d3:b2:75:02:0f:0b:cf:da:ad:75:31:60:6d: 8a:92:c8:36:e9:55:85:d1:70:e4:b5:95:9c:71:0c:a8:a0:62: ba:aa:27:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rb0GGx18T88yzh9WdqG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz Y2U1ZDIwHhcNMjYwMTI2MDUwMTM0WhcNMjYwMTI3MDUwMTM0WjAzMTEwLwYDVQQD EygyZDM1OWQxNDUwNDdlNjRjMTlhNGQyZGIyMDVkNjNjODgwNjJhM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i8uk8WkS0gDY9L46gVkjZDWQyvu RrcjHIO3D0jd8YWFX5kbCuzO65EMe/0R/P7tSeABJTNi/LKlTmFf8maLMcsAQtkF NGAxv9kB+Te9Jfqrj7cGrh7fGoOoYdXO8R8L929m5yay3Y95x1r8cfXpD0dVQ84b rVRL6foI2CkWHL5WyUoP7SRdEamdZiaSph6PX41jway0FqeYGFfDq+AVhXBwcN7t VPkwtBAgM0QOPfDFe8iFlCblg/i/2TjrC6IZ8AEwAndQV3sP63op+BieLNxe6vv4 Me2b38YMOJcpMalxrhhsjtwTRba79OH5EJAJbDTMdy3uyxk0LA9bt4tekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC01nRRQR+ZMGaTS2yBdY8iAYqPNMB8GA1UdIwQY MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1 LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIu/7zjS Ds9RxioEhEehCyXzH7N7eFnhpqUQoePkF8T+MrM9s/2RjihRGUBS30X6RnIYeYMZ u4t2raqiR3JK6vwjKmdGGEWsH6NuWLrn72ShOMPMIzYhwnC0i31RIhRbjR/SItN+ 495/DT04gKnW26HIXmeCG632mNDam1ROoxd0GrA5uDeA49jU3vWLaXXL0hO6Fm5g BlYijwrC6oFd4Mx4lcDaL1ZPGaeG1hj7chmRuv8TAvx6cFlLhLxZxwLu8MusrwgX yxwqDlF0ymG0jxVZRrljx3QxGTgOrl3TsnUCDwvP2q11MWBtipLINulVhdFw5LWV nHEMqKBiuqonvA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:11:58 2026 by rpki-client