This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json) Hash identifier: +R6F+W7VS15EM6Y/PCASzQnX6poArwURhjW/gxUyu28= Subject key identifier: 96:02:A0:B3:14:EC:87:83:DA:B5:F7:B1:33:26:9C:B6:11:9D:AD:0B Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Certificate serial: 019BF8AD727843CA04F35818F770079ECDB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft Manifest number: 115F Signing time: Mon 26 Jan 2026 05:01:15 +0000 Manifest this update: Mon 26 Jan 2026 05:01:15 +0000 Manifest next update: Tue 27 Jan 2026 05:01:15 +0000 Files and hashes: 1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=) 2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: RUKzcd3V5Avc6Q7i45Avaz2gKxG4nYeVInFuoThHHvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:72:78:43:ca:04:f3:58:18:f7:70:07:9e:cd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9 Validity Not Before: Jan 26 05:01:15 2026 GMT Not After : Jan 27 05:01:15 2026 GMT Subject: CN=9602a0b314ec8783dab5f7b133269cb6119dad0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:70:90:36:81:bf:df:09:0f:41:5c:66:bd: 95:17:7e:fb:0e:c0:a6:84:e0:63:b8:d9:4f:41:c3: d9:39:4e:9f:1e:a8:a9:8d:99:de:5f:b3:81:f3:c3: a0:97:3a:ea:f2:55:fa:80:b4:7d:0a:e5:de:14:f5: 7a:19:c5:34:9c:2f:46:30:3e:74:e0:bd:df:06:73: 6c:9e:0b:78:fe:76:2a:9f:90:59:3c:40:f5:2c:87: a0:5b:bf:31:34:3c:d8:17:f3:52:a0:0c:a3:72:99: 72:14:f7:0d:fc:15:81:b0:88:5d:a4:f8:87:67:65: e0:21:bc:a2:f3:a2:a9:3c:ca:c7:86:31:7d:2d:b3: 07:8b:30:b9:60:1f:92:2d:82:75:46:7f:65:0e:9f: af:85:eb:fc:83:53:52:fe:61:c8:54:c1:13:e9:6a: 9e:aa:34:b8:47:f8:8c:bc:9a:8d:3b:6f:30:0c:88: 5f:b2:b2:c6:a8:a8:5b:d6:1c:f6:87:eb:b4:ef:e7: e0:29:16:d1:83:16:78:7b:b5:fb:00:81:af:42:5f: 80:00:e6:87:66:b6:c4:7a:4b:c4:81:89:06:58:07: 37:f8:fd:c8:48:04:c1:21:11:0f:f9:16:8f:ad:11: 06:00:16:dc:25:bd:c6:f0:54:b9:9c:c9:be:b5:8a: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:02:A0:B3:14:EC:87:83:DA:B5:F7:B1:33:26:9C:B6:11:9D:AD:0B X509v3 Authority Key Identifier: keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7a:ec:4e:b8:c5:87:f6:a9:03:f9:f2:fb:5b:e1:62:af:e2: c6:e6:40:bc:67:19:6e:a0:bb:4a:27:8f:0b:27:37:d1:f2:b9: fd:c7:83:44:f0:82:79:48:ec:71:c6:08:32:36:fc:23:92:fb: f9:59:1c:0d:b6:0a:1f:d6:87:ce:a5:e1:c9:9c:29:18:55:3c: 94:59:3b:2b:dc:53:f0:03:7d:30:da:4f:df:2b:db:e1:15:88: fc:91:ab:9c:07:18:fd:4e:d9:8d:51:89:2c:db:f4:03:b7:48: f7:a3:e3:5e:9b:78:b7:74:df:64:8a:5f:5d:d1:0b:8a:c2:cb: 52:14:0e:ae:f7:13:04:d0:d1:48:40:ba:50:af:56:0e:e1:0e: 3b:55:4c:a9:74:35:46:f9:3b:c6:8e:5e:c9:59:89:b2:0e:ea: 3d:7f:96:0a:02:92:d1:d7:86:e3:c5:f5:79:66:ae:40:3d:fa: 16:34:46:55:cf:82:ae:99:e4:11:d8:0a:9c:9f:77:0a:e7:0d: fc:54:52:05:cd:40:13:69:1d:35:de:8d:53:ef:95:e9:d0:a3: 3c:6a:f8:2a:12:95:62:22:d0:83:66:12:e9:73:cc:80:8f:6d: bc:f2:53:f3:f4:e7:ef:40:57:f1:b4:b4:ad:f5:91:5c:f1:64: 2d:03:ff:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rXJ4Q8oE81gY93AHns2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx ZjRlYzkwHhcNMjYwMTI2MDUwMTE1WhcNMjYwMTI3MDUwMTE1WjAzMTEwLwYDVQQD Eyg5NjAyYTBiMzE0ZWM4NzgzZGFiNWY3YjEzMzI2OWNiNjExOWRhZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcxwkDaBv98JD0FcZr2VF377DsCm hOBjuNlPQcPZOU6fHqipjZneX7OB88Oglzrq8lX6gLR9CuXeFPV6GcU0nC9GMD50 4L3fBnNsngt4/nYqn5BZPED1LIegW78xNDzYF/NSoAyjcplyFPcN/BWBsIhdpPiH Z2XgIbyi86KpPMrHhjF9LbMHizC5YB+SLYJ1Rn9lDp+vhev8g1NS/mHIVMET6Wqe qjS4R/iMvJqNO28wDIhfsrLGqKhb1hz2h+u07+fgKRbRgxZ4e7X7AIGvQl+AAOaH ZrbEekvEgYkGWAc3+P3ISATBIREP+RaPrREGABbcJb3G8FS5nMm+tYr+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYCoLMU7IeD2rX3sTMmnLYRna0LMB8GA1UdIwQY MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt NGI2ZmM3YzA2YWU1LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1 LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnrsTrjF h/apA/ny+1vhYq/ixuZAvGcZbqC7SiePCyc30fK5/ceDRPCCeUjsccYIMjb8I5L7 +VkcDbYKH9aHzqXhyZwpGFU8lFk7K9xT8AN9MNpP3yvb4RWI/JGrnAcY/U7ZjVGJ LNv0A7dI96PjXpt4t3TfZIpfXdELisLLUhQOrvcTBNDRSEC6UK9WDuEOO1VMqXQ1 Rvk7xo5eyVmJsg7qPX+WCgKS0deG48X1eWauQD36FjRGVc+CrpnkEdgKnJ93CucN /FRSBc1AE2kdNd6NU++V6dCjPGr4KhKVYiLQg2YS6XPMgI9tvPJT8/Tn70BX8bS0 rfWRXPFkLQP/OA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:08 2026 by rpki-client