This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft File: jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json) Hash identifier: 1vDL1rmXb15bWLVZgdaxq3WWNpruq7DJ8KqfcNRtzDI= Subject key identifier: BA:C0:1E:43:6B:BF:7C:7F:37:7F:81:50:16:E1:80:4D:52:83:34:94 Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Certificate serial: 019BF61A087957CEE08D88F66045EBD271C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft Manifest number: 148F Signing time: Sun 25 Jan 2026 17:00:59 +0000 Manifest this update: Sun 25 Jan 2026 17:00:59 +0000 Manifest next update: Mon 26 Jan 2026 17:00:59 +0000 Files and hashes: 1: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: TBOyaLHKFYUd6i9hQwZ+CedY6lwcS+eGjHGoR2ew6RM=) 2: qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa (hash: lBrjEmgGCnOGQAjqYMA0OP4JZ/cwhcFHf/zVri7F27g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:08:79:57:ce:e0:8d:88:f6:60:45:eb:d2:71:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Validity Not Before: Jan 25 17:00:59 2026 GMT Not After : Jan 26 17:00:59 2026 GMT Subject: CN=bac01e436bbf7c7f377f815016e1804d52833494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:49:6b:29:64:fa:1e:52:ab:60:3e:4b:5e: 43:18:9c:ea:bd:13:fc:49:0a:e8:9e:81:ba:ad:35: 57:ab:fd:07:8a:a9:e1:33:b6:26:f7:7f:2a:1c:27: 5a:0e:f6:76:75:31:2a:c7:d4:d5:af:dd:70:46:36: 55:31:7c:8c:c7:08:87:82:41:5d:1d:fe:f3:5d:7e: 3c:ac:83:1a:9c:67:28:36:91:dd:ca:c7:65:df:59: 91:a5:d2:32:34:d7:19:09:49:89:16:66:94:47:0e: d8:ae:25:e7:af:5a:2e:c4:d8:ca:db:ae:10:de:75: ee:e1:4d:0f:bd:7c:e7:e9:47:d8:70:84:cb:58:e5: 43:fe:94:b8:81:80:a5:ea:02:5e:9b:06:41:86:db: 26:c7:8c:e3:db:af:2b:8f:2e:34:4f:ca:65:d6:76: 38:55:9a:6e:49:f0:96:3c:cb:5f:6f:d2:0b:56:ff: 4a:8f:a0:7f:7d:eb:49:b5:64:9c:ad:be:26:c1:68: bb:8c:c5:5d:ef:08:df:21:76:c6:5c:41:23:9e:cd: 57:87:ec:61:c8:0c:8b:f8:26:f6:ba:fb:b5:0e:3b: 94:d0:69:6b:b2:37:65:42:f7:cf:62:0a:4e:a7:3b: 2b:c6:6b:87:89:c4:0a:cd:14:e0:a0:92:33:30:df: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:1E:43:6B:BF:7C:7F:37:7F:81:50:16:E1:80:4D:52:83:34:94 X509v3 Authority Key Identifier: keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:36:1c:99:95:f7:6b:e5:70:3e:34:f1:6f:25:07:7d:5b:5d: a2:ef:53:09:44:3f:0a:12:e2:1a:44:44:b7:86:54:25:fd:fb: 41:da:37:5a:cc:76:dd:78:06:5f:ea:75:0b:c6:b8:04:d5:f8: 74:ee:f9:16:b4:24:61:21:f1:ce:f6:bb:4b:81:06:8d:a9:ca: 7e:17:7c:eb:6b:93:af:e2:8b:cb:ce:cd:3a:1b:9b:a8:1a:a0: 4f:b3:55:8c:eb:6f:2b:9c:c1:b1:5c:55:bd:c8:5e:40:1d:96: 7c:8c:7d:14:52:55:8c:4f:72:fe:d4:6c:d3:e2:81:a1:52:b5: c5:36:ba:e7:89:c4:2e:51:ff:2b:7b:e7:ea:f9:26:58:04:73: 3f:fa:ad:a0:5a:da:aa:3b:03:83:22:da:f1:7e:09:c2:c6:c2: 81:c2:69:96:28:c8:11:83:2f:f3:02:91:5e:cf:d2:ca:23:78: da:72:7c:d8:dd:b3:c4:df:b4:15:a4:96:de:56:29:83:b7:41: 1a:5c:4c:42:a5:dc:e2:9b:d5:f4:98:55:8e:f2:b9:eb:00:21: e0:8c:53:f8:55:06:05:75:00:f4:63:ec:fd:66:cf:7e:58:2f: 23:e6:02:1f:e1:22:92:a1:00:2a:8d:9e:82:e1:f7:28:10:4c: cd:15:d6:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ggh5V87gjYj2YEXr0nHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2JhZDZhZTQ5MTY0M2QwNzVlMjFjYmE4NTllZjI4ZTI2 ZTNjNzkwHhcNMjYwMTI1MTcwMDU5WhcNMjYwMTI2MTcwMDU5WjAzMTEwLwYDVQQD EyhiYWMwMWU0MzZiYmY3YzdmMzc3ZjgxNTAxNmUxODA0ZDUyODMzNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp15Jaylk+h5Sq2A+S15DGJzqvRP8 SQronoG6rTVXq/0HiqnhM7Ym938qHCdaDvZ2dTEqx9TVr91wRjZVMXyMxwiHgkFd Hf7zXX48rIManGcoNpHdysdl31mRpdIyNNcZCUmJFmaURw7YriXnr1ouxNjK264Q 3nXu4U0PvXzn6UfYcITLWOVD/pS4gYCl6gJemwZBhtsmx4zj268rjy40T8pl1nY4 VZpuSfCWPMtfb9ILVv9Kj6B/fetJtWScrb4mwWi7jMVd7wjfIXbGXEEjns1Xh+xh yAyL+Cb2uvu1DjuU0GlrsjdlQvfPYgpOpzsrxmuHicQKzRTgoJIzMN9aWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrAHkNrv3x/N3+BUBbhgE1SgzSUMB8GA1UdIwQY MBaAFIw7rWrkkWQ9B14hy6hZ7yjibjx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2Mt NTBkODk1ZDRhZTIzLzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2MtNTBkODk1ZDRhZTIz LzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDYcmZX3 a+VwPjTxbyUHfVtdou9TCUQ/ChLiGkREt4ZUJf37Qdo3Wsx23XgGX+p1C8a4BNX4 dO75FrQkYSHxzva7S4EGjanKfhd862uTr+KLy87NOhubqBqgT7NVjOtvK5zBsVxV vcheQB2WfIx9FFJVjE9y/tRs0+KBoVK1xTa654nELlH/K3vn6vkmWARzP/qtoFra qjsDgyLa8X4JwsbCgcJplijIEYMv8wKRXs/SyiN42nJ82N2zxN+0FaSW3lYpg7dB GlxMQqXc4pvV9JhVjvK56wAh4IxT+FUGBXUA9GPs/WbPflgvI+YCH+EikqEAKo2e guH3KBBMzRXW9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:45 2026 by rpki-client