This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json) Hash identifier: ikKAMgqZiOmUtDSsHYP5AlsOYKi6tAshZd4t3LERpf8= Subject key identifier: E4:91:16:43:B5:11:87:03:DE:C4:47:E0:22:E5:48:1F:9C:DE:EF:3D Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24 Certificate serial: 019BF61A2344937513C9608057EB115E4994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft Manifest number: 01B8 Signing time: Sun 25 Jan 2026 17:01:06 +0000 Manifest this update: Sun 25 Jan 2026 17:01:06 +0000 Manifest next update: Mon 26 Jan 2026 17:01:06 +0000 Files and hashes: 1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=) 2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: kW7QcAvDmUHfx6AvI4w7OCEItk+d5SYrsdOeFm6LTOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:23:44:93:75:13:c9:60:80:57:eb:11:5e:49:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24 Validity Not Before: Jan 25 17:01:06 2026 GMT Not After : Jan 26 17:01:06 2026 GMT Subject: CN=e4911643b5118703dec447e022e5481f9cdeef3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:f3:53:04:5d:57:bf:20:2d:85:67:ea:4c: ee:19:cd:28:4e:a8:19:d7:60:35:69:53:28:9f:65: 9d:61:77:90:fb:01:a2:34:27:5b:db:ad:82:11:16: 88:e5:7c:e4:e2:b2:1b:db:08:be:28:de:d5:8a:ea: 5e:40:96:b7:30:07:ae:5b:80:bc:0a:b2:2b:9e:f9: ef:0b:d6:47:1c:05:68:52:0c:85:a8:c0:f6:ea:16: 85:e2:c8:eb:88:35:a3:42:f3:19:52:46:f7:d2:bb: c6:76:2b:f7:5e:7f:5b:da:74:66:ce:1a:7f:b6:03: 42:24:e1:4c:16:d4:8f:1c:3d:99:3e:73:0a:4f:64: 0c:33:2e:1c:db:97:25:a4:2f:c2:e9:7d:5d:97:d8: 10:7c:3c:d4:4a:fe:cf:04:47:d7:5f:58:c9:07:2d: 2b:cc:17:d0:dc:23:72:fb:3d:f0:fa:17:0d:31:c2: 77:29:a3:b2:1b:5a:e0:97:4e:5b:75:06:32:ce:01: 8e:ad:e6:f2:7a:57:a8:fa:ca:e4:7e:b7:f2:90:50: 0d:60:ea:95:f5:dd:2a:2a:a5:28:39:d4:c7:eb:0d: fd:28:e0:1b:ee:65:76:c4:13:54:16:a0:45:c0:c5: 35:7b:13:e8:03:d9:22:71:dd:67:5b:a7:36:34:8e: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:91:16:43:B5:11:87:03:DE:C4:47:E0:22:E5:48:1F:9C:DE:EF:3D X509v3 Authority Key Identifier: keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:af:8c:d5:45:72:ea:21:10:58:19:82:83:da:88:a3:b4:b2: f6:d7:62:56:fe:74:3f:fa:0d:20:d4:6f:c4:e5:1d:ed:c6:18: f4:ec:9f:01:31:98:0f:f6:2d:82:02:7d:ba:dc:a3:df:ba:9a: cb:b2:71:28:41:73:ac:d7:aa:32:51:f1:89:6d:3c:d6:44:d1: d6:6b:c7:a6:e4:5c:05:34:a2:cb:92:f5:c1:12:40:c9:40:f3: a9:de:a5:7d:70:59:41:85:17:e5:b4:bb:86:55:14:58:33:3f: 23:e9:b0:3f:45:8b:38:12:f0:e6:af:18:6e:e5:74:5e:8f:81: 1d:54:a4:40:ea:63:50:5b:08:bc:b6:3b:8f:6b:a4:fe:0a:0e: d8:3e:29:48:1b:57:70:fb:9c:80:50:fe:b7:03:a8:28:23:53: 70:77:a1:a3:20:1f:59:9c:22:2b:46:c1:42:1d:32:6b:98:6b: cb:7e:27:6b:9b:3b:c3:9a:d2:0c:a2:84:f7:7c:12:a1:30:4a: b7:46:85:b2:e9:ab:68:fa:44:4b:82:d7:39:6b:ed:54:5b:6f: 8f:1b:b0:9d:8f:5a:ed:f9:43:85:ab:6e:1b:48:ac:49:74:b5: e4:66:33:73:e3:b4:2e:6f:47:7a:12:92:7b:0e:64:4a:66:65: bc:b8:07:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GiNEk3UTyWCAV+sRXkmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzljZWY0NThkZTUwMzkyZTNjMDJiNjkxODJmMzRjNjAx NDhkMjQwHhcNMjYwMTI1MTcwMTA2WhcNMjYwMTI2MTcwMTA2WjAzMTEwLwYDVQQD EyhlNDkxMTY0M2I1MTE4NzAzZGVjNDQ3ZTAyMmU1NDgxZjljZGVlZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8rzUwRdV78gLYVn6kzuGc0oTqgZ 12A1aVMon2WdYXeQ+wGiNCdb262CERaI5Xzk4rIb2wi+KN7ViupeQJa3MAeuW4C8 CrIrnvnvC9ZHHAVoUgyFqMD26haF4sjriDWjQvMZUkb30rvGdiv3Xn9b2nRmzhp/ tgNCJOFMFtSPHD2ZPnMKT2QMMy4c25clpC/C6X1dl9gQfDzUSv7PBEfXX1jJBy0r zBfQ3CNy+z3w+hcNMcJ3KaOyG1rgl05bdQYyzgGOrebyeleo+srkfrfykFANYOqV 9d0qKqUoOdTH6w39KOAb7mV2xBNUFqBFwMU1exPoA9kicd1nW6c2NI4a/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSRFkO1EYcD3sRH4CLlSB+c3u89MB8GA1UdIwQY MBaAFI55zvRY3lA5LjwCtpGC80xgFI0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMt Y2MxMjA4MTQ4NzI5LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMtY2MxMjA4MTQ4NzI5 LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6+M1UVy 6iEQWBmCg9qIo7Sy9tdiVv50P/oNINRvxOUd7cYY9OyfATGYD/YtggJ9utyj37qa y7JxKEFzrNeqMlHxiW081kTR1mvHpuRcBTSiy5L1wRJAyUDzqd6lfXBZQYUX5bS7 hlUUWDM/I+mwP0WLOBLw5q8YbuV0Xo+BHVSkQOpjUFsIvLY7j2uk/goO2D4pSBtX cPucgFD+twOoKCNTcHehoyAfWZwiK0bBQh0ya5hry34na5s7w5rSDKKE93wSoTBK t0aFsumraPpES4LXOWvtVFtvjxuwnY9a7flDhatuG0isSXS15GYzc+O0Lm9HehKS ew5kSmZlvLgHng== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:00 2026 by rpki-client