This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json) Hash identifier: 6B8Mj6YOg4+m88rwUO+4ER3p1oG2w95738qlYCEB9aU= Subject key identifier: 0B:78:9B:BF:CA:EE:D1:D3:84:43:AB:D6:E8:F3:61:E6:17:26:F1:60 Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Certificate serial: 019BF9BFEC97FCE9D8707A3D874BFA5ECF13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft Manifest number: 17BE Signing time: Mon 26 Jan 2026 10:01:03 +0000 Manifest this update: Mon 26 Jan 2026 10:01:03 +0000 Manifest next update: Tue 27 Jan 2026 10:01:03 +0000 Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=) 2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: w4v1reJRoquer72NLOiXzFJ7fiWxY3ZqoBXnu/swCUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:ec:97:fc:e9:d8:70:7a:3d:87:4b:fa:5e:cf:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Validity Not Before: Jan 26 10:01:03 2026 GMT Not After : Jan 27 10:01:03 2026 GMT Subject: CN=0b789bbfcaeed1d38443abd6e8f361e61726f160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:12:a5:86:55:be:03:89:9e:46:a3:d1:ae: 95:81:55:5b:8c:80:40:a7:27:35:25:e7:19:48:54: 6e:b9:b2:b6:61:fd:1b:59:86:71:51:9c:c8:ca:9d: 84:32:8a:c7:0d:80:f8:58:57:2b:ab:c2:d5:d2:7c: 02:10:52:31:e9:eb:ea:85:53:f0:64:ac:dd:e1:50: 83:9d:8b:60:85:91:d3:c2:b3:b2:a5:86:e0:12:e8: d0:f2:e6:04:9d:c3:51:f6:bf:f0:97:b2:87:e0:0b: 77:f7:96:75:12:4e:04:11:0c:50:0a:d0:7b:30:b8: ab:af:2e:7a:28:15:70:5f:16:66:a6:29:8f:73:23: 46:6d:8d:2c:1a:a2:3c:05:77:4e:32:ee:44:95:0e: 03:cd:d8:e2:56:61:35:6a:29:32:74:f4:3a:3e:12: be:07:e6:8b:a2:61:27:da:2a:da:c1:8e:6e:17:19: 35:03:1e:6a:d2:d3:f0:1a:c1:65:21:08:c0:d7:aa: 17:13:30:22:f0:3c:87:ed:1c:72:a6:31:11:2b:e9: 66:d0:df:00:fb:71:43:50:fb:62:22:c8:31:dd:7e: 5c:54:dc:e2:39:c8:66:73:c9:57:42:f5:ef:86:35: b7:ca:2f:15:f4:fe:5c:16:31:3e:7f:6b:b0:86:e8: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:78:9B:BF:CA:EE:D1:D3:84:43:AB:D6:E8:F3:61:E6:17:26:F1:60 X509v3 Authority Key Identifier: keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:38:f9:9b:b2:dd:c9:9e:ef:89:91:6f:eb:f0:a8:9f:25:1a: a7:6b:a1:47:09:4f:d8:e3:67:6f:f3:04:ad:ac:59:88:0d:37: f8:ea:6c:16:07:ae:53:0c:27:b5:c7:08:28:16:9e:62:b3:8d: a6:47:2a:bc:07:88:1e:7c:e1:87:b5:6b:bc:9b:70:02:35:20: c8:d1:5d:2b:a0:8a:d6:e7:b6:23:3e:f1:f8:48:10:3f:2a:36: b7:20:7a:cf:14:b1:bf:f4:ac:27:1b:95:5d:51:96:8b:f2:db: 4f:a7:eb:61:40:f5:2e:35:d5:ec:63:e4:3d:f5:ac:de:e5:5a: 1f:fa:61:2e:df:ed:90:f3:76:9d:40:15:0e:4b:ba:ea:bb:af: ec:38:5f:e5:9c:4e:1b:9e:e7:05:84:52:27:ec:08:62:d5:30: 5b:e7:be:2a:6a:df:99:f8:86:66:48:4b:58:c7:0b:28:f5:48: 11:31:6a:af:98:2a:da:4b:b9:23:90:57:a8:4c:e3:eb:1c:02: 7d:a1:d9:5d:18:5b:88:3e:f9:dd:8b:4c:3f:dc:d2:02:0a:88: 20:9b:8d:98:dd:dd:68:af:43:2f:36:f5:46:23:b9:c0:87:04: ff:0d:4f:ea:00:67:29:9d:f2:65:c2:c8:0d:af:6d:aa:d1:9a: a3:13:82:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v+yX/OnYcHo9h0v6Xs8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk ODYxNjkwHhcNMjYwMTI2MTAwMTAzWhcNMjYwMTI3MTAwMTAzWjAzMTEwLwYDVQQD EygwYjc4OWJiZmNhZWVkMWQzODQ0M2FiZDZlOGYzNjFlNjE3MjZmMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0wSpYZVvgOJnkaj0a6VgVVbjIBA pyc1JecZSFRuubK2Yf0bWYZxUZzIyp2EMorHDYD4WFcrq8LV0nwCEFIx6evqhVPw ZKzd4VCDnYtghZHTwrOypYbgEujQ8uYEncNR9r/wl7KH4At395Z1Ek4EEQxQCtB7 MLirry56KBVwXxZmpimPcyNGbY0sGqI8BXdOMu5ElQ4DzdjiVmE1aikydPQ6PhK+ B+aLomEn2irawY5uFxk1Ax5q0tPwGsFlIQjA16oXEzAi8DyH7RxypjERK+lm0N8A +3FDUPtiIsgx3X5cVNziOchmc8lXQvXvhjW3yi8V9P5cFjE+f2uwhug2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAt4m7/K7tHThEOr1ujzYeYXJvFgMB8GA1UdIwQY MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDj5m7Ld yZ7viZFv6/ConyUap2uhRwlP2ONnb/MEraxZiA03+OpsFgeuUwwntccIKBaeYrON pkcqvAeIHnzhh7VrvJtwAjUgyNFdK6CK1ue2Iz7x+EgQPyo2tyB6zxSxv/SsJxuV XVGWi/LbT6frYUD1LjXV7GPkPfWs3uVaH/phLt/tkPN2nUAVDku66ruv7Dhf5ZxO G57nBYRSJ+wIYtUwW+e+KmrfmfiGZkhLWMcLKPVIETFqr5gq2ku5I5BXqEzj6xwC faHZXRhbiD753YtMP9zSAgqIIJuNmN3daK9DLzb1RiO5wIcE/w1P6gBnKZ3yZcLI Da9tqtGaoxOCiw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:32 2026 by rpki-client