This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json) Hash identifier: YXhEVJRFk9+V+TMCtKqskDdE4vpsfiVwIJTeVp5wrhw= Subject key identifier: F4:6A:8C:E0:40:D6:57:3E:03:44:57:7E:BC:AC:02:47:C7:92:CD:6D Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f Certificate serial: 019BF68776B09FABF7EFB92C599767DF8321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft Manifest number: ED Signing time: Sun 25 Jan 2026 19:00:31 +0000 Manifest this update: Sun 25 Jan 2026 19:00:31 +0000 Manifest next update: Mon 26 Jan 2026 19:00:31 +0000 Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: LnaUhUGWk3tRydfkuztNZZtH2N0JZKUzkKkQMwFnFGg=) 2: qN669ymg8nK0FcenUzEimvS6bD0.roa (hash: BwVKGc9Um4MKhEVa9QsPEHNNx57h0Tvo1ZPD7iZnTWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:76:b0:9f:ab:f7:ef:b9:2c:59:97:67:df:83:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f Validity Not Before: Jan 25 19:00:31 2026 GMT Not After : Jan 26 19:00:31 2026 GMT Subject: CN=f46a8ce040d6573e0344577ebcac0247c792cd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:da:8a:a8:d0:bd:77:37:15:95:fc:5e:bb: e5:31:cb:d6:50:e2:aa:c1:28:ab:50:ac:b4:da:37: 9b:63:e0:06:20:1b:59:65:d8:e9:72:e0:06:58:42: b7:c3:49:19:e5:01:26:04:56:a2:17:ff:03:72:a0: d1:54:74:81:6e:94:be:0e:25:72:69:b1:af:a0:e9: c0:ec:74:88:e8:b1:df:44:c8:bb:cd:83:9f:8e:1d: 85:a6:d5:2b:c6:21:bb:47:4a:77:c5:d9:fb:ad:da: 19:d0:1d:c5:cc:53:b4:d2:f7:d3:00:b8:0f:c9:a4: 39:c4:05:cd:0c:bb:06:a6:fb:b4:4f:ff:e0:69:6c: 31:18:34:6e:91:20:ab:8a:7e:35:e5:1a:96:8a:90: a1:21:44:47:ca:70:95:b4:d0:36:64:93:1c:aa:f9: 6c:e9:88:d7:ea:83:66:24:92:28:02:d9:af:02:14: 7c:ba:58:f6:48:af:bc:95:80:4b:a0:2f:ed:35:ac: b9:55:6f:bd:8c:2e:1b:25:0f:24:8d:0b:d5:f2:ab: 0a:5a:5b:89:1f:85:2b:17:a4:53:fe:2f:52:91:6a: 29:06:71:41:e4:c2:a9:1e:0b:f9:78:13:97:b3:98: 07:d0:39:8f:ff:54:5f:71:6c:c3:20:9b:c7:d8:63: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6A:8C:E0:40:D6:57:3E:03:44:57:7E:BC:AC:02:47:C7:92:CD:6D X509v3 Authority Key Identifier: keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:44:ba:93:3d:98:ab:1e:f1:99:73:bf:a2:38:94:3e:44:0f: c6:e0:ed:6b:53:02:68:42:45:60:af:58:8c:1a:0e:99:f0:ba: 74:2a:bb:94:40:57:91:78:4a:42:cd:b4:a8:be:66:06:68:bb: 68:0c:cb:d8:76:0c:96:5e:e7:35:0f:7f:5e:ca:b9:23:47:53: 0e:11:f8:f1:97:4d:c9:bc:cf:cc:91:37:30:24:b4:65:36:da: 94:db:41:de:5a:62:e4:74:46:fb:d4:c8:ea:75:e0:07:c8:af: 1f:51:8a:bc:0c:39:74:b4:d5:b3:d2:c6:e5:85:57:f0:06:30: 24:7f:a8:3e:e8:b0:6a:f2:3f:c4:31:d4:cb:c8:a0:29:2a:67: 4d:b1:1a:f8:a4:ae:99:fc:8b:34:6e:84:85:ab:95:1c:75:cb: fb:d6:d4:08:9a:d5:74:a4:09:91:ad:ce:2a:f5:c0:23:8b:e5: e1:00:a9:d3:85:fe:66:32:13:59:9b:5a:97:b7:20:e4:12:a6: 24:67:8a:98:a0:0f:c1:3c:a0:cd:ba:06:32:f0:64:46:4a:cf: d9:93:19:85:ab:b2:c5:18:5b:11:b0:58:0f:7a:16:26:b8:8c: 6a:3b:7e:69:e2:87:a0:8b:b7:6b:14:f4:7a:2a:22:ef:f5:9a: 51:ae:48:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h3awn6v377ksWZdn34MhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjNiZDEyMzEwYTkxMjMzMTYwZjAxMTc4NmE2MTEwMzBm MGZhNWYwHhcNMjYwMTI1MTkwMDMxWhcNMjYwMTI2MTkwMDMxWjAzMTEwLwYDVQQD EyhmNDZhOGNlMDQwZDY1NzNlMDM0NDU3N2ViY2FjMDI0N2M3OTJjZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBnaiqjQvXc3FZX8XrvlMcvWUOKq wSirUKy02jebY+AGIBtZZdjpcuAGWEK3w0kZ5QEmBFaiF/8DcqDRVHSBbpS+DiVy abGvoOnA7HSI6LHfRMi7zYOfjh2FptUrxiG7R0p3xdn7rdoZ0B3FzFO00vfTALgP yaQ5xAXNDLsGpvu0T//gaWwxGDRukSCrin415RqWipChIURHynCVtNA2ZJMcqvls 6YjX6oNmJJIoAtmvAhR8ulj2SK+8lYBLoC/tNay5VW+9jC4bJQ8kjQvV8qsKWluJ H4UrF6RT/i9SkWopBnFB5MKpHgv5eBOXs5gH0DmP/1RfcWzDIJvH2GOK+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRqjOBA1lc+A0RXfrysAkfHks1tMB8GA1UdIwQY MBaAFI0jvRIxCpEjMWDwEXhqYRAw8PpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEt NDk4YjlkNGY3NTdlLzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEtNDk4YjlkNGY3NTdl LzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiES6kz2Y qx7xmXO/ojiUPkQPxuDta1MCaEJFYK9YjBoOmfC6dCq7lEBXkXhKQs20qL5mBmi7 aAzL2HYMll7nNQ9/Xsq5I0dTDhH48ZdNybzPzJE3MCS0ZTbalNtB3lpi5HRG+9TI 6nXgB8ivH1GKvAw5dLTVs9LG5YVX8AYwJH+oPuiwavI/xDHUy8igKSpnTbEa+KSu mfyLNG6EhauVHHXL+9bUCJrVdKQJka3OKvXAI4vl4QCp04X+ZjITWZtal7cg5BKm JGeKmKAPwTygzboGMvBkRkrP2ZMZhauyxRhbEbBYD3oWJriMajt+aeKHoIu3axT0 eioi7/WaUa5IUg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:48 2026 by rpki-client