This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json) Hash identifier: opLaEZkhkcA9kBZboyvVRM976qgkPStaBLDZLC5VQ7I= Subject key identifier: 94:44:E5:8B:44:4A:BA:18:1D:4B:A1:C3:02:FD:72:6E:52:BF:42:78 Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Certificate serial: 019BF61A39323F2D85AEDE2D98869BC557F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft Manifest number: CA Signing time: Sun 25 Jan 2026 17:01:12 +0000 Manifest this update: Sun 25 Jan 2026 17:01:12 +0000 Manifest next update: Mon 26 Jan 2026 17:01:12 +0000 Files and hashes: 1: VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa (hash: rSBhJErUYfpEXMJHn/N2TLGG8HzzTS+TuaT38co035w=) 2: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: 9Qb7iAqL9tXwgu8Exaf2sdnck+e1IUjeHdshEC8U+h4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:39:32:3f:2d:85:ae:de:2d:98:86:9b:c5:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Validity Not Before: Jan 25 17:01:12 2026 GMT Not After : Jan 26 17:01:12 2026 GMT Subject: CN=9444e58b444aba181d4ba1c302fd726e52bf4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:a3:b4:43:8e:e2:26:d5:6a:72:e3:39:6a: 30:09:fd:0c:35:53:48:80:95:9e:f0:6b:a9:7a:ce: 32:d8:75:49:53:08:1a:af:e7:eb:35:4a:46:81:a8: 1c:8c:18:77:c2:05:05:ee:63:63:8d:15:e5:dc:d6: 98:81:0e:dd:3e:19:76:b3:3c:a8:f0:ee:40:1b:8f: ef:23:a8:3c:d3:95:88:04:c6:7a:b1:ec:b0:22:84: 28:05:bb:3c:3c:b4:a0:97:e6:bf:dd:d8:b7:c2:8e: 4b:05:60:6f:d6:43:a9:70:75:a0:ec:1f:22:21:33: a3:0b:a8:4c:a4:ef:32:97:20:d9:0f:3f:00:03:5d: d1:cd:bb:bc:69:07:ba:39:fa:24:e9:0f:87:5c:66: c7:13:41:93:0f:66:47:a1:f5:28:24:6e:e7:07:9e: bf:b0:97:71:11:4a:8b:4c:65:25:e9:fa:33:dd:bf: 85:7c:57:ba:f9:28:35:92:85:a1:67:58:b5:cb:e2: e9:fc:3b:66:12:01:65:58:1c:0b:99:e8:00:5e:56: 5b:b5:60:f4:bc:4a:b5:06:15:e3:7d:de:23:40:48: d8:1d:e4:1f:3a:68:12:7b:0f:c5:81:b6:6c:24:c2: ff:4b:d4:ed:df:a7:5f:6a:b1:4a:75:0b:48:c9:e8: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:E5:8B:44:4A:BA:18:1D:4B:A1:C3:02:FD:72:6E:52:BF:42:78 X509v3 Authority Key Identifier: keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:f2:dd:aa:37:e8:ac:4c:6c:54:49:95:85:af:28:44:49: a3:0d:9b:ca:38:10:77:6d:f7:50:c8:8e:53:96:ae:90:9a:e0: 2e:ca:e2:04:8e:30:f8:b8:90:a8:18:ef:4a:8c:b2:b2:92:a7: 9e:d5:b2:e2:09:f0:60:7a:94:67:e8:9a:49:42:b6:91:ce:3c: 16:11:1c:a7:06:37:dd:84:00:88:23:5a:34:66:66:a0:ec:79: ea:48:c6:fa:59:d6:e1:27:05:27:43:68:09:00:d0:eb:fa:c4: 69:8a:0f:81:4a:75:46:ef:fa:6a:fa:3e:21:85:71:74:ad:0e: e4:50:d1:1f:2a:2f:86:6f:36:69:36:83:de:b0:93:80:99:55: 2d:7d:27:74:f7:90:2b:c6:80:46:90:dd:8f:20:3c:3d:29:df: 75:08:3e:a6:0e:47:d2:77:c7:a0:2c:e3:25:01:c3:8d:5d:95: d8:36:a2:79:c1:1e:86:bc:72:cf:98:9d:ec:95:81:65:9b:2a: 94:b7:89:2a:5a:fa:73:b4:aa:f9:d5:61:68:41:de:5f:bf:4b: 06:85:4f:d0:2a:0a:be:86:2c:aa:1f:07:22:94:4f:cc:97:f8: 40:32:2a:0e:d7:0b:81:7a:a1:f0:3c:96:3a:7c:80:f7:4f:ef: 58:7f:7a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GjkyPy2Frt4tmIabxVf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmYzYzczOWU1MTcxZTRjMDI2ZGE5NmU1YjUwZmZjMjY3 ZDYwNmYwHhcNMjYwMTI1MTcwMTEyWhcNMjYwMTI2MTcwMTEyWjAzMTEwLwYDVQQD Eyg5NDQ0ZTU4YjQ0NGFiYTE4MWQ0YmExYzMwMmZkNzI2ZTUyYmY0Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ijtEOO4ibVanLjOWowCf0MNVNI gJWe8Gupes4y2HVJUwgar+frNUpGgagcjBh3wgUF7mNjjRXl3NaYgQ7dPhl2szyo 8O5AG4/vI6g805WIBMZ6seywIoQoBbs8PLSgl+a/3di3wo5LBWBv1kOpcHWg7B8i ITOjC6hMpO8ylyDZDz8AA13Rzbu8aQe6Ofok6Q+HXGbHE0GTD2ZHofUoJG7nB56/ sJdxEUqLTGUl6foz3b+FfFe6+Sg1koWhZ1i1y+Lp/DtmEgFlWBwLmegAXlZbtWD0 vEq1BhXjfd4jQEjYHeQfOmgSew/FgbZsJML/S9Tt36dfarFKdQtIyeiMowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRE5YtESroYHUuhwwL9cm5Sv0J4MB8GA1UdIwQY MBaAFI4vPHOeUXHkwCbaluW1D/wmfWBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTkt MWFlYzE0NThiZGI3LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTktMWFlYzE0NThiZGI3 LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVjy3ao3 6KxMbFRJlYWvKERJow2byjgQd233UMiOU5aukJrgLsriBI4w+LiQqBjvSoyyspKn ntWy4gnwYHqUZ+iaSUK2kc48FhEcpwY33YQAiCNaNGZmoOx56kjG+lnW4ScFJ0No CQDQ6/rEaYoPgUp1Ru/6avo+IYVxdK0O5FDRHyovhm82aTaD3rCTgJlVLX0ndPeQ K8aARpDdjyA8PSnfdQg+pg5H0nfHoCzjJQHDjV2V2DaiecEehrxyz5id7JWBZZsq lLeJKlr6c7Sq+dVhaEHeX79LBoVP0CoKvoYsqh8HIpRPzJf4QDIqDtcLgXqh8DyW OnyA90/vWH96QA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:00 2026 by rpki-client