This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json) Hash identifier: J+0fNI339Z02WxuMe6xrtqMtcZDIgwSO1oW+zlwUNfA= Subject key identifier: A4:EE:7E:DE:3D:EE:1B:B6:B7:1F:79:56:59:16:0F:E7:A6:FB:53:5D Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66 Certificate serial: 019BF46264E61FF2F246602A70668409FA30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft Manifest number: 0CE5 Signing time: Sun 25 Jan 2026 09:00:47 +0000 Manifest this update: Sun 25 Jan 2026 09:00:47 +0000 Manifest next update: Mon 26 Jan 2026 09:00:47 +0000 Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=) 2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=) 3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 5MO+DmVRXN4yd7/zyXtVxpmiIfvDhfq2VtdmhaLwV9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:64:e6:1f:f2:f2:46:60:2a:70:66:84:09:fa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66 Validity Not Before: Jan 25 09:00:47 2026 GMT Not After : Jan 26 09:00:47 2026 GMT Subject: CN=a4ee7ede3dee1bb6b71f795659160fe7a6fb535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:1d:e1:a6:99:8f:02:54:0f:35:49:76:8e: e8:04:64:25:29:22:fb:81:b9:41:25:cf:02:82:22: 04:97:e1:73:69:d9:7f:4f:11:9b:b5:21:fa:c8:c5: 69:20:2d:6f:f1:a1:ad:ad:e9:bc:61:4e:24:37:22: 2c:0a:0c:0a:bb:27:a7:d7:86:19:77:79:c7:6b:9a: 4f:68:d8:69:3b:ee:04:b0:08:69:3b:2e:5e:22:99: 86:41:7a:31:d1:98:91:d3:ef:f6:30:f4:12:cf:0c: 57:bc:fe:29:1a:56:53:d3:59:4b:a4:59:5a:cb:c7: ba:aa:b6:0b:43:32:50:29:86:22:e0:2e:20:86:eb: 7a:b9:27:08:93:79:61:9f:37:f9:31:63:f6:48:46: b1:34:47:fa:47:5c:00:23:76:cd:e6:cd:92:11:93: dd:6e:e6:30:41:b9:f9:3a:19:3f:36:b5:c1:fd:cf: 96:1f:a5:ec:30:ab:13:d0:43:b3:31:c8:21:59:0f: f8:ef:29:7a:08:18:96:6e:a5:db:21:96:76:b7:cd: 65:94:d0:01:68:c3:61:ca:2e:51:0f:5c:5a:2d:bb: 2e:e7:38:dd:fb:8e:f8:ac:a6:89:af:7d:d5:c1:18: d3:00:90:60:2f:11:b7:1e:fb:38:50:04:3e:32:39: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EE:7E:DE:3D:EE:1B:B6:B7:1F:79:56:59:16:0F:E7:A6:FB:53:5D X509v3 Authority Key Identifier: keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:02:2d:a7:47:73:fb:0a:8d:3d:97:20:30:d9:61:7e:cf:f8: 43:84:32:17:1d:b8:8c:ee:2a:fb:99:4e:f8:2c:10:b8:8a:37: 89:39:6e:3a:4c:26:7c:20:0a:4a:e8:3b:83:57:c4:ce:2a:dc: b2:13:e9:ee:93:d1:c2:05:a6:05:d6:ff:24:42:52:fb:bc:7d: f9:52:73:78:a4:28:64:17:bb:54:95:d0:1f:8d:ed:03:a1:36: d1:f2:50:40:33:6c:56:92:34:a4:0d:b5:4a:d6:dc:ea:de:6d: b1:e3:81:58:cf:fa:a5:a9:c6:dd:e6:54:45:97:3b:ff:c7:a2: 08:d6:fd:6e:ae:2a:5e:c9:c1:98:44:0d:bf:28:da:50:73:12: 9c:fb:2a:9b:21:46:0c:0e:ab:d3:01:28:5b:b7:26:0d:87:96: 0e:13:48:25:46:8a:b2:1e:38:3a:a2:a7:6d:8f:59:84:ad:ee: 48:7f:f1:f3:2d:4f:56:17:f9:c3:11:97:e8:4c:b1:36:f8:5a: 39:fe:ba:90:b7:da:dc:da:21:1d:1f:d1:4e:19:93:40:ee:c4: f3:f0:4a:63:36:19:7d:05:15:04:43:d8:47:b6:8b:ea:7c:af: 7a:ed:d0:63:3d:45:82:db:1a:c9:20:fa:0a:00:8c:4e:a4:b1: 7e:1c:cd:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YmTmH/LyRmAqcGaECfowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5 NjdjNjYwHhcNMjYwMTI1MDkwMDQ3WhcNMjYwMTI2MDkwMDQ3WjAzMTEwLwYDVQQD EyhhNGVlN2VkZTNkZWUxYmI2YjcxZjc5NTY1OTE2MGZlN2E2ZmI1MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCgd4aaZjwJUDzVJdo7oBGQlKSL7 gblBJc8CgiIEl+Fzadl/TxGbtSH6yMVpIC1v8aGtrem8YU4kNyIsCgwKuyen14YZ d3nHa5pPaNhpO+4EsAhpOy5eIpmGQXox0ZiR0+/2MPQSzwxXvP4pGlZT01lLpFla y8e6qrYLQzJQKYYi4C4ghut6uScIk3lhnzf5MWP2SEaxNEf6R1wAI3bN5s2SEZPd buYwQbn5Ohk/NrXB/c+WH6XsMKsT0EOzMcghWQ/47yl6CBiWbqXbIZZ2t81llNAB aMNhyi5RD1xaLbsu5zjd+474rKaJr33VwRjTAJBgLxG3Hvs4UAQ+MjkdXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTuft497hu2tx95VlkWD+em+1NdMB8GA1UdIwQY MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAItp0dz +wqNPZcgMNlhfs/4Q4QyFx24jO4q+5lO+CwQuIo3iTluOkwmfCAKSug7g1fEzirc shPp7pPRwgWmBdb/JEJS+7x9+VJzeKQoZBe7VJXQH43tA6E20fJQQDNsVpI0pA21 Stbc6t5tseOBWM/6panG3eZURZc7/8eiCNb9bq4qXsnBmEQNvyjaUHMSnPsqmyFG DA6r0wEoW7cmDYeWDhNIJUaKsh44OqKnbY9ZhK3uSH/x8y1PVhf5wxGX6EyxNvha Of66kLfa3NohHR/RThmTQO7E8/BKYzYZfQUVBEPYR7aL6nyveu3QYz1FgtsaySD6 CgCMTqSxfhzNfA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:10 2026 by rpki-client