This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json) Hash identifier: qXPGufsnQDjuW8jp40KERZDiUvGsvfIHm4icNqIE6Ag= Subject key identifier: C3:B1:1C:AD:31:91:4E:12:BA:98:AA:67:84:1D:2E:51:3C:BD:F4:5C Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Certificate serial: 019BF5AC4DFDEB898AD546F9258EEB7682E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 15:01:08 +0000 Manifest this update: Sun 25 Jan 2026 15:01:08 +0000 Manifest next update: Mon 26 Jan 2026 15:01:08 +0000 Files and hashes: 1: 7uFvNrEWLGYD2SP4hsWwx5YGhZc.roa (hash: 2VvPcjNZZjpDQlSJjpl0TNHy3CzxEknpcXQY1dMkcII=) 2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: n6myI+zAhHnTXaIeO2NwMcDEMvypXGfZMi0+nP6u598=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:4d:fd:eb:89:8a:d5:46:f9:25:8e:eb:76:82:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Validity Not Before: Jan 25 15:01:08 2026 GMT Not After : Jan 26 15:01:08 2026 GMT Subject: CN=c3b11cad31914e12ba98aa67841d2e513cbdf45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fe:c4:f3:53:84:14:12:75:fd:5d:c8:2a:56: a7:24:86:33:08:23:88:40:92:23:5b:f5:32:8d:8e: 19:80:aa:70:e6:8e:26:cc:18:95:1e:4a:86:8e:47: 50:a7:a1:1f:d5:15:84:fb:bd:d9:1f:a2:2a:da:c9: 00:fe:6d:aa:40:4d:16:aa:73:68:2e:e0:cb:82:2e: 3c:ef:ea:66:a8:ab:c3:9c:3b:d1:58:ff:5b:a4:a7: 3a:f1:64:5c:e4:0f:3e:c8:45:cf:b9:58:11:7e:4d: 8f:c7:c3:53:7c:12:dd:7a:17:c9:bb:7d:ca:cb:72: b0:12:2e:c3:13:21:ed:59:a6:02:46:d2:48:49:d3: 58:c5:83:ec:e0:49:6b:1d:c0:35:52:ae:0a:89:bf: e0:1d:a4:94:28:52:14:a9:b9:4e:fc:00:84:c9:7d: f6:6c:40:fb:63:a5:45:8c:14:71:0c:b8:31:cc:ce: 69:ae:d5:e1:3a:11:fb:a0:0b:91:56:e3:d3:33:2d: 24:39:83:c4:ee:98:b0:6a:ad:dc:bc:5e:0d:07:fe: c8:8d:c6:48:09:14:66:47:79:70:6b:5d:5d:f2:32: 78:db:10:d2:6e:7e:f8:85:e2:f1:7a:e0:32:8f:6f: ae:53:c7:ac:18:3c:a5:5d:35:a5:5f:39:0b:7d:a2: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:1C:AD:31:91:4E:12:BA:98:AA:67:84:1D:2E:51:3C:BD:F4:5C X509v3 Authority Key Identifier: keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:12:95:7b:b6:ad:66:c8:ea:2c:41:c0:52:4a:33:39:5c:f3: 2c:11:dc:b5:c5:cf:af:ee:86:bf:63:89:81:76:2c:06:c9:a4: 8e:5e:7c:cd:97:18:e8:af:a6:13:f7:77:14:69:22:57:36:c3: 1a:ef:ee:b5:73:75:65:f5:97:7c:3b:ed:ad:09:1d:3a:21:3d: 99:7b:bc:ee:51:34:c8:ca:10:cb:01:e1:14:f9:59:f5:ed:3d: 14:13:89:30:92:54:8b:cb:71:22:c9:9c:6e:66:3f:86:36:2d: 1f:28:1e:37:11:6c:4c:54:e7:96:a1:48:ca:16:a9:95:b9:6d: 71:52:5d:2f:d7:e2:2e:dc:a6:5b:cb:68:e9:b7:68:4a:08:f1: b4:58:03:9c:86:9f:f3:53:75:bb:d3:4d:b3:ed:60:19:11:da: 48:65:74:83:f0:a5:7e:c2:96:b1:f1:dd:4a:46:ef:2a:66:33: b9:f9:df:32:a6:e7:e4:73:70:fb:7d:80:1c:4e:0e:72:d6:ed: b7:44:6b:32:7f:5b:92:5b:e9:49:b1:66:85:96:2b:fc:d8:0c: 1e:28:3b:67:62:3e:80:16:97:29:b2:eb:4e:e0:7a:a5:46:1e: b6:01:6d:e4:39:70:42:b7:5d:64:85:c2:d9:73:13:6e:d3:03: 0d:b0:12:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rE3964mK1Ub5JY7rdoLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM3MDRkNTUwMWVkNzVhNmUyMDk2NmViZjA3YTM2NTU1 YjFhYjYwHhcNMjYwMTI1MTUwMTA4WhcNMjYwMTI2MTUwMTA4WjAzMTEwLwYDVQQD EyhjM2IxMWNhZDMxOTE0ZTEyYmE5OGFhNjc4NDFkMmU1MTNjYmRmNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f7E81OEFBJ1/V3IKlanJIYzCCOI QJIjW/UyjY4ZgKpw5o4mzBiVHkqGjkdQp6Ef1RWE+73ZH6Iq2skA/m2qQE0WqnNo LuDLgi487+pmqKvDnDvRWP9bpKc68WRc5A8+yEXPuVgRfk2Px8NTfBLdehfJu33K y3KwEi7DEyHtWaYCRtJISdNYxYPs4ElrHcA1Uq4Kib/gHaSUKFIUqblO/ACEyX32 bED7Y6VFjBRxDLgxzM5prtXhOhH7oAuRVuPTMy0kOYPE7piwaq3cvF4NB/7IjcZI CRRmR3lwa11d8jJ42xDSbn74heLxeuAyj2+uU8esGDylXTWlXzkLfaKRcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOxHK0xkU4SupiqZ4QdLlE8vfRcMB8GA1UdIwQY MBaAFI5jcE1VAe11puIJZuvwejZVWxq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUt Yzk0N2UxNmMyYzYxLzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUtYzk0N2UxNmMyYzYx LzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBKVe7at ZsjqLEHAUkozOVzzLBHctcXPr+6Gv2OJgXYsBsmkjl58zZcY6K+mE/d3FGkiVzbD Gu/utXN1ZfWXfDvtrQkdOiE9mXu87lE0yMoQywHhFPlZ9e09FBOJMJJUi8txIsmc bmY/hjYtHygeNxFsTFTnlqFIyhaplbltcVJdL9fiLtymW8to6bdoSgjxtFgDnIaf 81N1u9NNs+1gGRHaSGV0g/ClfsKWsfHdSkbvKmYzufnfMqbn5HNw+32AHE4Octbt t0RrMn9bklvpSbFmhZYr/NgMHig7Z2I+gBaXKbLrTuB6pUYetgFt5DlwQrddZIXC 2XMTbtMDDbASxg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:36 2026 by rpki-client