This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json) Hash identifier: NTJSaSDeArWP4IN7FB9OjnBnlqAftt6km0OlipKMJHo= Subject key identifier: D8:F4:0D:87:3B:9C:40:57:1D:E1:D7:8D:B4:3B:B5:23:36:33:07:20 Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44 Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44 Certificate serial: 019BF1CF0E6A34C3BA1B9B5E3B63FB1ECA6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft Manifest number: 13E8 Signing time: Sat 24 Jan 2026 21:00:37 +0000 Manifest this update: Sat 24 Jan 2026 21:00:37 +0000 Manifest next update: Sun 25 Jan 2026 21:00:37 +0000 Files and hashes: 1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=) 2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=) 3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=) 4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: yUAIDMkV9zzeTithjWh1S6dfSLnggwJtcHW8QNgpaq8=) 5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:0e:6a:34:c3:ba:1b:9b:5e:3b:63:fb:1e:ca:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44 Validity Not Before: Jan 24 21:00:37 2026 GMT Not After : Jan 25 21:00:37 2026 GMT Subject: CN=d8f40d873b9c40571de1d78db43bb52336330720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:97:1f:c0:93:1d:51:42:b0:29:ce:87:64: 05:b1:c7:66:f2:21:e5:cb:a6:9c:42:c8:57:4d:38: 45:3b:fc:32:b4:f3:7c:73:51:fa:a9:02:22:02:a9: e7:98:26:18:86:f6:e8:30:91:8d:3d:cc:d7:14:60: bb:e6:5a:10:d0:b7:eb:44:bd:28:eb:83:83:75:f4: 08:4e:34:43:f0:f2:00:3d:aa:27:c5:7a:0a:85:dc: 1c:da:26:ef:c0:5f:d0:1e:c8:05:b3:6b:ee:26:34: e0:80:d6:78:82:46:96:10:d2:cd:23:94:7f:0a:9b: eb:b6:b7:9a:44:b3:53:eb:ca:a2:1d:53:c4:76:40: 31:a2:b6:a0:9c:8e:60:aa:de:e7:90:17:c0:45:12: 28:71:74:db:4a:c6:1e:81:ac:45:89:b8:cb:c3:4d: 36:9e:4a:6b:43:9a:51:f8:83:2d:a8:d4:09:5c:86: 00:2e:5c:d2:2b:07:78:a3:94:18:00:af:fd:8e:89: 2b:b5:b4:0e:8f:ba:38:f1:36:bb:06:66:2d:38:da: f5:f6:ce:0d:69:35:e5:01:9c:6b:45:bb:9e:91:3a: da:57:6b:b6:17:bb:18:dd:7f:5d:ac:bc:a7:5f:bd: 40:c6:45:d4:86:a5:bd:e5:2e:26:36:50:43:4f:63: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:0D:87:3B:9C:40:57:1D:E1:D7:8D:B4:3B:B5:23:36:33:07:20 X509v3 Authority Key Identifier: keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2b:ef:b8:49:88:11:d2:ba:d5:b1:7b:72:fc:15:32:15:dd: b7:68:c9:d4:ec:dd:15:bf:41:12:e8:e9:31:63:20:fc:09:ef: 75:6d:64:bd:e2:ef:48:f9:bc:23:7b:df:52:2c:3c:75:1e:d1: cb:4b:fe:99:79:39:61:08:c1:f7:36:3f:57:a6:4a:0b:dd:eb: 71:ca:ec:bd:d6:52:c5:95:8a:7c:bf:29:df:10:48:1f:c8:ae: 03:e8:fb:3b:66:62:04:60:91:7d:25:3a:17:11:b4:05:b6:90: c0:d2:97:a7:32:b8:c1:d3:1d:d2:18:25:3d:4b:4c:aa:16:ec: 4b:1f:e1:28:80:0c:4c:a5:33:bf:4f:40:ec:2b:c5:75:ca:35: e3:00:6a:76:a6:35:a8:33:29:ca:d1:1f:e6:df:f9:f4:50:e7: 3a:7d:cc:41:05:42:20:e2:c5:3a:d5:5c:f9:12:0c:d1:11:87: 49:89:05:85:a2:50:d2:72:db:3d:2d:b4:af:e9:b7:5a:ab:fe: 85:8f:6a:4a:2b:28:f5:38:d4:af:cf:1d:0a:05:3e:c6:14:cf: 74:61:bc:e1:a1:cc:21:11:18:ef:28:34:ff:93:7e:2b:f4:e8: be:53:3a:08:00:52:3b:8f:7c:5e:ea:9e:7b:9f:fa:dc:83:3c: 66:ad:1d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxzw5qNMO6G5teO2P7HsprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk M2ZjNDQwHhcNMjYwMTI0MjEwMDM3WhcNMjYwMTI1MjEwMDM3WjAzMTEwLwYDVQQD EyhkOGY0MGQ4NzNiOWM0MDU3MWRlMWQ3OGRiNDNiYjUyMzM2MzMwNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e6XH8CTHVFCsCnOh2QFscdm8iHl y6acQshXTThFO/wytPN8c1H6qQIiAqnnmCYYhvboMJGNPczXFGC75loQ0LfrRL0o 64ODdfQITjRD8PIAPaonxXoKhdwc2ibvwF/QHsgFs2vuJjTggNZ4gkaWENLNI5R/ CpvrtreaRLNT68qiHVPEdkAxoragnI5gqt7nkBfARRIocXTbSsYegaxFibjLw002 nkprQ5pR+IMtqNQJXIYALlzSKwd4o5QYAK/9jokrtbQOj7o48Ta7BmYtONr19s4N aTXlAZxrRbuekTraV2u2F7sY3X9drLynX71AxkXUhqW95S4mNlBDT2N3AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj0DYc7nEBXHeHXjbQ7tSM2MwcgMB8GA1UdIwQY MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyvvuEmI EdK61bF7cvwVMhXdt2jJ1OzdFb9BEujpMWMg/AnvdW1kveLvSPm8I3vfUiw8dR7R y0v+mXk5YQjB9zY/V6ZKC93rccrsvdZSxZWKfL8p3xBIH8iuA+j7O2ZiBGCRfSU6 FxG0BbaQwNKXpzK4wdMd0hglPUtMqhbsSx/hKIAMTKUzv09A7CvFdco14wBqdqY1 qDMpytEf5t/59FDnOn3MQQVCIOLFOtVc+RIM0RGHSYkFhaJQ0nLbPS20r+m3Wqv+ hY9qSiso9TjUr88dCgU+xhTPdGG84aHMIREY7yg0/5N+K/TovlM6CABSO498Xuqe e5/63IM8Zq0dmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:04:56 2026 by rpki-client