This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json) Hash identifier: w7SdiMrgCNH3F5iLHlWuBK1ceVmYGw2AJLPG5Lt4RyQ= Subject key identifier: B4:B1:1E:3B:DC:7B:2E:DC:53:1D:D9:CF:2A:A6:EF:1B:7D:52:FF:6C Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca Certificate serial: 019BF6879E5E820CA65ADAF1E8081CADCC12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft Manifest number: 1345 Signing time: Sun 25 Jan 2026 19:00:41 +0000 Manifest this update: Sun 25 Jan 2026 19:00:41 +0000 Manifest next update: Mon 26 Jan 2026 19:00:41 +0000 Files and hashes: 1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=) 2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: aNF3+4aKEzODpzmlYkZP1+jp/vQgaNG1thiufyJefLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:9e:5e:82:0c:a6:5a:da:f1:e8:08:1c:ad:cc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca Validity Not Before: Jan 25 19:00:41 2026 GMT Not After : Jan 26 19:00:41 2026 GMT Subject: CN=b4b11e3bdc7b2edc531dd9cf2aa6ef1b7d52ff6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:12:0c:7d:b8:4a:8e:69:75:a4:4d:fd:94: 15:7a:ab:d9:00:51:70:03:a7:51:9e:d0:46:45:67: 34:38:98:ff:d1:45:f1:8a:9b:05:be:9f:bf:f8:af: 91:a5:8b:fa:60:75:89:d3:fe:9c:73:4a:68:a9:bf: dd:16:b1:7d:2d:4f:fc:80:9c:6b:6f:2d:07:f4:80: 1f:9c:d9:26:ce:b2:4e:53:c3:59:ed:9a:6e:ee:94: 12:05:73:2c:f4:53:0f:82:f1:3d:a7:88:c8:12:dd: e8:4f:b6:e5:0d:f8:cd:77:6e:d8:ee:1e:59:38:fa: a2:bf:77:26:0d:a7:5b:42:fa:74:7f:8c:af:0c:94: c1:7e:84:5d:2d:d8:ad:a3:51:f4:5b:08:46:77:50: b3:9f:dc:d2:4f:20:10:c6:3d:1f:26:45:39:34:b0: 63:6c:33:34:93:23:05:5e:e3:94:41:ed:5b:22:12: 93:88:ee:8e:e0:4a:d1:d5:f8:70:9e:cb:bf:42:96: fe:2e:72:ae:c8:b4:9e:9e:9e:34:f8:2e:db:ec:21: b9:57:44:c5:55:07:b8:7b:ab:bf:17:fa:11:3c:e0: 48:a5:89:84:69:11:60:a4:e0:82:47:bb:11:b3:33: 1e:7d:91:91:8d:3c:de:10:f5:6b:19:f3:67:f0:00: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B1:1E:3B:DC:7B:2E:DC:53:1D:D9:CF:2A:A6:EF:1B:7D:52:FF:6C X509v3 Authority Key Identifier: keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a4:13:73:b9:23:30:99:20:da:4d:f4:e1:6f:4f:d7:33:9e: 9f:3f:45:48:fb:d1:4f:60:d6:79:a5:a3:c2:7e:45:ef:bd:72: f5:32:c3:d2:ff:68:ab:19:f9:af:1e:20:47:be:ec:54:38:e8: da:d3:85:b6:67:2b:da:f4:22:bd:03:5f:19:17:f0:b6:65:d2: f8:c1:b8:03:2a:31:a1:87:4f:77:dc:29:c6:5e:8a:99:d2:56: bc:e6:bb:c5:44:65:27:8d:90:42:49:42:13:ff:bc:8e:68:be: 22:4c:8e:2d:bc:ce:1d:36:61:a2:96:0b:ef:b2:a5:94:b6:09: ae:6e:9c:63:c6:1e:dc:ae:e6:9f:97:e3:6e:03:cd:7c:c4:27: 5b:15:91:c5:4e:67:1c:08:2c:0f:ed:59:f5:0e:01:d1:67:0d: fd:7d:ca:3c:e7:24:d5:b0:64:bb:b7:c9:62:e7:df:4e:21:38: a7:f1:c5:15:1f:59:5b:73:07:1c:f9:7e:e3:6e:fc:45:30:76: cd:27:b9:5a:e6:d2:bd:f9:70:f3:65:99:ad:ad:4b:08:53:86: 4b:72:4c:3d:12:0d:f4:be:7c:8b:03:2a:e5:e6:db:1b:9d:63: 42:47:40:a7:8e:4a:22:8f:14:34:d2:21:cd:28:58:a6:99:a7: 71:55:4f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h55eggymWtrx6AgcrcwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjhmNzkyOGMxMGZjMmI1NGI1YjU4OTQ0OGZlNzdkNDA0 MjE4Y2EwHhcNMjYwMTI1MTkwMDQxWhcNMjYwMTI2MTkwMDQxWjAzMTEwLwYDVQQD EyhiNGIxMWUzYmRjN2IyZWRjNTMxZGQ5Y2YyYWE2ZWYxYjdkNTJmZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22USDH24So5pdaRN/ZQVeqvZAFFw A6dRntBGRWc0OJj/0UXxipsFvp+/+K+RpYv6YHWJ0/6cc0poqb/dFrF9LU/8gJxr by0H9IAfnNkmzrJOU8NZ7Zpu7pQSBXMs9FMPgvE9p4jIEt3oT7blDfjNd27Y7h5Z OPqiv3cmDadbQvp0f4yvDJTBfoRdLdito1H0WwhGd1Czn9zSTyAQxj0fJkU5NLBj bDM0kyMFXuOUQe1bIhKTiO6O4ErR1fhwnsu/Qpb+LnKuyLSenp40+C7b7CG5V0TF VQe4e6u/F/oRPOBIpYmEaRFgpOCCR7sRszMefZGRjTzeEPVrGfNn8AAh1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSxHjvcey7cUx3Zzyqm7xt9Uv9sMB8GA1UdIwQY MBaAFI1o95KMEPwrVLW1iUSP531AQhjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYt ZDAxMTE1MDg5NDYzLzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYtZDAxMTE1MDg5NDYz LzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6QTc7kj MJkg2k304W9P1zOenz9FSPvRT2DWeaWjwn5F771y9TLD0v9oqxn5rx4gR77sVDjo 2tOFtmcr2vQivQNfGRfwtmXS+MG4AyoxoYdPd9wpxl6KmdJWvOa7xURlJ42QQklC E/+8jmi+IkyOLbzOHTZhopYL77KllLYJrm6cY8Ye3K7mn5fjbgPNfMQnWxWRxU5n HAgsD+1Z9Q4B0WcN/X3KPOck1bBku7fJYuffTiE4p/HFFR9ZW3MHHPl+4278RTB2 zSe5WubSvflw82WZra1LCFOGS3JMPRIN9L58iwMq5ebbG51jQkdAp45KIo8UNNIh zShYppmncVVPRw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:38 2026 by rpki-client