This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json) Hash identifier: 6rMvcVQ7rpARdVdqU1DyIJTw4tWWMI29gbLpbwf3zlk= Subject key identifier: 6D:B9:54:81:FA:EC:80:03:59:BA:34:C3:08:F9:A4:96:2B:FF:9D:82 Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Certificate serial: 019BF2E29E1F51DAE8A6640961BAF4561C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft Manifest number: 13D2 Signing time: Sun 25 Jan 2026 02:01:36 +0000 Manifest this update: Sun 25 Jan 2026 02:01:36 +0000 Manifest next update: Mon 26 Jan 2026 02:01:36 +0000 Files and hashes: 1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=) 2: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=) 3: 6XbdzZ0343AiAMot2lsEtL8Y73k.roa (hash: RKYj6u+oIhdczp8YiuEdWuaseQogktsrdHlUVZ+HEQQ=) 4: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=) 5: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=) 6: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=) 7: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: X6/d0ozov6iDUkaYPEnW7dE3qx8fESIqG8A+lQs/yew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:9e:1f:51:da:e8:a6:64:09:61:ba:f4:56:1c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Validity Not Before: Jan 25 02:01:36 2026 GMT Not After : Jan 26 02:01:36 2026 GMT Subject: CN=6db95481faec800359ba34c308f9a4962bff9d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:56:66:3b:23:c9:50:4f:b9:45:d7:33:56: 6d:95:ee:4d:1b:01:9c:e4:20:57:af:0f:f6:91:d1: 09:b0:b5:26:f5:34:1c:59:e6:75:b7:dd:26:f6:ae: 94:be:7a:df:06:ff:6f:c9:d7:74:cf:92:a3:25:91: cb:d4:db:3d:7e:f9:f7:a9:6e:e0:fd:c4:31:4f:8e: a9:09:88:ff:df:07:c1:4e:07:0e:a1:f3:6e:f1:46: cf:31:2c:45:33:d1:0e:7e:fe:ae:6d:af:fd:6c:d9: 09:02:8f:a7:98:f5:93:f6:5a:ed:b5:cb:9d:68:f3: 09:b6:03:31:ce:f6:ef:ef:85:f5:9f:5a:55:fa:7d: 16:31:d1:e6:cd:40:fc:46:4c:00:d5:d1:93:96:35: 83:b9:61:e7:eb:bb:ca:4f:e9:f5:43:f4:8a:f0:f1: af:23:f4:5b:1d:10:60:6c:93:43:51:e7:22:cc:27: 3a:04:b1:6f:75:02:bb:2a:31:66:de:a3:f5:85:e5: b4:82:9a:ac:6a:d4:c7:ea:1d:97:f6:51:44:fc:9a: 56:51:08:90:4c:76:a7:d7:2a:9e:27:bc:65:ec:cf: 6d:ff:bd:28:bf:e5:53:ed:01:4c:7c:6f:18:40:fe: 2e:d0:46:76:de:0d:05:89:92:d8:5a:b5:4b:35:d3: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B9:54:81:FA:EC:80:03:59:BA:34:C3:08:F9:A4:96:2B:FF:9D:82 X509v3 Authority Key Identifier: keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2c:50:8b:f7:ef:e9:f5:fe:e7:04:1d:55:4c:71:21:ee:64: 41:2a:fc:9f:71:6c:0b:c1:d7:08:86:8b:4e:b6:e2:cf:6c:5f: f0:83:9a:93:3c:01:53:20:4f:8c:ce:82:bf:1f:32:b6:ca:eb: 22:ea:2e:c4:57:c7:f4:e6:ab:9c:e6:72:a0:b2:b3:f2:6d:a0: 02:b8:57:1a:e8:52:6e:98:c4:87:6c:ea:9c:12:7c:5e:c6:d4: a4:28:42:10:33:c7:5c:2c:95:ac:0d:79:6f:de:aa:1e:fa:2f: 3d:f7:1c:51:0f:b0:45:05:59:de:5c:8c:6a:7b:d8:6a:6c:17: f0:d6:76:ea:35:90:6e:d1:84:d7:58:71:ff:6d:4b:f8:58:d5: 55:ee:37:9c:13:f1:e4:94:f3:d6:77:27:df:22:dd:85:1a:59: 22:88:f7:ac:bc:d7:71:29:ae:cc:59:e9:70:fc:c5:2e:a3:95: 81:0e:0c:91:97:22:5f:69:44:32:1e:0f:8a:47:fa:37:7e:5e: 4f:53:35:a1:f4:12:dd:fa:99:bd:68:4b:7c:97:7b:51:d9:d2: 1d:90:86:b6:66:dd:86:9d:e9:dd:05:b7:d6:92:cd:8d:5c:89: 5b:8f:f8:b7:30:22:54:32:f7:40:d9:b9:50:19:4f:0e:ea:ca: af:81:23:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4p4fUdropmQJYbr0VhwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk Mzk4YTMwHhcNMjYwMTI1MDIwMTM2WhcNMjYwMTI2MDIwMTM2WjAzMTEwLwYDVQQD Eyg2ZGI5NTQ4MWZhZWM4MDAzNTliYTM0YzMwOGY5YTQ5NjJiZmY5ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+RWZjsjyVBPuUXXM1Ztle5NGwGc 5CBXrw/2kdEJsLUm9TQcWeZ1t90m9q6UvnrfBv9vydd0z5KjJZHL1Ns9fvn3qW7g /cQxT46pCYj/3wfBTgcOofNu8UbPMSxFM9EOfv6uba/9bNkJAo+nmPWT9lrttcud aPMJtgMxzvbv74X1n1pV+n0WMdHmzUD8RkwA1dGTljWDuWHn67vKT+n1Q/SK8PGv I/RbHRBgbJNDUecizCc6BLFvdQK7KjFm3qP1heW0gpqsatTH6h2X9lFE/JpWUQiQ THan1yqeJ7xl7M9t/70ov+VT7QFMfG8YQP4u0EZ23g0FiZLYWrVLNdPclwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG25VIH67IADWbo0wwj5pJYr/52CMB8GA1UdIwQY MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt YzhmOWJlN2QxOWRmLzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSxQi/fv 6fX+5wQdVUxxIe5kQSr8n3FsC8HXCIaLTrbiz2xf8IOakzwBUyBPjM6Cvx8ytsrr IuouxFfH9OarnOZyoLKz8m2gArhXGuhSbpjEh2zqnBJ8XsbUpChCEDPHXCyVrA15 b96qHvovPfccUQ+wRQVZ3lyManvYamwX8NZ26jWQbtGE11hx/21L+FjVVe43nBPx 5JTz1ncn3yLdhRpZIoj3rLzXcSmuzFnpcPzFLqOVgQ4MkZciX2lEMh4Pikf6N35e T1M1ofQS3fqZvWhLfJd7UdnSHZCGtmbdhp3p3QW31pLNjVyJW4/4tzAiVDL3QNm5 UBlPDurKr4Ejig== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:38 2026 by rpki-client