This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json) Hash identifier: 6tEUQGSuDyS0CmJjXnUwiofBOq257K7JOfyruZseUis= Subject key identifier: 43:36:56:08:E0:22:BF:EC:CE:57:64:1D:2A:2A:A3:54:C3:4E:31:6B Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Certificate serial: 019BFA9C36BF8F0C78D0BF5180B027DC4D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft Manifest number: 151C Signing time: Mon 26 Jan 2026 14:01:40 +0000 Manifest this update: Mon 26 Jan 2026 14:01:40 +0000 Manifest next update: Tue 27 Jan 2026 14:01:40 +0000 Files and hashes: 1: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (hash: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE=) 2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: gX3jQG2m4jHHuyS+RDf6ykxjzq+1m9/BuqLU2vQdSrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:36:bf:8f:0c:78:d0:bf:51:80:b0:27:dc:4d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Validity Not Before: Jan 26 14:01:40 2026 GMT Not After : Jan 27 14:01:40 2026 GMT Subject: CN=43365608e022bfecce57641d2a2aa354c34e316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:df:40:2b:7c:1e:bf:fe:66:1d:fc:fc:cd: 11:9a:4f:7d:ea:d4:bf:20:b1:05:2f:bf:4d:f8:cd: 6e:06:29:82:a7:14:59:8b:6c:2a:eb:f3:9a:b8:90: de:3e:bd:cb:0d:9f:99:34:b7:51:72:cf:bc:e3:9a: 04:bd:f2:51:c2:e7:a4:18:07:5f:ec:c6:34:8e:86: 28:92:8a:ee:78:85:0e:a1:cd:26:c3:a9:8d:7e:fd: b5:87:d2:5a:91:da:5b:f5:3c:d3:98:25:53:b0:9a: 96:af:a0:06:2d:67:cd:16:7c:fb:ec:1e:bd:b6:49: eb:f2:db:07:a7:60:6c:22:ff:dc:4a:6f:b9:d2:56: bf:52:b7:a4:c5:fd:2b:77:92:8d:a8:8a:9a:9a:89: 21:db:7d:5a:48:2e:bb:19:56:f2:e2:43:a5:33:f2: b6:c2:97:d3:32:97:c6:3f:6c:9c:4f:61:09:8b:8f: 2e:55:fb:93:f2:42:7c:f1:01:99:02:f0:99:6d:c0: 87:8d:6c:ff:2e:98:ea:be:52:dc:10:3d:03:08:aa: 53:e1:21:f6:19:d0:bf:5a:ad:4d:a2:74:81:07:81: 08:c0:12:0f:f3:ac:a5:61:52:9a:43:07:71:f4:8f: 03:6d:b8:6f:83:ff:11:cc:4a:98:c2:7f:03:e0:b1: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:56:08:E0:22:BF:EC:CE:57:64:1D:2A:2A:A3:54:C3:4E:31:6B X509v3 Authority Key Identifier: keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e6:0a:a0:d9:ab:3a:6c:01:db:65:18:ca:d7:fb:6d:6f:03: f7:bc:9b:36:1c:ea:c6:d0:d7:91:6e:e2:1f:a6:ee:54:f2:95: 0a:26:e3:fc:2d:db:50:5b:04:bc:05:6c:a6:90:53:11:53:99: 00:c9:af:f7:4e:cd:8c:61:c0:88:c5:47:1c:42:8f:0d:e5:4f: c6:61:12:1c:d8:9f:05:3f:df:dd:84:92:a7:27:4d:70:6d:81: ff:18:f2:67:b7:ff:10:97:3d:93:a3:52:65:2d:fa:1f:dd:c5: 1e:49:a0:b5:3c:5f:5a:b8:ff:72:a7:68:72:bc:04:61:89:bd: 23:b3:b7:3f:17:43:1d:24:0f:36:f9:5c:14:1c:dd:28:81:73: c8:15:42:52:bd:13:01:fd:e2:fe:e3:a4:5e:21:c5:c7:04:e4: 15:6c:bd:52:ed:11:c6:a5:cd:8f:03:ab:ee:ea:ee:db:c0:6c: 5b:29:39:25:26:d5:f6:5d:8b:f4:02:77:f7:d9:6e:d3:27:3a: b1:40:32:24:ee:94:a2:eb:06:db:ec:e8:27:4a:fa:cb:9b:04: 2d:3b:02:6b:4d:33:01:e8:79:01:4f:eb:1a:f1:b5:20:6a:c2: 3d:3e:7a:3c:11:fe:06:b0:a0:a5:bb:a8:4f:8d:1b:a4:5b:ae: f2:ff:d2:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nDa/jwx40L9RgLAn3E1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzRhNjdkYmVkNzQ0NGRkZDI3ZTgwMGZiNmMyMTAxM2E1 YjExYzYwHhcNMjYwMTI2MTQwMTQwWhcNMjYwMTI3MTQwMTQwWjAzMTEwLwYDVQQD Eyg0MzM2NTYwOGUwMjJiZmVjY2U1NzY0MWQyYTJhYTM1NGMzNGUzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPnfQCt8Hr/+Zh38/M0Rmk996tS/ ILEFL79N+M1uBimCpxRZi2wq6/OauJDePr3LDZ+ZNLdRcs+845oEvfJRwuekGAdf 7MY0joYokorueIUOoc0mw6mNfv21h9Jakdpb9TzTmCVTsJqWr6AGLWfNFnz77B69 tknr8tsHp2BsIv/cSm+50la/Urekxf0rd5KNqIqamokh231aSC67GVby4kOlM/K2 wpfTMpfGP2ycT2EJi48uVfuT8kJ88QGZAvCZbcCHjWz/LpjqvlLcED0DCKpT4SH2 GdC/Wq1NonSBB4EIwBIP86ylYVKaQwdx9I8Dbbhvg/8RzEqYwn8D4LFjlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM2VgjgIr/szldkHSoqo1TDTjFrMB8GA1UdIwQY MBaAFI7Epn2+10RN3SfoAPtsIQE6WxHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMt MGNlZjUxMmY1MDA5LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMtMGNlZjUxMmY1MDA5 LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOYKoNmr OmwB22UYytf7bW8D97ybNhzqxtDXkW7iH6buVPKVCibj/C3bUFsEvAVsppBTEVOZ AMmv907NjGHAiMVHHEKPDeVPxmESHNifBT/f3YSSpydNcG2B/xjyZ7f/EJc9k6NS ZS36H93FHkmgtTxfWrj/cqdocrwEYYm9I7O3PxdDHSQPNvlcFBzdKIFzyBVCUr0T Af3i/uOkXiHFxwTkFWy9Uu0RxqXNjwOr7uru28BsWyk5JSbV9l2L9AJ399lu0yc6 sUAyJO6UousG2+zoJ0r6y5sELTsCa00zAeh5AU/rGvG1IGrCPT56PBH+BrCgpbuo T40bpFuu8v/SLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:02:55 2026 by rpki-client