This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json) Hash identifier: CzzJytk7a1XbJ/QBmmArHDLd94EJoS+FaTOkhD14nos= Subject key identifier: 71:67:E7:36:3E:F1:70:34:1E:12:95:EC:B2:65:BC:07:F4:36:E4:09 Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c Certificate serial: 019BF7D24A7D7E0F1B9108482167D7F2977D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft Manifest number: 177B Signing time: Mon 26 Jan 2026 01:01:52 +0000 Manifest this update: Mon 26 Jan 2026 01:01:52 +0000 Manifest next update: Tue 27 Jan 2026 01:01:52 +0000 Files and hashes: 1: SpWXQfnXhUu9qhkeG1TVG0H4SQU.roa (hash: gNWnU3IuDkhC9ei21eiBQWzWKaO3beh6JvvEKmw7ib0=) 2: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: YhzR45HxHZj1Vz7Mkzf3U2g0PpqT7XyImigDcfacqRw=) 3: opR1RSlbkE3ELuhyBbafM8IbPaE.roa (hash: XOjjU1LJeZo/s26HxamkSPgFbekl7O6VlvxsLnn7lEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:4a:7d:7e:0f:1b:91:08:48:21:67:d7:f2:97:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c Validity Not Before: Jan 26 01:01:52 2026 GMT Not After : Jan 27 01:01:52 2026 GMT Subject: CN=7167e7363ef170341e1295ecb265bc07f436e409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:c2:b7:1e:d8:0c:74:e6:6f:af:d2:39:f1: ab:31:b1:b0:78:59:35:12:24:c2:ce:08:58:f3:4e: 3d:9f:e8:66:3f:0c:72:e4:21:4b:1a:1a:fb:82:58: d4:40:52:84:6b:cb:29:19:c8:ab:db:2a:23:8f:fa: 12:72:1a:a3:e1:4e:ca:4c:c9:f4:e4:53:09:87:49: 61:4d:90:1f:85:51:c3:62:ac:bf:59:0e:77:a1:5a: a8:db:7f:55:10:cc:de:93:aa:2f:7e:c3:de:5a:bc: 13:c8:00:63:6c:28:24:6d:c7:37:0a:74:2c:50:bc: bd:25:77:45:19:bd:b0:f0:2d:16:45:e2:5a:a5:7e: 54:3c:df:7f:c6:4e:14:80:ee:10:76:e7:bb:20:68: 73:e1:d3:68:c2:49:7a:e5:7f:70:a8:2e:11:4b:99: 1d:68:8b:6a:80:e1:5f:1f:7f:be:5b:20:34:40:3d: ba:be:bf:dc:49:5f:61:08:47:a1:15:36:2c:6e:f2: 9c:87:0e:f4:51:33:0e:0d:58:f2:cc:8b:3b:8f:c5: 4d:7d:76:3a:9f:b3:72:4d:d1:7c:d5:02:5e:df:f4: c3:02:37:57:cd:f4:24:b1:1e:40:5e:a5:49:20:35: 7b:84:3d:ad:d2:ec:81:bd:45:a6:9e:ea:d0:41:2d: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:67:E7:36:3E:F1:70:34:1E:12:95:EC:B2:65:BC:07:F4:36:E4:09 X509v3 Authority Key Identifier: keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8b:9a:98:5e:00:da:b2:69:14:bd:db:fd:ff:21:ba:a0:f7: 82:58:39:d9:29:61:2d:37:39:21:be:75:b9:46:4c:7d:19:e0: fc:4d:75:9a:a8:46:a5:a5:75:d6:94:4a:87:a6:a7:8e:30:b4: 43:d9:ae:f4:7e:cc:3b:60:8b:70:10:82:06:06:b4:fd:df:b8: c9:6b:db:d1:24:93:22:17:89:c4:e7:7a:cb:55:d9:ae:ad:c5: 45:b4:a4:dc:92:4f:c5:49:7a:7c:94:7a:16:d2:ad:86:d0:66: 66:ee:a2:b5:20:a2:e6:38:18:50:a2:00:fc:b3:70:b7:4f:bf: 26:d0:d2:cf:eb:c5:98:e6:f5:71:61:87:91:6b:7e:f8:67:41: aa:c6:46:3c:15:e0:32:88:c1:7f:c8:6f:d0:2a:3b:92:b6:55: e4:67:2b:25:72:a4:43:f3:b1:d1:d9:d6:3e:ef:8f:2a:83:ba: 1a:6c:93:59:39:38:f7:b9:21:e0:9e:b2:e6:5f:6f:75:d1:77: 40:cb:60:d6:52:96:ef:7d:96:6e:69:04:39:65:24:8e:52:44: c6:df:12:81:75:e8:e1:5d:e5:a0:c4:48:d1:46:32:d6:e2:19: b1:bb:13:2e:d8:6e:f3:8c:2e:c7:1a:d9:8b:70:a5:4a:ab:34: 1e:14:45:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kp9fg8bkQhIIWfX8pd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOTBiZDI4NzAwNTBjODQ0NzdhMTYxZWIwOTBmMDVlYjk2 MjAxNmMwHhcNMjYwMTI2MDEwMTUyWhcNMjYwMTI3MDEwMTUyWjAzMTEwLwYDVQQD Eyg3MTY3ZTczNjNlZjE3MDM0MWUxMjk1ZWNiMjY1YmMwN2Y0MzZlNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mrCtx7YDHTmb6/SOfGrMbGweFk1 EiTCzghY8049n+hmPwxy5CFLGhr7gljUQFKEa8spGcir2yojj/oSchqj4U7KTMn0 5FMJh0lhTZAfhVHDYqy/WQ53oVqo239VEMzek6ovfsPeWrwTyABjbCgkbcc3CnQs ULy9JXdFGb2w8C0WReJapX5UPN9/xk4UgO4Qdue7IGhz4dNowkl65X9wqC4RS5kd aItqgOFfH3++WyA0QD26vr/cSV9hCEehFTYsbvKchw70UTMODVjyzIs7j8VNfXY6 n7NyTdF81QJe3/TDAjdXzfQksR5AXqVJIDV7hD2t0uyBvUWmnurQQS0gzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFn5zY+8XA0HhKV7LJlvAf0NuQJMB8GA1UdIwQY MBaAFI6QvShwBQyER3oWHrCQ8F65YgFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMt ZWNiODA3MDJhMTE3LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMtZWNiODA3MDJhMTE3 LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIuamF4A 2rJpFL3b/f8huqD3glg52SlhLTc5Ib51uUZMfRng/E11mqhGpaV11pRKh6anjjC0 Q9mu9H7MO2CLcBCCBga0/d+4yWvb0SSTIheJxOd6y1XZrq3FRbSk3JJPxUl6fJR6 FtKthtBmZu6itSCi5jgYUKIA/LNwt0+/JtDSz+vFmOb1cWGHkWt++GdBqsZGPBXg MojBf8hv0Co7krZV5GcrJXKkQ/Ox0dnWPu+PKoO6GmyTWTk497kh4J6y5l9vddF3 QMtg1lKW732WbmkEOWUkjlJExt8SgXXo4V3loMRI0UYy1uIZsbsTLthu84wuxxrZ i3ClSqs0HhRFfw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:12 2026 by rpki-client