This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft File: _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json) Hash identifier: vh8AhdCmoSFd8ykeIS/HU1YkaNDGdFWiGyCEIN532WQ= Subject key identifier: 2F:34:59:25:81:2C:54:A6:70:DD:75:DE:12:AF:36:DB:66:00:EC:07 Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2 Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2 Certificate serial: 019BF83F71A99E928A7743B4C880082F805C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 03:01:05 +0000 Manifest this update: Mon 26 Jan 2026 03:01:05 +0000 Manifest next update: Tue 27 Jan 2026 03:01:05 +0000 Files and hashes: 1: 7B0JN3TZzsWH3xWnjPsFalxLsrU.roa (hash: RqRaE/k1aztxqp++Q0wssZB3S2oxh71O7HLy7VlmBJg=) 2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: CCVux9tjOORPkLZ7VzirMNFzfQjwM94/fkQU/KzzB0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:71:a9:9e:92:8a:77:43:b4:c8:80:08:2f:80:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2 Validity Not Before: Jan 26 03:01:05 2026 GMT Not After : Jan 27 03:01:05 2026 GMT Subject: CN=2f345925812c54a670dd75de12af36db6600ec07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:7a:29:ce:af:6a:6b:0a:de:7d:19:fd:24: 17:99:20:b9:6d:31:3e:db:73:4f:f2:34:bf:d3:91: 39:91:4f:ab:23:cd:81:43:d3:11:d6:4b:c7:11:0c: 25:3b:2c:50:cd:59:91:bc:15:74:a6:41:1c:b7:11: e6:60:02:ea:48:bc:93:be:ab:fd:7c:88:64:ca:75: 97:ee:0f:9c:91:93:c6:27:50:0c:70:ee:38:2a:bc: a5:c3:8a:1e:00:25:f3:35:84:8f:54:52:48:95:bf: 02:da:e8:6f:84:d1:d8:69:14:89:39:02:0c:17:96: 29:b6:e5:b6:c2:52:a9:2c:80:44:8b:50:64:95:35: b4:ae:32:d3:c9:37:84:02:f2:63:6d:27:f8:22:eb: 29:33:7d:53:5f:a1:07:d5:ea:d7:6f:a6:a9:99:d1: 1a:2a:d1:1f:5a:b6:a3:82:7c:ba:dc:8a:5a:ae:f9: e2:6b:ef:d1:da:bd:61:f7:ce:43:f4:1f:39:09:7b: 94:53:f2:03:ff:1d:d3:93:a1:d8:67:07:d0:c2:1f: b2:f7:0b:be:db:b3:ea:37:77:7f:74:22:08:28:a7: d1:a8:ad:f7:f2:49:13:fe:f3:22:5e:c6:12:f4:76: 15:10:d3:a8:47:61:b5:b2:cc:40:b8:ab:b5:7c:f3: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:34:59:25:81:2C:54:A6:70:DD:75:DE:12:AF:36:DB:66:00:EC:07 X509v3 Authority Key Identifier: keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:16:90:99:c5:9c:77:a9:72:ee:a2:d6:0a:e6:87:95:23:eb: d8:74:98:13:17:df:f7:6b:53:be:b2:01:44:42:97:ce:ee:64: 31:c8:c8:78:2e:f9:29:8a:65:1c:3a:5d:4b:6a:a2:50:f3:f9: 5f:52:df:0c:bc:48:f5:0a:95:ef:cb:2e:9f:c3:ca:8d:26:e3: 7d:19:85:3b:15:62:80:ef:6a:13:90:a1:5f:c3:4d:81:b3:b0: 83:59:98:8f:07:a3:6a:b6:98:47:98:19:f3:68:28:62:67:00: 34:aa:41:dc:c9:40:75:3e:27:d8:4f:42:9e:16:09:2d:16:24: 0a:40:c5:52:9c:0e:fa:48:95:81:7a:ec:df:c5:92:02:4d:68: b6:b7:47:32:61:02:15:28:dd:06:e2:50:78:af:33:22:26:3b: 16:41:d9:bf:81:d3:e2:bd:5a:89:c4:0b:5e:67:ee:48:ba:d1: e6:5b:6f:10:50:0c:09:74:13:64:8b:93:c4:74:15:2a:2d:75: 7f:9d:05:44:a7:26:35:2d:d0:f8:f0:ab:c0:62:54:3a:ed:cf: 93:99:0e:55:0b:8b:5a:99:32:ff:6a:06:48:7a:58:ff:c1:d9: e1:6a:5e:c1:37:42:e3:ed:57:36:5a:29:37:2b:ca:7f:58:2c: 5e:a4:94:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3GpnpKKd0O0yIAIL4BcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWYyNGViZWYxMThiOTE2NWU1MmY2MWNhOTkzYmVlNDMw NjRlYzIwHhcNMjYwMTI2MDMwMTA1WhcNMjYwMTI3MDMwMTA1WjAzMTEwLwYDVQQD EygyZjM0NTkyNTgxMmM1NGE2NzBkZDc1ZGUxMmFmMzZkYjY2MDBlYzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/R6Kc6vamsK3n0Z/SQXmSC5bTE+ 23NP8jS/05E5kU+rI82BQ9MR1kvHEQwlOyxQzVmRvBV0pkEctxHmYALqSLyTvqv9 fIhkynWX7g+ckZPGJ1AMcO44Krylw4oeACXzNYSPVFJIlb8C2uhvhNHYaRSJOQIM F5YptuW2wlKpLIBEi1BklTW0rjLTyTeEAvJjbSf4IuspM31TX6EH1erXb6apmdEa KtEfWrajgny63Iparvnia+/R2r1h985D9B85CXuUU/ID/x3Tk6HYZwfQwh+y9wu+ 27PqN3d/dCIIKKfRqK338kkT/vMiXsYS9HYVENOoR2G1ssxAuKu1fPMaUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC80WSWBLFSmcN113hKvNttmAOwHMB8GA1UdIwQY MBaAFPyfJOvvEYuRZeUvYcqZO+5DBk7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDct MTUzYmY3ZTdlYzJhLzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDctMTUzYmY3ZTdlYzJh LzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABaQmcWc d6ly7qLWCuaHlSPr2HSYExff92tTvrIBREKXzu5kMcjIeC75KYplHDpdS2qiUPP5 X1LfDLxI9QqV78sun8PKjSbjfRmFOxVigO9qE5ChX8NNgbOwg1mYjwejaraYR5gZ 82goYmcANKpB3MlAdT4n2E9CnhYJLRYkCkDFUpwO+kiVgXrs38WSAk1otrdHMmEC FSjdBuJQeK8zIiY7FkHZv4HT4r1aicQLXmfuSLrR5ltvEFAMCXQTZIuTxHQVKi11 f50FRKcmNS3Q+PCrwGJUOu3Pk5kOVQuLWpky/2oGSHpY/8HZ4WpewTdC4+1XNlop NyvKf1gsXqSUEw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:54 2026 by rpki-client