This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json) Hash identifier: IjKfmThOkpTvQpM32UWz0oo3DWMMwzO4giZnU0XwDaM= Subject key identifier: D8:53:91:04:D0:73:AA:9A:7B:62:A7:F2:1F:EE:AD:9E:C1:22:13:72 Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c Certificate serial: 019BF76351B3EDBC3E6557C5EB2D7CAAD155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft Manifest number: 0334 Signing time: Sun 25 Jan 2026 23:00:39 +0000 Manifest this update: Sun 25 Jan 2026 23:00:39 +0000 Manifest next update: Mon 26 Jan 2026 23:00:39 +0000 Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=) 2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: IetHjIaQwF7QtZpx/7/qU5aZ1wx7ibp9QZLKYh9sPSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:51:b3:ed:bc:3e:65:57:c5:eb:2d:7c:aa:d1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c Validity Not Before: Jan 25 23:00:39 2026 GMT Not After : Jan 26 23:00:39 2026 GMT Subject: CN=d8539104d073aa9a7b62a7f21feead9ec1221372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:83:cf:4f:02:c2:0f:27:6b:5e:f5:96:70:c3: 5f:14:c0:51:fb:52:4c:da:55:dd:3d:a3:a8:a1:80: a8:49:67:ee:3f:46:f8:2f:3c:09:79:f8:2e:71:fb: 84:5a:85:ca:ab:3b:cf:d6:6d:0d:a7:70:86:e3:aa: ac:13:2f:ac:a0:91:aa:56:bd:ec:64:49:a0:66:66: 5f:92:36:b0:58:66:26:de:9a:d8:8c:0a:22:0b:d2: ea:bb:1c:b6:e2:2e:07:24:36:d5:1c:89:84:c9:17: e3:e0:81:57:18:7a:69:50:e2:3f:a8:4f:52:b4:bd: dd:04:85:e8:de:f4:2f:35:e7:3a:b3:49:f3:28:38: b3:27:61:a0:8c:7a:08:43:04:78:96:0e:7d:e2:25: e2:9b:2e:5b:e8:88:8b:2e:89:70:98:39:47:b7:17: 79:06:68:05:05:ad:5c:b3:65:8f:71:c6:5d:72:c0: 7c:9c:73:8b:8e:fc:79:a4:29:e2:d1:b8:9c:79:c6: a9:0b:d9:55:13:0d:ce:f0:71:b1:53:7b:4d:3c:64: 6c:b6:0f:b6:f9:5a:94:8e:f9:69:e0:f2:0e:2b:c9: df:66:5f:e2:14:0b:7b:1e:33:35:bf:a9:fd:59:83: 3c:e3:d5:35:50:6f:13:0b:53:ed:f5:b5:90:d6:c6: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:53:91:04:D0:73:AA:9A:7B:62:A7:F2:1F:EE:AD:9E:C1:22:13:72 X509v3 Authority Key Identifier: keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:32:ad:e5:bb:c8:38:fc:e4:02:fb:9d:92:2f:e2:f6:99:a4: 97:53:18:d7:89:21:5e:67:33:47:20:73:01:68:65:0d:36:14: 30:e2:6f:62:ff:ac:71:14:9c:ca:69:b4:5c:51:19:18:f5:c8: 75:3b:0c:c6:89:21:ff:f0:b3:45:9a:88:93:02:7a:93:28:3d: 9c:9e:3c:f0:67:9d:1d:31:5c:8c:5e:cc:0c:84:09:a0:91:fd: 6f:8e:d5:f0:cd:7b:7f:d6:61:bd:ec:f4:b7:93:d3:24:d0:54: 0c:40:6f:8d:9b:b8:3e:e8:c2:d1:68:5d:20:a8:42:e4:02:9d: 84:5d:49:05:a0:4c:bf:ee:9e:ea:a8:d0:9e:50:c6:16:89:f8: 50:56:32:62:0e:c7:74:32:bc:8c:2e:44:d1:ab:66:fa:e8:e0: c4:aa:54:f1:ed:fd:8c:39:8c:6b:3f:5e:cb:f7:9c:fa:6c:ab: b8:6f:42:d6:3a:5d:ee:ba:06:2f:34:c7:79:45:d0:d8:58:3c: f6:2f:0a:53:62:57:86:73:41:67:72:ba:72:31:f1:c6:24:07: 5b:94:c5:e0:11:53:0d:ab:f1:00:a2:32:71:da:02:55:5f:c6: c9:c3:da:96:74:cc:49:47:83:6b:84:37:30:1b:cb:b3:64:6d: 9f:f8:7b:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1Gz7bw+ZVfF6y18qtFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDNkYjdlZTM0YWMyZDRlZDU3OGY0OTVlMDA5NmNiOThh ZmY3MWMwHhcNMjYwMTI1MjMwMDM5WhcNMjYwMTI2MjMwMDM5WjAzMTEwLwYDVQQD EyhkODUzOTEwNGQwNzNhYTlhN2I2MmE3ZjIxZmVlYWQ5ZWMxMjIxMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYPPTwLCDydrXvWWcMNfFMBR+1JM 2lXdPaOooYCoSWfuP0b4LzwJefgucfuEWoXKqzvP1m0Np3CG46qsEy+soJGqVr3s ZEmgZmZfkjawWGYm3prYjAoiC9Lquxy24i4HJDbVHImEyRfj4IFXGHppUOI/qE9S tL3dBIXo3vQvNec6s0nzKDizJ2GgjHoIQwR4lg594iXimy5b6IiLLolwmDlHtxd5 BmgFBa1cs2WPccZdcsB8nHOLjvx5pCni0bicecapC9lVEw3O8HGxU3tNPGRstg+2 +VqUjvlp4PIOK8nfZl/iFAt7HjM1v6n9WYM849U1UG8TC1Pt9bWQ1sbVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhTkQTQc6qae2Kn8h/urZ7BIhNyMB8GA1UdIwQY MBaAFCdD237jSsLU7VePSV4AlsuYr/ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMt NTNiMzEwNDRlZDViLzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMtNTNiMzEwNDRlZDVi LzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzKt5bvI OPzkAvudki/i9pmkl1MY14khXmczRyBzAWhlDTYUMOJvYv+scRScymm0XFEZGPXI dTsMxokh//CzRZqIkwJ6kyg9nJ488GedHTFcjF7MDIQJoJH9b47V8M17f9Zhvez0 t5PTJNBUDEBvjZu4PujC0WhdIKhC5AKdhF1JBaBMv+6e6qjQnlDGFon4UFYyYg7H dDK8jC5E0atm+ujgxKpU8e39jDmMaz9ey/ec+myruG9C1jpd7roGLzTHeUXQ2Fg8 9i8KU2JXhnNBZ3K6cjHxxiQHW5TF4BFTDavxAKIycdoCVV/GycPalnTMSUeDa4Q3 MBvLs2Rtn/h7Eg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:04 2026 by rpki-client