This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json) Hash identifier: VCueBu/nL/zaXWKGACYqLP1szv1/5+IKnA8d7hPTiVE= Subject key identifier: BA:29:A3:BB:71:10:79:86:85:91:2A:A4:C1:D0:60:A3:E8:91:0C:0A Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6 Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6 Certificate serial: 019BF42C187968D56712F6049075E23E0439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft Manifest number: 0B92 Signing time: Sun 25 Jan 2026 08:01:29 +0000 Manifest this update: Sun 25 Jan 2026 08:01:29 +0000 Manifest next update: Mon 26 Jan 2026 08:01:29 +0000 Files and hashes: 1: IGqxlIKv9pQSduOZbyMGfJbT9RI.roa (hash: YZCvKKKTyHwkIul63DB5RjCHdqSG34xePQX/iOEjVC8=) 2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: c+eDtq+JuXht+ksgbZMPvxkhlcbmhslvYZhIjRzOKF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:18:79:68:d5:67:12:f6:04:90:75:e2:3e:04:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6 Validity Not Before: Jan 25 08:01:29 2026 GMT Not After : Jan 26 08:01:29 2026 GMT Subject: CN=ba29a3bb7110798685912aa4c1d060a3e8910c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:ad:e3:fd:d2:18:0e:fc:41:67:15:21:c2: ed:4b:26:30:a8:f7:e5:32:a2:a4:6c:b2:11:30:97: ea:ff:32:87:b3:57:f1:e7:c0:cf:c1:d2:57:c2:23: b0:d8:4a:bf:6b:d4:5b:80:a7:53:f6:e0:c5:d1:f1: 1a:b4:f2:3e:20:6d:13:95:2f:03:b2:96:28:a1:b7: d2:6c:27:e2:33:60:20:8f:1d:e1:fa:a3:5e:a0:af: 9e:25:0b:bb:8c:d2:6d:81:34:f9:ec:2d:4b:11:00: f0:60:ad:d5:f4:5f:ff:d2:28:ea:87:8c:91:0c:97: 86:38:5d:2d:a0:5b:66:b1:e5:5e:a7:3d:f8:c0:64: ce:8a:cd:3a:81:89:45:db:3c:5e:bb:aa:7b:57:6c: 69:c8:50:04:80:e6:b5:2d:f1:73:7c:21:74:5c:6c: d9:06:44:56:3a:d5:5f:ac:9d:6e:20:32:7c:80:64: 11:45:8e:6a:61:9e:09:5a:09:39:a7:cb:bd:30:91: 32:5a:9b:0a:53:10:21:2d:73:11:4b:3b:f2:59:49: c0:57:5f:91:e6:a4:0e:08:91:f2:8d:cc:61:b5:a0: 10:5d:4a:de:f9:bb:0e:52:74:5f:65:53:f0:14:ad: 28:10:8d:f8:19:cf:5d:67:90:aa:48:a6:18:f6:4e: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:29:A3:BB:71:10:79:86:85:91:2A:A4:C1:D0:60:A3:E8:91:0C:0A X509v3 Authority Key Identifier: keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d2:da:69:54:e6:83:11:7c:2b:cc:57:75:9b:8e:d6:98:07: 64:f1:86:19:97:3e:ae:9b:09:82:c3:4e:c0:29:97:56:0f:3e: fb:cf:68:71:b6:73:de:cf:e2:58:d8:6c:93:a4:91:36:88:6a: 82:14:41:ff:c3:57:be:7d:36:36:98:ee:01:55:6c:13:3d:ff: 5f:ff:73:08:ef:06:52:d6:b6:ae:48:a2:8c:c8:1e:5a:0c:23: f4:9d:5e:db:be:3f:a6:7e:e0:1b:e4:d0:ce:7e:34:93:67:76: d6:4d:e6:4a:93:c4:f6:51:c6:a4:7a:6a:a9:23:09:a6:22:4f: 0b:f0:d2:fd:c3:38:8e:cd:15:fd:a6:3a:4e:47:6e:ca:ae:43: 52:09:ea:db:8e:74:07:a2:a6:3a:d9:cc:49:29:92:63:96:ef: 23:6c:2b:b4:4e:1b:82:40:0a:dc:16:fb:03:20:32:10:e3:30: 68:ba:d5:cf:1a:d5:0f:29:3e:26:fa:37:cb:33:12:7b:48:fa: df:89:6e:87:7e:2e:14:48:94:93:c8:b7:60:7a:60:37:33:63: f5:b8:01:b8:d9:7d:ae:7a:f4:cc:b7:db:fe:3c:7d:2c:a4:b5: 60:6d:9a:76:e1:d3:18:e4:59:ae:6f:2f:ab:4b:aa:f5:93:87: dc:33:2c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LBh5aNVnEvYEkHXiPgQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTU2ZTY5Zjk0NDRjMmIwNjY4NzI1NjA4NWI2YTdhNGU5 ODg3ZjYwHhcNMjYwMTI1MDgwMTI5WhcNMjYwMTI2MDgwMTI5WjAzMTEwLwYDVQQD EyhiYTI5YTNiYjcxMTA3OTg2ODU5MTJhYTRjMWQwNjBhM2U4OTEwYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoput4/3SGA78QWcVIcLtSyYwqPfl MqKkbLIRMJfq/zKHs1fx58DPwdJXwiOw2Eq/a9RbgKdT9uDF0fEatPI+IG0TlS8D spYoobfSbCfiM2Agjx3h+qNeoK+eJQu7jNJtgTT57C1LEQDwYK3V9F//0ijqh4yR DJeGOF0toFtmseVepz34wGTOis06gYlF2zxeu6p7V2xpyFAEgOa1LfFzfCF0XGzZ BkRWOtVfrJ1uIDJ8gGQRRY5qYZ4JWgk5p8u9MJEyWpsKUxAhLXMRSzvyWUnAV1+R 5qQOCJHyjcxhtaAQXUre+bsOUnRfZVPwFK0oEI34Gc9dZ5CqSKYY9k7ngQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLopo7txEHmGhZEqpMHQYKPokQwKMB8GA1UdIwQY MBaAFI8Vbmn5REwrBmhyVghbanpOmIf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEt MmI3ODViNzJiNGY0LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEtMmI3ODViNzJiNGY0 LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutLaaVTm gxF8K8xXdZuO1pgHZPGGGZc+rpsJgsNOwCmXVg8++89ocbZz3s/iWNhsk6SRNohq ghRB/8NXvn02NpjuAVVsEz3/X/9zCO8GUta2rkiijMgeWgwj9J1e274/pn7gG+TQ zn40k2d21k3mSpPE9lHGpHpqqSMJpiJPC/DS/cM4js0V/aY6Tkduyq5DUgnq2450 B6KmOtnMSSmSY5bvI2wrtE4bgkAK3Bb7AyAyEOMwaLrVzxrVDyk+Jvo3yzMSe0j6 34luh34uFEiUk8i3YHpgNzNj9bgBuNl9rnr0zLfb/jx9LKS1YG2aduHTGORZrm8v q0uq9ZOH3DMsxw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:45:59 2026 by rpki-client