This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json) Hash identifier: RXzHJlBhbVvnEcShpAmzz7RI+DmtQoYm36BxhbFT01Q= Subject key identifier: 23:D9:CD:0E:25:13:61:B8:A8:69:78:FE:CC:61:C8:0F:35:6B:B9:67 Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c Certificate serial: 019BF387015EB07D0868E8410D72BACE3B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft Manifest number: 155E Signing time: Sun 25 Jan 2026 05:01:09 +0000 Manifest this update: Sun 25 Jan 2026 05:01:09 +0000 Manifest next update: Mon 26 Jan 2026 05:01:09 +0000 Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=) 2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=) 3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 1Q+10D6UumzM1Qp9mTYLFGJvaHqguXqYTMVQ+LkT0RY=) 4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:01:5e:b0:7d:08:68:e8:41:0d:72:ba:ce:3b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c Validity Not Before: Jan 25 05:01:09 2026 GMT Not After : Jan 26 05:01:09 2026 GMT Subject: CN=23d9cd0e251361b8a86978fecc61c80f356bb967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:47:ca:2a:05:0c:a3:ba:00:3b:48:c8:71: 31:b3:a3:cf:62:f8:c4:a1:e9:10:26:e9:e7:d4:22: bc:2e:bf:e9:d3:12:2c:02:61:53:1d:00:28:46:8f: e5:29:57:b8:f0:5e:ee:c2:53:22:89:46:55:f3:76: 9a:6f:6e:fa:c3:32:76:fd:9e:65:44:bc:0c:a5:cb: 95:18:cb:24:78:45:cb:47:93:17:aa:a6:4c:5c:fe: f2:4d:62:94:71:e8:7a:e1:74:66:27:3e:1a:65:ff: 01:0d:98:23:a0:9b:eb:ec:d9:eb:1d:49:61:00:21: b9:19:77:e8:a5:cb:11:d9:17:e2:e2:f0:f4:3a:d4: 4e:ed:a1:24:00:30:1c:57:c7:c8:89:4f:76:3f:5b: 66:5d:a7:1d:87:94:12:0e:40:24:39:02:80:58:50: c2:3f:92:93:4b:f4:bb:3b:b5:e8:ed:32:2e:b3:ad: c8:32:c8:91:1e:68:71:a0:ec:d4:54:d9:37:9b:ac: 52:97:05:b3:88:26:3a:67:3e:62:47:2a:bb:e9:ff: 4e:b5:68:e5:2f:8f:0a:c0:d5:43:39:bd:68:2e:d2: d6:09:40:b5:4a:d2:16:4a:3e:6a:9f:ea:3a:cb:2c: 01:50:00:a8:43:dd:16:78:ff:d4:e9:9f:11:e5:c2: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D9:CD:0E:25:13:61:B8:A8:69:78:FE:CC:61:C8:0F:35:6B:B9:67 X509v3 Authority Key Identifier: keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:92:29:64:a9:1e:4f:c1:89:7d:76:89:6b:70:33:d9:94:82: 49:80:e3:86:10:b8:b4:c0:db:47:8a:bf:6b:e5:f0:4f:99:fd: 65:d1:22:58:9f:b5:9e:4b:eb:60:8f:19:91:81:6e:7f:7b:30: 97:f3:47:e6:38:f1:d5:a6:9f:52:ce:94:50:f9:ae:0c:73:9e: 37:07:84:29:87:42:83:98:ee:89:b8:d1:dc:1e:5b:ce:ec:80: 22:13:31:8e:ee:4f:87:89:64:cb:46:b0:67:c5:8a:b1:19:67: d1:3b:fa:0c:c2:58:dd:3a:53:b4:7a:aa:74:41:26:8c:67:3b: 00:30:fe:32:aa:f1:d2:91:4e:c5:0b:4b:f6:f8:9b:1c:bb:4c: 7e:0a:68:42:75:7d:57:48:0e:0b:08:bf:23:70:29:e8:80:a1: a4:3b:c5:87:c6:09:28:0a:29:39:11:e7:d9:24:16:96:8f:51: f2:a5:4f:85:aa:ab:28:72:d6:c0:d0:5d:11:1b:e3:18:25:4d: b9:44:21:69:df:a0:0e:d2:02:65:0c:3b:86:8d:f3:d2:20:23: bb:3c:71:90:c7:85:d5:be:32:07:40:59:d6:5c:a4:4e:8a:15: f6:92:04:37:82:b3:eb:6d:1e:08:a7:48:6b:3b:f3:02:b7:db: 2d:3b:9c:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhwFesH0IaOhBDXK6zjtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj MDkzOWMwHhcNMjYwMTI1MDUwMTA5WhcNMjYwMTI2MDUwMTA5WjAzMTEwLwYDVQQD EygyM2Q5Y2QwZTI1MTM2MWI4YTg2OTc4ZmVjYzYxYzgwZjM1NmJiOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0xHyioFDKO6ADtIyHExs6PPYvjE oekQJunn1CK8Lr/p0xIsAmFTHQAoRo/lKVe48F7uwlMiiUZV83aab276wzJ2/Z5l RLwMpcuVGMskeEXLR5MXqqZMXP7yTWKUceh64XRmJz4aZf8BDZgjoJvr7NnrHUlh ACG5GXfopcsR2Rfi4vD0OtRO7aEkADAcV8fIiU92P1tmXacdh5QSDkAkOQKAWFDC P5KTS/S7O7Xo7TIus63IMsiRHmhxoOzUVNk3m6xSlwWziCY6Zz5iRyq76f9OtWjl L48KwNVDOb1oLtLWCUC1StIWSj5qn+o6yywBUACoQ90WeP/U6Z8R5cIWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPZzQ4lE2G4qGl4/sxhyA81a7lnMB8GA1UdIwQY MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt MWM5NGNiN2RmZWIzLzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZIpZKke T8GJfXaJa3Az2ZSCSYDjhhC4tMDbR4q/a+XwT5n9ZdEiWJ+1nkvrYI8ZkYFuf3sw l/NH5jjx1aafUs6UUPmuDHOeNweEKYdCg5juibjR3B5bzuyAIhMxju5Ph4lky0aw Z8WKsRln0Tv6DMJY3TpTtHqqdEEmjGc7ADD+Mqrx0pFOxQtL9vibHLtMfgpoQnV9 V0gOCwi/I3Ap6IChpDvFh8YJKAopORHn2SQWlo9R8qVPhaqrKHLWwNBdERvjGCVN uUQhad+gDtICZQw7ho3z0iAjuzxxkMeF1b4yB0BZ1lykTooV9pIEN4Kz620eCKdI azvzArfbLTuc7g== -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:43 2026 by rpki-client