This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json) Hash identifier: 1GjPb91b5q1Ygj6DJX6xAbBR1DT6LPjJxGm0uzo/wOc= Subject key identifier: C5:68:72:64:C8:EE:E3:3D:58:78:8F:B8:56:08:E8:EF:3A:7B:26:16 Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Certificate serial: 019BF72D5430FBB76E48CC5FC359880B1297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft Manifest number: 12FE Signing time: Sun 25 Jan 2026 22:01:41 +0000 Manifest this update: Sun 25 Jan 2026 22:01:41 +0000 Manifest next update: Mon 26 Jan 2026 22:01:41 +0000 Files and hashes: 1: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (hash: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc=) 2: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: K/fonO62m1CPn1Y4r9RBH631JViGnoRwbRFjNQAvHig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:54:30:fb:b7:6e:48:cc:5f:c3:59:88:0b:12:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Validity Not Before: Jan 25 22:01:41 2026 GMT Not After : Jan 26 22:01:41 2026 GMT Subject: CN=c5687264c8eee33d58788fb85608e8ef3a7b2616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:0d:7f:a3:05:24:21:85:16:b8:ac:9b:b1: 6c:f5:85:a5:8f:77:a0:e6:51:32:6b:48:a0:97:b4: b4:6b:0a:71:a0:b9:20:a2:f6:8f:a0:df:51:ae:6b: cf:56:8e:5d:7d:eb:eb:cb:b8:85:db:e3:c2:2b:fe: 9a:03:0e:23:b0:3a:89:11:0d:05:c6:eb:88:34:c3: ad:74:34:cb:cd:a2:36:dc:96:7e:67:6a:b9:13:80: 02:e9:d9:19:16:cb:70:89:72:2c:2b:6b:9c:10:dc: f7:69:76:c9:0a:be:16:06:a2:b2:60:80:d1:f9:b9: 01:6d:3e:2f:e2:17:08:3b:bc:b3:c8:9e:8f:c6:31: 7a:bf:ba:26:6b:d7:3d:b2:cc:30:a9:10:b9:dc:bc: 8a:fc:52:11:12:57:74:7b:96:a8:4f:14:75:cf:ac: 22:e0:fd:96:3d:c4:e2:ab:83:45:94:02:5d:42:ac: a6:d5:6f:36:bf:8d:b2:08:73:c3:22:31:56:5c:b9: fd:4c:42:79:71:dd:85:a0:65:d5:37:20:10:8a:c3: 9e:89:b5:51:38:8e:b0:c7:c0:ee:c1:ac:7d:21:14: d3:0d:75:8e:ea:2d:f8:ff:1c:6e:99:f7:57:c1:39: 19:25:59:47:fc:75:8c:e7:eb:ba:a5:8e:84:d2:72: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:72:64:C8:EE:E3:3D:58:78:8F:B8:56:08:E8:EF:3A:7B:26:16 X509v3 Authority Key Identifier: keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:87:44:6d:7e:23:40:3f:b6:e2:90:63:a8:07:29:1d:b2:f7: bb:ca:aa:15:0d:f8:e0:37:0b:3d:37:80:80:ff:1e:3c:cf:f7: cb:2d:9a:fc:c3:fb:2a:31:87:fb:1d:dd:52:a5:36:35:4f:99: a2:f4:73:59:4b:c4:26:6c:a5:18:52:d8:a7:b0:f4:13:ee:e7: 08:99:7f:10:9b:a7:3e:76:01:a9:b8:cd:43:00:f8:b5:59:60: 5f:d6:01:8a:a5:db:18:0e:7f:2f:94:f9:d2:c9:82:3c:fa:b7: 5c:7c:49:69:df:27:81:fd:42:d3:e4:53:d2:d4:27:5f:4e:32: bb:2b:21:33:f5:cf:45:8d:dd:46:4e:84:ad:4d:ed:43:d8:cc: 35:74:38:69:b4:51:b3:9f:38:d6:1f:d5:c6:cf:59:fa:98:85: ca:ac:2b:6f:6b:f3:4b:c7:9c:6d:45:c6:25:af:3c:e8:4a:55: 69:d2:33:32:86:6c:ae:0a:86:55:1e:25:58:5a:80:31:ea:52: a4:78:5c:a8:0e:d4:11:e8:fc:a6:2e:ef:cf:2d:09:d5:a0:2f: cc:98:5e:aa:08:c0:45:66:19:1c:4e:92:51:8d:55:f8:2b:9d: cf:ad:4c:cb:94:f5:36:7a:fa:a2:f7:83:65:ac:53:55:aa:73: 57:f1:98:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVQw+7duSMxfw1mICxKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWRjNzMyY2EyODM0OTczNTQ3Yzc4MGUxYzNhNWFiNDc4 MDViZTAwHhcNMjYwMTI1MjIwMTQxWhcNMjYwMTI2MjIwMTQxWjAzMTEwLwYDVQQD EyhjNTY4NzI2NGM4ZWVlMzNkNTg3ODhmYjg1NjA4ZThlZjNhN2IyNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz0Nf6MFJCGFFrism7Fs9YWlj3eg 5lEya0igl7S0awpxoLkgovaPoN9RrmvPVo5dfevry7iF2+PCK/6aAw4jsDqJEQ0F xuuINMOtdDTLzaI23JZ+Z2q5E4AC6dkZFstwiXIsK2ucENz3aXbJCr4WBqKyYIDR +bkBbT4v4hcIO7yzyJ6PxjF6v7oma9c9sswwqRC53LyK/FIREld0e5aoTxR1z6wi 4P2WPcTiq4NFlAJdQqym1W82v42yCHPDIjFWXLn9TEJ5cd2FoGXVNyAQisOeibVR OI6wx8Duwax9IRTTDXWO6i34/xxumfdXwTkZJVlH/HWM5+u6pY6E0nLUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVocmTI7uM9WHiPuFYI6O86eyYWMB8GA1UdIwQY MBaAFI5dxzLKKDSXNUfHgOHDpatHgFvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgt NGVlNjlhNzc3YmJlLzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgtNGVlNjlhNzc3YmJl LzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYdEbX4j QD+24pBjqAcpHbL3u8qqFQ344DcLPTeAgP8ePM/3yy2a/MP7KjGH+x3dUqU2NU+Z ovRzWUvEJmylGFLYp7D0E+7nCJl/EJunPnYBqbjNQwD4tVlgX9YBiqXbGA5/L5T5 0smCPPq3XHxJad8ngf1C0+RT0tQnX04yuyshM/XPRY3dRk6ErU3tQ9jMNXQ4abRR s5841h/Vxs9Z+piFyqwrb2vzS8ecbUXGJa886EpVadIzMoZsrgqGVR4lWFqAMepS pHhcqA7UEej8pi7vzy0J1aAvzJheqgjARWYZHE6SUY1V+Cudz61My5T1Nnr6oveD ZaxTVapzV/GYTw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:47 2026 by rpki-client