This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft File: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft (raw, json) Hash identifier: CDwmfs/mx4qgFDi7JmCwDzyMsODsmpKFWylABKMKH5E= Subject key identifier: 70:AC:A7:D4:37:F8:83:B5:0B:EE:F5:90:9F:4F:B5:1F:95:43:6C:C1 Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6 Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6 Certificate serial: 019BF3188C2767C78898605F17E880180494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft Manifest number: 0AE4 Signing time: Sun 25 Jan 2026 03:00:30 +0000 Manifest this update: Sun 25 Jan 2026 03:00:30 +0000 Manifest next update: Mon 26 Jan 2026 03:00:30 +0000 Files and hashes: 1: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl (hash: D0dekQNLS6Lg/MVpgjtvvLsfps4wrGas8SzOcKxwYdI=) 2: vYeEeP2BYg3wov6kmHaUntK3OIk.roa (hash: yw5p+XA00nIuvBOAOI3UKRghRlhEivp+pyeNJ4lVYRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:8c:27:67:c7:88:98:60:5f:17:e8:80:18:04:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6 Validity Not Before: Jan 25 03:00:30 2026 GMT Not After : Jan 26 03:00:30 2026 GMT Subject: CN=70aca7d437f883b50beef5909f4fb51f95436cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:2b:e4:ac:3c:17:85:f7:bc:9d:ad:8c:55: 29:48:27:f3:99:85:fc:bf:01:07:e5:76:e6:24:ea: f4:cc:9d:1c:fc:a5:9a:96:e9:03:45:cd:b0:a8:8d: 32:84:6a:69:ef:34:98:b8:d3:91:ce:cd:76:f0:c5: 65:06:ea:53:51:46:8f:4d:8d:b9:1e:58:df:9c:08: 40:eb:10:69:0a:b8:69:4b:aa:15:5c:8d:5a:4f:c8: cf:7f:36:36:74:01:4b:9f:88:56:a3:c1:d5:5d:1e: bc:30:50:df:15:49:2f:51:40:77:31:35:89:bc:c2: 80:54:5c:05:b2:93:6c:18:fa:78:5e:b3:12:61:44: f6:ee:4e:e6:1e:d0:f4:91:f5:bf:bb:f6:64:fc:d3: d5:b7:dc:eb:a5:37:bf:f4:f4:69:c2:ed:b1:e7:7f: 82:5f:66:59:95:d1:31:11:1e:63:c9:85:e6:31:35: 46:e9:54:af:b9:24:45:c4:76:a4:66:be:f5:16:41: a1:04:0f:41:d3:19:04:82:50:70:20:b5:84:72:c8: ed:29:00:6a:ab:32:ed:40:0a:1b:39:9e:ec:7a:ea: e7:a8:d3:4c:c4:d6:fb:f2:24:fe:aa:51:6d:93:41: d9:3a:47:b2:6d:63:30:2a:c4:07:55:28:30:23:d1: 21:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:A7:D4:37:F8:83:B5:0B:EE:F5:90:9F:4F:B5:1F:95:43:6C:C1 X509v3 Authority Key Identifier: keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b6:b4:5b:7a:9f:42:d2:40:80:9e:9b:bc:bf:40:7e:49:c5: 0c:97:b8:2a:2d:0d:52:38:3c:1e:2c:35:c7:a9:6a:e4:09:72: 9d:e2:bf:9a:95:75:1c:55:88:45:1f:2a:06:6b:fe:10:66:68: 95:96:2a:fb:fe:23:52:f4:1a:42:87:8a:f7:71:28:01:d9:4f: 1c:c5:bd:44:c3:e9:d2:82:1c:3d:b3:ae:57:80:cb:57:b9:e4: b6:32:9d:7d:37:4d:d5:9d:aa:9a:fc:3d:62:f2:a3:25:82:50: 3c:18:28:6b:e8:ea:30:a7:ad:41:a0:19:85:bb:cd:9f:eb:38: 95:dc:4d:ed:a2:c9:5c:90:27:5a:31:f2:cc:f3:e4:6e:68:80: 95:b6:c8:08:ac:3c:d9:a2:99:47:12:bf:20:f9:24:0f:c2:26: f2:be:2d:6a:40:43:c3:04:ab:23:cc:0e:7d:27:8b:b2:30:72: 5a:a2:87:65:b1:d4:13:a5:68:9c:cd:04:a8:6e:e7:96:06:72: 86:a7:5f:92:cd:f6:33:aa:0e:a9:c9:61:3b:26:4d:43:32:b7: f9:ce:10:f9:79:4d:91:a1:7e:23:36:bd:cf:fc:6a:25:b9:79: 56:93:17:fa:bc:73:c2:c8:ab:ab:4a:aa:8e:34:66:ff:54:6f: 78:bd:de:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGIwnZ8eImGBfF+iAGASUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMDZmNWE3MzE0YjJmOTY2YjI0ZmM1MzE1NWNlN2JmNjA0 YzA3YTYwHhcNMjYwMTI1MDMwMDMwWhcNMjYwMTI2MDMwMDMwWjAzMTEwLwYDVQQD Eyg3MGFjYTdkNDM3Zjg4M2I1MGJlZWY1OTA5ZjRmYjUxZjk1NDM2Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+sr5Kw8F4X3vJ2tjFUpSCfzmYX8 vwEH5XbmJOr0zJ0c/KWalukDRc2wqI0yhGpp7zSYuNORzs128MVlBupTUUaPTY25 HljfnAhA6xBpCrhpS6oVXI1aT8jPfzY2dAFLn4hWo8HVXR68MFDfFUkvUUB3MTWJ vMKAVFwFspNsGPp4XrMSYUT27k7mHtD0kfW/u/Zk/NPVt9zrpTe/9PRpwu2x53+C X2ZZldExER5jyYXmMTVG6VSvuSRFxHakZr71FkGhBA9B0xkEglBwILWEcsjtKQBq qzLtQAobOZ7seurnqNNMxNb78iT+qlFtk0HZOkeybWMwKsQHVSgwI9EhUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCsp9Q3+IO1C+71kJ9PtR+VQ2zBMB8GA1UdIwQY MBaAFI4G9acxSy+WayT8UxVc579gTAemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MjYzM2YtMmIzZi00MDcyLThmNGEt YjQ3NDk3MGVjYTY2LzEvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82MjYzM2YtMmIzZi00MDcyLThmNGEtYjQ3NDk3MGVjYTY2 LzEvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlba0W3qf QtJAgJ6bvL9AfknFDJe4Ki0NUjg8Hiw1x6lq5AlyneK/mpV1HFWIRR8qBmv+EGZo lZYq+/4jUvQaQoeK93EoAdlPHMW9RMPp0oIcPbOuV4DLV7nktjKdfTdN1Z2qmvw9 YvKjJYJQPBgoa+jqMKetQaAZhbvNn+s4ldxN7aLJXJAnWjHyzPPkbmiAlbbICKw8 2aKZRxK/IPkkD8Im8r4takBDwwSrI8wOfSeLsjByWqKHZbHUE6VonM0EqG7nlgZy hqdfks32M6oOqclhOyZNQzK3+c4Q+XlNkaF+Iza9z/xqJbl5VpMX+rxzwsirq0qq jjRm/1RveL3eMg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:49 2026 by rpki-client