This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json) Hash identifier: TEtXH2M9PhnZ+q8cbfU4LQgvHirvVTHiHLggO+E5ZJM= Subject key identifier: 2D:08:64:E2:AF:95:3B:77:59:25:63:5A:55:AA:F0:B7:88:77:28:46 Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a Certificate serial: 019BF5E3F7B2D8A0B8BD70CF03679931F3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft Manifest number: 03CE Signing time: Sun 25 Jan 2026 16:01:56 +0000 Manifest this update: Sun 25 Jan 2026 16:01:56 +0000 Manifest next update: Mon 26 Jan 2026 16:01:56 +0000 Files and hashes: 1: 3SvuzLztH7kaYqpigx8jbNPhEro.roa (hash: jRC8rlwTfMhG8lXkzGvIt38V+oAm4+j9qe4aEosOOZM=) 2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: d3Q/yb8/BU2tUBuxD5So7k2yM9BHd+XpOurhbM7O1ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f7:b2:d8:a0:b8:bd:70:cf:03:67:99:31:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a Validity Not Before: Jan 25 16:01:56 2026 GMT Not After : Jan 26 16:01:56 2026 GMT Subject: CN=2d0864e2af953b775925635a55aaf0b788772846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:29:5a:0a:a4:5b:a1:4b:7d:4b:19:e4:d6: 45:3b:a4:f0:56:b9:f6:9d:87:5c:e0:39:19:d6:1a: 0a:cd:9d:af:c2:6d:c3:cb:a4:ea:dc:3b:31:0d:59: 7a:d2:ce:19:12:14:d6:01:e8:12:bc:01:ff:37:68: 71:12:88:97:86:1b:2a:5f:53:b1:4c:71:de:43:c5: de:d3:1b:f5:b4:fe:f2:da:a5:93:22:82:49:85:11: 06:07:08:aa:24:a4:a8:ab:e5:a2:bd:9d:67:69:95: 5a:da:da:d7:7d:00:f8:93:2b:89:aa:32:45:31:dc: 74:0b:b9:0d:6f:69:68:17:d4:40:d6:c1:67:40:ab: 3e:a1:d6:3c:5a:64:5d:0e:5c:e5:01:53:d3:d6:13: 7d:db:43:01:e8:13:ac:c8:48:a4:bb:b8:72:86:b9: a6:25:c2:21:af:52:5b:45:f4:9f:37:29:f5:d1:93: 2f:1a:df:f1:0c:aa:35:1a:d5:9c:3c:a4:66:d0:b5: 47:0a:a8:45:f2:2c:8e:3c:15:d5:ac:24:17:ea:57: d1:4c:d1:3b:e7:0b:4a:03:63:c0:03:bb:2c:c6:3f: 1c:53:cd:d1:45:60:a9:2e:16:f4:b6:f7:ee:ec:17: 49:c9:d6:ca:87:f2:c0:89:f4:84:ba:58:8c:d3:79: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:08:64:E2:AF:95:3B:77:59:25:63:5A:55:AA:F0:B7:88:77:28:46 X509v3 Authority Key Identifier: keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0a:5f:4b:86:a5:04:e7:05:5d:6d:6a:0e:15:1b:cc:d9:64: bf:a0:82:c7:0b:4e:3f:f0:23:e1:a6:37:e5:32:c6:7b:42:a1: dd:1e:c4:d8:f3:65:d3:54:f1:04:88:3b:d3:5d:a2:0e:6d:26: a3:ad:89:5e:9c:06:97:d0:aa:64:c9:54:74:8a:29:6d:86:5e: 6d:d4:21:40:65:c1:c1:1e:fa:1b:8b:03:ba:61:30:ae:28:fb: 95:47:10:fb:e5:9a:32:d4:fa:29:29:8e:8b:25:32:c7:75:e5: eb:b1:d6:cf:fe:5e:81:29:a4:ff:0a:90:62:3b:65:ae:86:4e: a8:be:cc:9d:1b:fb:19:73:3b:33:05:fb:46:62:59:41:d0:fb: 6f:88:2d:9e:6f:0c:3c:e3:8d:56:0a:23:71:d5:fa:fc:5b:8a: 3b:96:66:0c:cf:76:16:5a:06:dc:02:7b:f3:08:f3:26:10:11: 65:52:19:57:b2:8e:5a:9b:e6:71:e3:ff:1e:2f:ea:49:eb:e8: ca:88:67:ae:f7:e4:a6:b1:79:5b:3a:8a:23:24:6d:cf:09:bf: 2c:78:2c:7b:18:e8:1b:e6:d2:bc:25:9b:79:8c:17:76:26:61: e6:85:12:f8:1e:17:24:6b:53:43:35:2b:66:3d:58:1a:b5:85: c4:47:bf:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/ey2KC4vXDPA2eZMfPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDI5ZmIxOGUxOWM1Njc3MjQ0MDU3ZWRhMzhjNjNkYzE4 ZGExMmEwHhcNMjYwMTI1MTYwMTU2WhcNMjYwMTI2MTYwMTU2WjAzMTEwLwYDVQQD EygyZDA4NjRlMmFmOTUzYjc3NTkyNTYzNWE1NWFhZjBiNzg4NzcyODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJopWgqkW6FLfUsZ5NZFO6TwVrn2 nYdc4DkZ1hoKzZ2vwm3Dy6Tq3DsxDVl60s4ZEhTWAegSvAH/N2hxEoiXhhsqX1Ox THHeQ8Xe0xv1tP7y2qWTIoJJhREGBwiqJKSoq+WivZ1naZVa2trXfQD4kyuJqjJF Mdx0C7kNb2loF9RA1sFnQKs+odY8WmRdDlzlAVPT1hN920MB6BOsyEiku7hyhrmm JcIhr1JbRfSfNyn10ZMvGt/xDKo1GtWcPKRm0LVHCqhF8iyOPBXVrCQX6lfRTNE7 5wtKA2PAA7ssxj8cU83RRWCpLhb0tvfu7BdJydbKh/LAifSEuliM03kYewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0IZOKvlTt3WSVjWlWq8LeIdyhGMB8GA1UdIwQY MBaAFIwCn7GOGcVnckQFfto4xj3BjaEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MDAxNjEtY2I2Mi00YjdjLWFjN2Mt NGQzYjZjMWYzYTg5LzEvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84MDAxNjEtY2I2Mi00YjdjLWFjN2MtNGQzYjZjMWYzYTg5 LzEvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQpfS4al BOcFXW1qDhUbzNlkv6CCxwtOP/Aj4aY35TLGe0Kh3R7E2PNl01TxBIg7012iDm0m o62JXpwGl9CqZMlUdIopbYZebdQhQGXBwR76G4sDumEwrij7lUcQ++WaMtT6KSmO iyUyx3Xl67HWz/5egSmk/wqQYjtlroZOqL7MnRv7GXM7MwX7RmJZQdD7b4gtnm8M POONVgojcdX6/FuKO5ZmDM92FloG3AJ78wjzJhARZVIZV7KOWpvmceP/Hi/qSevo yohnrvfkprF5WzqKIyRtzwm/LHgsexjoG+bSvCWbeYwXdiZh5oUS+B4XJGtTQzUr Zj1YGrWFxEe/2w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:55 2026 by rpki-client