This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json) Hash identifier: faiDxsqTbeb6jFbFqEcwYq+stm60zBvcEeSrmUWd5vQ= Subject key identifier: DC:00:83:51:41:70:4F:B4:82:17:DA:25:9B:70:E3:E5:10:B4:08:B4 Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164 Certificate serial: 019BF79AC9CBA9D8C60BC2D023F63DB606C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft Manifest number: 0146 Signing time: Mon 26 Jan 2026 00:01:15 +0000 Manifest this update: Mon 26 Jan 2026 00:01:15 +0000 Manifest next update: Tue 27 Jan 2026 00:01:15 +0000 Files and hashes: 1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: SqxVXJXBbKva2OIorDZJdU8oFeUTyTlVuMr97bsQvTQ=) 2: MjJql6N1k7NzCgb9-0-RouDw4k8.roa (hash: fpENb/LPkDXvYm6to8o4nXJyGfsle0bOqeriZZmpCDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:c9:cb:a9:d8:c6:0b:c2:d0:23:f6:3d:b6:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164 Validity Not Before: Jan 26 00:01:15 2026 GMT Not After : Jan 27 00:01:15 2026 GMT Subject: CN=dc00835141704fb48217da259b70e3e510b408b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:38:51:57:e0:e4:8f:0e:18:af:0f:ca:76: f0:29:cf:31:37:a1:f0:62:33:5a:3b:43:d8:0e:f2: 27:9a:27:e5:13:6e:0b:72:57:f8:a5:c7:29:95:4c: ce:d9:ca:9f:86:cf:9e:4b:3d:11:2e:3e:22:60:55: 1f:38:51:f6:72:15:39:98:3f:49:58:88:64:49:c8: 3e:db:a6:58:92:e7:92:4f:62:d9:a8:94:91:e1:c9: bf:cc:73:d8:dc:b2:c5:ce:a7:3f:1d:43:fd:32:7a: c6:4a:91:9c:a8:2c:87:50:79:79:12:eb:ef:54:b2: 9a:07:29:1e:cd:4d:10:48:b5:45:20:79:91:f3:b2: 89:ee:00:32:08:3d:d4:5a:8f:7b:2e:8f:3e:d0:3d: 74:56:78:c3:45:6a:0e:45:a1:c0:1b:ee:4b:83:7d: 9a:4a:04:25:34:9b:1a:aa:df:46:82:58:fb:e4:5b: ea:2d:a7:12:88:8e:55:55:1a:8c:e8:b6:7d:e1:b7: 3f:bd:d9:32:0a:27:3b:93:c5:86:b6:6d:79:2b:fe: 80:e8:03:89:7c:92:5f:0b:c4:7e:78:d4:0e:20:62: 86:6e:4d:52:9b:f4:95:fb:c2:c9:ff:d1:8e:fc:a9: 41:52:82:50:dd:df:31:e3:ea:8a:2a:6b:f1:ff:91: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:00:83:51:41:70:4F:B4:82:17:DA:25:9B:70:E3:E5:10:B4:08:B4 X509v3 Authority Key Identifier: keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:24:9f:ab:01:f9:f3:43:75:a2:5a:14:69:f9:af:ab:5e: 38:40:77:c3:43:8e:32:95:a1:b8:11:94:35:6c:79:3d:b6:ab: 49:d8:95:56:38:65:f8:5c:a3:a1:b4:91:55:d4:82:de:8b:9b: c1:20:a8:3e:12:45:a2:a4:96:f4:d0:c3:12:11:58:fa:b6:77: a3:9b:ff:c6:b3:8b:28:2b:84:1b:73:ef:f8:5e:60:f8:ff:6b: a2:90:7d:ed:66:fa:31:86:f6:bb:53:70:bf:11:50:f5:e9:f1: 5a:1f:c2:d1:4c:6e:4c:59:35:6b:e3:f7:7c:40:b9:55:9b:4c: 8f:d2:ee:64:7c:2e:5f:c6:fc:30:77:1e:58:8a:de:84:de:ea: f1:d4:c5:63:ca:57:9a:15:1c:c6:ea:58:f8:94:fb:ee:83:c4: 02:17:ee:39:d6:70:0e:79:f9:0f:63:8f:bb:e7:12:b8:b2:97: d6:3b:5e:e4:a3:ae:6f:c6:0f:7b:25:64:6e:7d:76:0c:d4:c8: f6:39:60:94:b4:ce:7c:44:89:0d:a7:b0:52:67:70:1b:0e:01: 04:44:a1:65:74:ad:a7:08:9b:12:d6:3b:ef:f2:4f:19:b4:c4: 43:d7:91:ec:29:b0:f3:b5:76:ac:3b:37:23:ff:53:a2:82:26: 17:82:fb:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3msnLqdjGC8LQI/Y9tgbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmNhNWI3YTc3ZDg4NzY0OWY2OGE0NWM5MGQ2NjdjNzY1 MDAxNjQwHhcNMjYwMTI2MDAwMTE1WhcNMjYwMTI3MDAwMTE1WjAzMTEwLwYDVQQD EyhkYzAwODM1MTQxNzA0ZmI0ODIxN2RhMjU5YjcwZTNlNTEwYjQwOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGo4UVfg5I8OGK8PynbwKc8xN6Hw YjNaO0PYDvInmiflE24Lclf4pccplUzO2cqfhs+eSz0RLj4iYFUfOFH2chU5mD9J WIhkScg+26ZYkueST2LZqJSR4cm/zHPY3LLFzqc/HUP9MnrGSpGcqCyHUHl5Euvv VLKaBykezU0QSLVFIHmR87KJ7gAyCD3UWo97Lo8+0D10VnjDRWoORaHAG+5Lg32a SgQlNJsaqt9Gglj75FvqLacSiI5VVRqM6LZ94bc/vdkyCic7k8WGtm15K/6A6AOJ fJJfC8R+eNQOIGKGbk1Sm/SV+8LJ/9GO/KlBUoJQ3d8x4+qKKmvx/5FYNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwAg1FBcE+0ghfaJZtw4+UQtAi0MB8GA1UdIwQY MBaAFCf8pbenfYh2SfaKRckNZnx2UAFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjct YzFmYWUwMDg4OWRiLzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjctYzFmYWUwMDg4OWRi LzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgm4kn6sB +fNDdaJaFGn5r6teOEB3w0OOMpWhuBGUNWx5PbarSdiVVjhl+FyjobSRVdSC3oub wSCoPhJFoqSW9NDDEhFY+rZ3o5v/xrOLKCuEG3Pv+F5g+P9ropB97Wb6MYb2u1Nw vxFQ9enxWh/C0UxuTFk1a+P3fEC5VZtMj9LuZHwuX8b8MHceWIrehN7q8dTFY8pX mhUcxupY+JT77oPEAhfuOdZwDnn5D2OPu+cSuLKX1jte5KOub8YPeyVkbn12DNTI 9jlglLTOfESJDaewUmdwGw4BBEShZXStpwibEtY77/JPGbTEQ9eR7Cmw87V2rDs3 I/9TooImF4L7Gg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:56 2026 by rpki-client