This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json) Hash identifier: N7nT7APDU4E8lvYlZr/8owrPzdVIJdEW8b+2aXs/m7Y= Subject key identifier: D6:C0:39:B2:6C:61:8C:3D:77:C4:F6:5F:91:3A:D2:DE:D6:4C:05:DC Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a Certificate serial: 019BF808904C6722469B195283E43623136A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 02:01:09 +0000 Manifest this update: Mon 26 Jan 2026 02:01:09 +0000 Manifest next update: Tue 27 Jan 2026 02:01:09 +0000 Files and hashes: 1: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: 29kI4O7asz0Ezdf2gkEMNz3B7I15t1S29ARHGH50+H4=) 2: yu7FGYZBG0qZPxFlCSBNuH6vubo.roa (hash: TJHmQ5jIZkK8Ij/mX9PCFzWqzWwlwt2c2mMEyeNiyPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:90:4c:67:22:46:9b:19:52:83:e4:36:23:13:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a Validity Not Before: Jan 26 02:01:09 2026 GMT Not After : Jan 27 02:01:09 2026 GMT Subject: CN=d6c039b26c618c3d77c4f65f913ad2ded64c05dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:19:2d:5c:a9:c9:f4:c4:5a:7b:1e:64:22: 33:e0:8c:b9:07:45:84:65:3f:59:61:44:b6:15:0a: 21:ee:61:48:c3:a9:75:74:e7:9c:0a:bf:da:b5:b9: d8:b3:fb:28:91:55:90:88:7c:16:c0:39:bc:14:33: 0f:15:c3:87:44:5a:2b:28:d5:65:0d:17:cc:ab:e9: ca:7b:14:11:fa:5b:a5:42:fc:b4:ff:88:ef:1a:8d: d9:84:ec:f7:b5:b3:be:04:e4:07:37:a5:bc:73:a9: 78:51:db:8d:82:d4:ca:28:20:f2:14:49:4f:84:e4: a0:78:96:64:d7:e1:64:9b:93:1b:92:59:7b:18:ac: 00:8e:37:f0:f1:be:f5:c5:43:ff:0d:d9:bb:18:ed: 85:f1:64:95:1b:b4:4a:d8:fa:36:f1:e1:76:75:29: 50:8a:d4:3d:8c:9b:b3:41:76:d6:5c:9f:32:56:7d: 7b:37:da:3d:c3:d4:c7:02:f4:a3:57:a5:29:07:80: 3c:be:e3:6c:14:34:57:8b:09:52:90:9b:cb:c1:bc: 96:3f:55:72:5e:79:6a:c9:4f:38:46:fd:76:a9:d0: e8:f4:c0:de:58:b8:31:46:0d:ad:a9:f5:83:be:2e: f4:86:40:19:f2:c4:7b:2a:59:a5:38:f4:39:3a:d2: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:39:B2:6C:61:8C:3D:77:C4:F6:5F:91:3A:D2:DE:D6:4C:05:DC X509v3 Authority Key Identifier: keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5b:01:80:15:6b:12:a5:cf:05:6c:46:2b:99:42:35:54:dc: e8:70:2d:4d:9e:0e:7d:df:e9:e1:70:04:c8:d0:17:d2:b2:b9: da:65:81:e8:73:f9:ae:a2:bc:0b:66:92:49:c3:cc:f6:5b:bd: b2:b0:1a:6b:e3:2a:99:55:03:a5:c1:93:60:98:cd:f8:83:f7: 4c:4d:1f:41:4e:9e:37:47:0c:89:99:02:89:17:7f:1d:c3:c3: 8f:bd:7f:f3:76:2a:13:62:07:30:7a:b8:c7:8c:5e:6a:25:c9: 7e:93:91:69:e9:a3:51:df:8b:72:e6:7d:98:94:62:c9:c5:5f: 37:ca:1e:54:f4:de:88:f1:17:ab:b1:37:3d:cd:83:d9:24:73: 50:2c:0d:d2:b6:58:36:84:c6:a7:c2:10:cd:20:41:6f:30:23: fe:df:bc:26:45:b0:18:fa:96:a9:65:f0:1e:b0:0d:31:1b:a5: 07:92:74:de:35:e0:93:4f:82:46:81:10:47:bf:e2:f9:cb:b3: 67:39:ba:35:d9:06:fc:7a:5e:01:bf:1c:27:77:39:4c:cd:02: 5d:06:5f:f0:f3:60:d1:a1:c7:58:2c:7b:4d:69:a4:2a:66:20: 2d:3c:d1:b1:6f:3a:ea:29:69:d8:2a:cf:8d:6b:7a:22:3b:9e: 45:92:7e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJBMZyJGmxlSg+Q2IxNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDVhNGVkMTdhNjgxODQyMTAyY2M4ZjZlZjAzYTU2OWUx NTYxMmEwHhcNMjYwMTI2MDIwMTA5WhcNMjYwMTI3MDIwMTA5WjAzMTEwLwYDVQQD EyhkNmMwMzliMjZjNjE4YzNkNzdjNGY2NWY5MTNhZDJkZWQ2NGMwNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsQZLVypyfTEWnseZCIz4Iy5B0WE ZT9ZYUS2FQoh7mFIw6l1dOecCr/atbnYs/sokVWQiHwWwDm8FDMPFcOHRForKNVl DRfMq+nKexQR+lulQvy0/4jvGo3ZhOz3tbO+BOQHN6W8c6l4UduNgtTKKCDyFElP hOSgeJZk1+Fkm5Mbkll7GKwAjjfw8b71xUP/Ddm7GO2F8WSVG7RK2Po28eF2dSlQ itQ9jJuzQXbWXJ8yVn17N9o9w9THAvSjV6UpB4A8vuNsFDRXiwlSkJvLwbyWP1Vy XnlqyU84Rv12qdDo9MDeWLgxRg2tqfWDvi70hkAZ8sR7KlmlOPQ5OtJDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbAObJsYYw9d8T2X5E60t7WTAXcMB8GA1UdIwQY MBaAFCcFpO0XpoGEIQLMj27wOlaeFWEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUt NjUzNjhmNDA4ZGEzLzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUtNjUzNjhmNDA4ZGEz LzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1sBgBVr EqXPBWxGK5lCNVTc6HAtTZ4Ofd/p4XAEyNAX0rK52mWB6HP5rqK8C2aSScPM9lu9 srAaa+MqmVUDpcGTYJjN+IP3TE0fQU6eN0cMiZkCiRd/HcPDj71/83YqE2IHMHq4 x4xeaiXJfpORaemjUd+LcuZ9mJRiycVfN8oeVPTeiPEXq7E3Pc2D2SRzUCwN0rZY NoTGp8IQzSBBbzAj/t+8JkWwGPqWqWXwHrANMRulB5J03jXgk0+CRoEQR7/i+cuz Zzm6NdkG/HpeAb8cJ3c5TM0CXQZf8PNg0aHHWCx7TWmkKmYgLTzRsW866ilp2CrP jWt6IjueRZJ+6w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:29 2026 by rpki-client