This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json) Hash identifier: 6upUrnXZimsZvv4pdqzuu9lCoENN1RxQnICSpu0argg= Subject key identifier: A7:6D:3A:79:F9:49:CB:1D:75:59:80:53:D7:1C:06:A3:1B:E7:CF:EE Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Certificate serial: 019BF574DCC3D1F0C6C7D3B5AFFE67215737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft Manifest number: 1016 Signing time: Sun 25 Jan 2026 14:00:35 +0000 Manifest this update: Sun 25 Jan 2026 14:00:35 +0000 Manifest next update: Mon 26 Jan 2026 14:00:35 +0000 Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=) 2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: NcGUJZo01HUqyczdspbVMtNPRi75gryNlM7P8n1Fjt0=) 3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=) 4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:dc:c3:d1:f0:c6:c7:d3:b5:af:fe:67:21:57:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Validity Not Before: Jan 25 14:00:35 2026 GMT Not After : Jan 26 14:00:35 2026 GMT Subject: CN=a76d3a79f949cb1d75598053d71c06a31be7cfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:02:72:77:97:4c:7b:6f:32:32:20:dd:71: d7:d8:85:8b:1f:bb:e8:ce:5a:58:12:cc:3c:c0:bf: 7e:06:62:e4:0b:aa:00:92:18:20:88:01:87:c0:50: 92:1c:94:1d:c5:a8:fc:d2:56:9a:88:96:4f:83:0d: cb:c2:e7:da:97:8b:46:5e:69:16:0a:a6:d5:e4:be: 81:16:80:48:6c:0b:0e:95:81:a7:a3:dc:e5:9e:db: 2a:93:ba:29:16:63:a5:e7:0c:80:f1:f5:db:7b:8e: d1:26:5c:3a:66:6e:a7:94:3c:ea:e4:db:33:4d:24: 0c:b3:40:ca:6e:19:1b:bd:ee:38:9c:55:6f:7a:61: 5b:b8:69:c5:84:22:d1:7a:6e:1d:9c:fc:8b:a4:5f: f6:72:06:78:a3:68:95:d4:a2:35:c5:68:ac:4d:53: e7:32:47:4f:75:06:60:6e:7c:eb:14:86:b6:ee:2f: 95:56:46:53:04:d6:54:66:34:8c:cd:c1:15:14:60: 6e:90:23:e5:6b:04:40:e1:a9:c3:8c:42:fd:3e:b2: fa:cc:79:d3:42:b1:2b:56:df:cc:5a:f7:19:3b:38: 4e:74:c2:57:94:82:95:c1:d0:ee:f4:74:6f:f8:69: 44:27:de:77:a2:87:c9:20:02:7d:b2:6f:35:3f:6a: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6D:3A:79:F9:49:CB:1D:75:59:80:53:D7:1C:06:A3:1B:E7:CF:EE X509v3 Authority Key Identifier: keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8d:83:e5:d9:87:4d:bc:87:8e:28:f7:5b:43:03:c4:44:e7: b2:ad:ea:03:04:69:d1:ad:83:55:3a:cd:4c:c4:da:d5:f9:84: 57:41:39:24:0e:6a:ff:c9:10:f3:f2:a5:03:5e:60:b0:2d:ce: 51:7a:1d:3b:db:b2:75:e7:c3:1f:5d:14:b9:70:48:9c:80:8a: 3e:02:ab:2c:ba:7a:3b:d0:b2:83:97:4e:f3:66:14:2e:49:51: a5:06:3c:59:5d:13:cc:52:ea:65:81:53:c4:b3:ee:9e:b1:3d: a6:b1:19:71:f3:cc:ba:6a:5f:ce:70:12:b0:62:2b:75:45:2f: 1f:45:a9:ee:3a:3c:c3:8f:b3:59:ae:d0:e8:55:eb:2e:d7:65: 1c:bc:8d:b5:e5:cc:ac:7c:5f:ba:d7:39:0c:39:e9:27:a2:d7: 33:6d:98:36:61:88:63:c8:dc:3b:89:b2:14:76:e4:f4:48:97: 33:46:4b:2e:d7:cc:d4:52:08:b5:2c:1a:6a:16:b2:90:32:8c: 8a:96:87:8d:1d:12:1c:c6:13:ab:f5:27:ae:4f:93:fa:84:1c: e4:af:e1:f4:a7:51:39:fa:ba:5e:0a:91:14:59:9b:8c:bd:64: b0:e1:3e:f6:41:a7:ef:9f:68:69:26:0d:63:d2:b7:9e:fb:f3: 55:e9:95:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNzD0fDGx9O1r/5nIVc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz ZmY1YTIwHhcNMjYwMTI1MTQwMDM1WhcNMjYwMTI2MTQwMDM1WjAzMTEwLwYDVQQD EyhhNzZkM2E3OWY5NDljYjFkNzU1OTgwNTNkNzFjMDZhMzFiZTdjZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3wCcneXTHtvMjIg3XHX2IWLH7vo zlpYEsw8wL9+BmLkC6oAkhggiAGHwFCSHJQdxaj80laaiJZPgw3Lwufal4tGXmkW CqbV5L6BFoBIbAsOlYGno9zlntsqk7opFmOl5wyA8fXbe47RJlw6Zm6nlDzq5Nsz TSQMs0DKbhkbve44nFVvemFbuGnFhCLRem4dnPyLpF/2cgZ4o2iV1KI1xWisTVPn MkdPdQZgbnzrFIa27i+VVkZTBNZUZjSMzcEVFGBukCPlawRA4anDjEL9PrL6zHnT QrErVt/MWvcZOzhOdMJXlIKVwdDu9HRv+GlEJ953oofJIAJ9sm81P2rx0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdtOnn5ScsddVmAU9ccBqMb58/uMB8GA1UdIwQY MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt YjI5MTA3Yjk4YWNjLzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI2D5dmH TbyHjij3W0MDxETnsq3qAwRp0a2DVTrNTMTa1fmEV0E5JA5q/8kQ8/KlA15gsC3O UXodO9uydefDH10UuXBInICKPgKrLLp6O9Cyg5dO82YULklRpQY8WV0TzFLqZYFT xLPunrE9prEZcfPMumpfznASsGIrdUUvH0Wp7jo8w4+zWa7Q6FXrLtdlHLyNteXM rHxfutc5DDnpJ6LXM22YNmGIY8jcO4myFHbk9EiXM0ZLLtfM1FIItSwaahaykDKM ipaHjR0SHMYTq/Unrk+T+oQc5K/h9KdROfq6XgqRFFmbjL1ksOE+9kGn759oaSYN Y9K3nvvzVemVGw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:35 2026 by rpki-client