This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json) Hash identifier: dBZqSt+awueWNKdupoAVEy+89iWS3jQCRR/Zm7kFCpQ= Subject key identifier: 25:F1:24:DE:B6:17:DE:9C:F3:5D:9C:AB:2B:3C:8D:48:EC:01:06:97 Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Certificate serial: 019BF5E3E1B8D3BFFDC2662D86304911A9DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft Manifest number: 171C Signing time: Sun 25 Jan 2026 16:01:50 +0000 Manifest this update: Sun 25 Jan 2026 16:01:50 +0000 Manifest next update: Mon 26 Jan 2026 16:01:50 +0000 Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=) 2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: dbs60X33POC59H/cRmXur/kcPPR/pnNsQHiq97v10wM=) 3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=) 4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:e1:b8:d3:bf:fd:c2:66:2d:86:30:49:11:a9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Validity Not Before: Jan 25 16:01:50 2026 GMT Not After : Jan 26 16:01:50 2026 GMT Subject: CN=25f124deb617de9cf35d9cab2b3c8d48ec010697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:00:b0:1c:cd:af:e0:af:d0:a5:c6:65:ae: af:c1:92:d1:1f:f0:4a:46:04:15:7d:57:0a:e2:64: 11:ba:fe:0b:80:cb:e6:05:fd:10:67:7a:44:67:d1: 25:10:14:18:46:cf:4f:42:02:4b:e0:29:b6:d7:63: 6e:7b:14:25:e1:ac:df:6c:5d:08:c8:e6:d3:d8:e3: 92:ab:ad:8e:4f:df:b9:6b:e5:72:4b:c4:04:8e:cf: e4:cb:c8:af:e2:e1:29:98:22:bd:e3:bb:3e:55:ae: 45:ad:2e:5f:e8:fa:a9:ed:84:cd:d7:44:1b:b1:1b: bb:33:40:61:12:53:ba:f7:2a:e7:44:b8:e6:71:4f: 71:1c:12:ef:fc:64:a6:52:cd:b3:e4:5b:09:d5:aa: 69:c1:26:51:4d:67:ad:e8:6d:e4:1c:3e:2d:34:79: 14:af:4a:75:e5:85:80:a2:6c:71:f2:2b:3a:d7:a6: 52:d1:67:d8:38:4d:ab:f2:7c:15:26:e6:de:81:1b: a9:0a:51:84:eb:ad:b7:dd:40:62:e4:64:3d:30:1c: 2f:ec:26:f2:1b:8c:81:e8:fc:81:4f:ca:61:ae:12: 80:df:4e:f3:8f:94:6e:0c:af:51:03:34:c6:4f:6c: 88:22:44:a2:89:40:7f:e5:ab:d3:dd:7b:45:e6:73: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F1:24:DE:B6:17:DE:9C:F3:5D:9C:AB:2B:3C:8D:48:EC:01:06:97 X509v3 Authority Key Identifier: keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d4:d1:67:78:37:15:54:ce:43:70:f3:d5:06:49:01:88:85: 71:a1:bf:68:2a:36:c4:b4:24:0f:7a:d8:4b:b4:c2:8c:9f:16: cd:eb:75:3a:a7:b7:80:77:1a:b9:ef:e1:9b:11:c1:d1:39:5f: 80:b8:73:87:cb:10:ea:52:55:a4:22:92:21:e7:49:c4:a2:81: 95:a7:65:e9:c7:37:6c:19:51:c3:36:fa:0a:18:33:05:6a:7c: 40:35:22:3f:4e:69:be:67:aa:b5:23:b3:ed:a0:e7:e5:de:88: 08:3c:76:0e:82:ee:c5:9f:15:85:90:4e:55:f6:a4:17:fd:1b: 20:54:ba:24:24:b3:de:b8:3d:45:07:77:bb:92:42:b7:db:4f: 29:38:f7:6a:9c:71:6c:44:1e:01:b8:41:1e:fe:1f:93:21:cb: fa:2e:6b:02:46:bd:ce:e5:59:d6:a9:91:f1:84:55:96:b7:38: de:62:04:38:d4:ec:0c:fe:d8:1d:8f:ac:24:65:9a:ce:9b:27: e4:21:0e:20:c5:18:38:5e:d5:11:7d:ed:4f:35:92:38:38:cd: 23:30:a0:b4:83:15:ec:4d:c9:89:f4:be:13:dc:27:d8:23:02: 85:d4:08:1c:d2:59:18:0d:e9:c2:7b:43:ab:25:55:09:74:8a: b0:fd:6e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14+G407/9wmYthjBJEandMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3 MDg0ZjkwHhcNMjYwMTI1MTYwMTUwWhcNMjYwMTI2MTYwMTUwWjAzMTEwLwYDVQQD EygyNWYxMjRkZWI2MTdkZTljZjM1ZDljYWIyYjNjOGQ0OGVjMDEwNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUAsBzNr+Cv0KXGZa6vwZLRH/BK RgQVfVcK4mQRuv4LgMvmBf0QZ3pEZ9ElEBQYRs9PQgJL4Cm212NuexQl4azfbF0I yObT2OOSq62OT9+5a+VyS8QEjs/ky8iv4uEpmCK947s+Va5FrS5f6Pqp7YTN10Qb sRu7M0BhElO69yrnRLjmcU9xHBLv/GSmUs2z5FsJ1appwSZRTWet6G3kHD4tNHkU r0p15YWAomxx8is616ZS0WfYOE2r8nwVJubegRupClGE66233UBi5GQ9MBwv7Cby G4yB6PyBT8phrhKA307zj5RuDK9RAzTGT2yIIkSiiUB/5avT3XtF5nMN/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXxJN62F96c812cqys8jUjsAQaXMB8GA1UdIwQY MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt ODhmN2I5MWI2ZTMyLzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdTRZ3g3 FVTOQ3Dz1QZJAYiFcaG/aCo2xLQkD3rYS7TCjJ8Wzet1Oqe3gHcaue/hmxHB0Tlf gLhzh8sQ6lJVpCKSIedJxKKBladl6cc3bBlRwzb6ChgzBWp8QDUiP05pvmeqtSOz 7aDn5d6ICDx2DoLuxZ8VhZBOVfakF/0bIFS6JCSz3rg9RQd3u5JCt9tPKTj3apxx bEQeAbhBHv4fkyHL+i5rAka9zuVZ1qmR8YRVlrc43mIEONTsDP7YHY+sJGWazpsn 5CEOIMUYOF7VEX3tTzWSODjNIzCgtIMV7E3JifS+E9wn2CMChdQIHNJZGA3pwntD qyVVCXSKsP1ubg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:47 2026 by rpki-client