This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft File: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json) Hash identifier: Rz4JBc8Tq5Ugz5oMp96Ohjo5HCUvjBWAH1bVuGaAXzQ= Subject key identifier: 2D:E6:C9:85:B2:EE:2D:41:CD:5C:5B:83:A0:0F:F3:3E:CC:3C:E7:A8 Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7 Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7 Certificate serial: 019BF9BFA9D1438064ACBCA2FD2EF58C2107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 10:00:46 +0000 Manifest this update: Mon 26 Jan 2026 10:00:46 +0000 Manifest next update: Tue 27 Jan 2026 10:00:46 +0000 Files and hashes: 1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: IOHakj41O7tlgNITKaX0m8AGbg/Ljbt1rsLGAEUkBTI=) 2: SPWsU8T9PLAubzeedd1G0T5GSAM.roa (hash: UkMo0FW619fM25TcBwQ8m/aK6wdUQ2mji2t/icRA2rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:a9:d1:43:80:64:ac:bc:a2:fd:2e:f5:8c:21:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7 Validity Not Before: Jan 26 10:00:46 2026 GMT Not After : Jan 27 10:00:46 2026 GMT Subject: CN=2de6c985b2ee2d41cd5c5b83a00ff33ecc3ce7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:4d:18:d7:78:83:8b:6d:87:4e:16:03:9e: 6b:2c:ac:5b:0a:96:12:13:52:47:16:78:96:a1:50: ef:46:62:d4:92:11:67:e8:e8:27:6c:50:06:b8:63: d4:a1:f3:6e:fe:5a:62:fc:a9:82:66:c3:94:29:da: 03:7c:b3:36:72:85:ea:f3:c2:0e:3f:ad:96:5f:1c: 22:cd:17:ad:de:b2:8a:0b:4d:8e:92:3a:ec:4f:dc: e2:da:89:ff:96:93:3b:46:b5:91:cc:28:d8:78:17: 16:1e:c5:6f:ff:14:18:a1:62:27:32:cf:71:77:2f: d2:a1:a1:6d:ce:9a:49:4b:08:1d:05:04:d5:36:6d: ae:5a:7d:09:99:db:76:28:3f:9f:74:94:2d:07:fe: 08:3c:66:d6:97:3c:67:fe:7d:80:ee:be:d8:b1:a3: 8c:ff:e5:2f:ac:48:52:d3:58:0d:ef:ec:bb:f5:b6: 11:96:17:69:bc:a5:7e:05:fe:88:cc:89:eb:05:45: 37:5b:81:dc:5b:55:ca:5c:3f:8b:f6:62:c6:93:36: ed:54:6f:02:f5:cc:11:21:3b:c3:b2:e2:79:32:17: 4c:f0:7d:f1:ce:ca:c7:1c:b4:d7:47:f2:a5:08:b8: 4b:b3:bc:0e:16:38:4b:56:92:45:db:75:7a:29:be: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:C9:85:B2:EE:2D:41:CD:5C:5B:83:A0:0F:F3:3E:CC:3C:E7:A8 X509v3 Authority Key Identifier: keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ee:8e:04:12:20:92:69:ff:64:19:6b:c7:b4:a6:96:3d:b7: cd:3e:de:81:69:f1:5e:72:05:9e:60:64:0d:ff:8e:64:14:ab: af:8c:b6:2e:1c:34:72:55:08:f6:df:40:d1:71:d4:3c:70:f5: a4:c7:16:50:0f:ca:62:4c:1b:90:49:cb:19:92:dd:de:87:0f: 4e:ed:3b:c2:95:02:de:eb:18:76:dc:4e:3b:45:45:cf:39:77: 50:a3:ee:77:f1:71:4c:f5:15:46:43:cd:28:3d:b5:07:52:9d: 8a:44:0b:5b:90:fc:d4:0a:50:d5:4d:f8:93:9d:8b:78:a6:48: 43:9a:04:6d:b5:7c:6d:f4:8e:a9:88:82:18:ae:1a:2f:4a:12: 14:df:20:70:94:8c:76:3a:b3:e7:1e:01:54:24:6a:00:fa:b2: df:30:02:da:ae:ce:fe:e8:15:de:48:1f:ba:0f:ca:c6:72:e2: 2b:76:13:bd:72:f9:5f:83:13:2f:18:30:cd:73:07:62:3b:43: d5:1d:45:79:a9:76:88:76:a9:89:a1:e1:c9:2e:17:30:42:dc: 6f:0f:4d:fe:98:fa:d9:56:d9:33:66:62:ae:45:7a:3d:da:5b: 36:f3:c7:cb:3f:a7:b5:77:29:e3:ac:b6:eb:bc:1e:89:64:af: fa:0c:39:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v6nRQ4BkrLyi/S71jCEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjBiNzM3NzE1MTE0ZGVkMjBmNjhlZjAzNDdkOWY3NTJh MGUwYjcwHhcNMjYwMTI2MTAwMDQ2WhcNMjYwMTI3MTAwMDQ2WjAzMTEwLwYDVQQD EygyZGU2Yzk4NWIyZWUyZDQxY2Q1YzViODNhMDBmZjMzZWNjM2NlN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2whNGNd4g4tth04WA55rLKxbCpYS E1JHFniWoVDvRmLUkhFn6OgnbFAGuGPUofNu/lpi/KmCZsOUKdoDfLM2coXq88IO P62WXxwizRet3rKKC02OkjrsT9zi2on/lpM7RrWRzCjYeBcWHsVv/xQYoWInMs9x dy/SoaFtzppJSwgdBQTVNm2uWn0Jmdt2KD+fdJQtB/4IPGbWlzxn/n2A7r7YsaOM /+UvrEhS01gN7+y79bYRlhdpvKV+Bf6IzInrBUU3W4HcW1XKXD+L9mLGkzbtVG8C 9cwRITvDsuJ5MhdM8H3xzsrHHLTXR/KlCLhLs7wOFjhLVpJF23V6Kb7FZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3myYWy7i1BzVxbg6AP8z7MPOeoMB8GA1UdIwQY MBaAFCfwtzdxURTe0g9o7wNH2fdSoOC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2Ut MWVkNjIwNDUyNTA5LzEvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2UtMWVkNjIwNDUyNTA5 LzEvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO6OBBIg kmn/ZBlrx7Smlj23zT7egWnxXnIFnmBkDf+OZBSrr4y2Lhw0clUI9t9A0XHUPHD1 pMcWUA/KYkwbkEnLGZLd3ocPTu07wpUC3usYdtxOO0VFzzl3UKPud/FxTPUVRkPN KD21B1KdikQLW5D81ApQ1U34k52LeKZIQ5oEbbV8bfSOqYiCGK4aL0oSFN8gcJSM djqz5x4BVCRqAPqy3zAC2q7O/ugV3kgfug/KxnLiK3YTvXL5X4MTLxgwzXMHYjtD 1R1Feal2iHapiaHhyS4XMELcbw9N/pj62VbZM2ZirkV6PdpbNvPHyz+ntXcp46y2 67weiWSv+gw5QA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:25 2026 by rpki-client