This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json) Hash identifier: 8aiylHRcQlNbqP9xjMRdfRFQXo36Y77cbk4R5dNpvkU= Subject key identifier: 85:59:19:46:27:3D:23:A1:39:EE:5A:C4:B0:85:4D:F7:92:31:CC:12 Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Certificate serial: 019BF5755F650337D985B727CCBFF3107EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft Manifest number: 0282 Signing time: Sun 25 Jan 2026 14:01:08 +0000 Manifest this update: Sun 25 Jan 2026 14:01:08 +0000 Manifest next update: Mon 26 Jan 2026 14:01:08 +0000 Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: wFJ0d6PQ07Ksf0+3h+mRs6ulHV42LgaA5/Ne5GJsaDM=) 2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:5f:65:03:37:d9:85:b7:27:cc:bf:f3:10:7e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Validity Not Before: Jan 25 14:01:08 2026 GMT Not After : Jan 26 14:01:08 2026 GMT Subject: CN=85591946273d23a139ee5ac4b0854df79231cc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fb:06:4f:21:71:33:3b:f9:f4:1e:46:70:f2: 72:7c:68:8f:42:d3:f5:f1:62:ba:6c:60:cf:c6:ca: 58:89:bc:88:2c:f8:72:38:08:a7:27:86:db:d0:7c: 31:3d:16:d6:90:56:8a:77:be:eb:60:8e:46:ca:4a: 9d:29:85:d5:75:fe:08:60:88:ac:83:0e:a7:ba:45: ce:de:54:bb:de:07:f1:51:a1:cd:55:68:d3:91:57: 19:8f:d9:6a:d1:06:50:5a:29:a7:c1:e9:09:64:b9: 19:cf:3b:2d:80:76:49:e7:20:90:e7:c6:8e:96:c4: 1b:e7:e6:99:45:48:bf:1c:33:e1:98:88:7b:f7:fb: 4c:be:a6:94:2c:f5:78:02:1f:86:a9:79:0b:7c:4b: d0:cc:19:9a:eb:d5:13:6a:2e:37:1c:3b:26:15:2b: 0d:52:c9:be:02:32:9b:96:0c:f0:36:4d:cb:50:4d: f4:67:56:11:f9:00:b5:15:7a:57:51:1e:81:33:42: 62:96:24:56:8d:cc:3e:51:19:9a:7b:2e:98:6f:c4: fd:a1:82:ba:20:b9:ab:ec:46:f3:11:9d:c4:e0:e0: 45:23:44:f4:f3:6a:74:6c:36:ce:08:21:0a:53:16: d5:18:a0:ca:42:1a:d5:d2:60:5d:28:5c:ca:b6:f8: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:19:46:27:3D:23:A1:39:EE:5A:C4:B0:85:4D:F7:92:31:CC:12 X509v3 Authority Key Identifier: keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:40:61:1b:41:92:2a:12:82:42:48:80:b0:4d:b9:ea:bf:7b: f2:bc:cd:48:28:49:61:7d:c2:e0:10:9c:5b:d4:85:38:3b:2e: 39:77:0d:cc:aa:90:65:68:e7:09:32:0b:fd:f3:e0:4f:c3:48: e6:a6:a9:3d:f9:ba:99:be:b6:23:0b:53:fc:e6:fc:ce:79:36: 9f:be:d5:7a:83:00:61:3c:36:af:98:fc:20:b3:13:3c:e8:6b: 09:fd:9f:e6:b7:3a:6e:17:69:58:cf:80:3f:03:1b:b9:02:f0: eb:88:39:e4:dc:88:6e:a8:7f:e4:b0:71:00:1e:3a:1a:0d:df: e7:70:ff:f7:91:a0:8f:01:6d:a6:b0:63:d1:32:41:44:12:10: d3:d5:aa:9a:91:2d:71:3c:a0:11:d9:47:88:4b:f6:af:77:ee: df:63:ff:7c:2e:39:87:b1:0a:ec:cc:69:14:19:89:f4:0e:d0: 35:88:a3:fc:e3:5d:5c:6e:9f:c9:71:56:58:37:6b:a6:42:7e: 77:4d:04:e9:a9:39:06:4b:23:c3:6e:cf:f6:46:7f:82:ac:83: 51:65:b3:d2:b0:f0:cd:1e:23:1f:9f:57:a1:bf:55:0f:22:e9: 1b:a9:02:75:3c:39:be:cf:3a:7d:f2:c3:74:27:6c:d2:8f:c2: 55:bb:27:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dV9lAzfZhbcnzL/zEH6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy OTUwZjgwHhcNMjYwMTI1MTQwMTA4WhcNMjYwMTI2MTQwMTA4WjAzMTEwLwYDVQQD Eyg4NTU5MTk0NjI3M2QyM2ExMzllZTVhYzRiMDg1NGRmNzkyMzFjYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/sGTyFxMzv59B5GcPJyfGiPQtP1 8WK6bGDPxspYibyILPhyOAinJ4bb0HwxPRbWkFaKd77rYI5GykqdKYXVdf4IYIis gw6nukXO3lS73gfxUaHNVWjTkVcZj9lq0QZQWimnwekJZLkZzzstgHZJ5yCQ58aO lsQb5+aZRUi/HDPhmIh79/tMvqaULPV4Ah+GqXkLfEvQzBma69UTai43HDsmFSsN Usm+AjKblgzwNk3LUE30Z1YR+QC1FXpXUR6BM0JiliRWjcw+URmaey6Yb8T9oYK6 ILmr7EbzEZ3E4OBFI0T082p0bDbOCCEKUxbVGKDKQhrV0mBdKFzKtvjw1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVZGUYnPSOhOe5axLCFTfeSMcwSMB8GA1UdIwQY MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEBhG0GS KhKCQkiAsE256r978rzNSChJYX3C4BCcW9SFODsuOXcNzKqQZWjnCTIL/fPgT8NI 5qapPfm6mb62IwtT/Ob8znk2n77VeoMAYTw2r5j8ILMTPOhrCf2f5rc6bhdpWM+A PwMbuQLw64g55NyIbqh/5LBxAB46Gg3f53D/95GgjwFtprBj0TJBRBIQ09WqmpEt cTygEdlHiEv2r3fu32P/fC45h7EK7MxpFBmJ9A7QNYij/ONdXG6fyXFWWDdrpkJ+ d00E6ak5Bksjw27P9kZ/gqyDUWWz0rDwzR4jH59Xob9VDyLpG6kCdTw5vs86ffLD dCds0o/CVbsn/A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:17 2026 by rpki-client