This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json) Hash identifier: dMQc4vPIMzgw3rW8dc7i0L/tSbk8Pzt6qfp4dtT/esg= Subject key identifier: D4:B3:57:5E:E4:4F:25:52:32:0D:99:66:46:29:92:CA:06:2A:6F:64 Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Certificate serial: 019BF350287EFC3EBE1274BD82913B6C2FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 04:01:15 +0000 Manifest this update: Sun 25 Jan 2026 04:01:15 +0000 Manifest next update: Mon 26 Jan 2026 04:01:15 +0000 Files and hashes: 1: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (hash: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs=) 2: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: I3iM9pecl+mGPzqthFpeuwwSENpoku2OetnRCBknIzE=) 3: kNR-gUHIBkAVG5LDVgVJxvEY3q8.roa (hash: d0VW7tyS0/KepNZdJ2Fz8K2kUTPgtIVFBZK37jfxU0M=) 4: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (hash: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4=) 5: v9YovKS0rkxgh-imaNT6dS4t8wE.roa (hash: +gjCRrqjahMp/Uxvqf8OR5Yjihz0o/VceeWEOtR4+ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:28:7e:fc:3e:be:12:74:bd:82:91:3b:6c:2f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4 Validity Not Before: Jan 25 04:01:15 2026 GMT Not After : Jan 26 04:01:15 2026 GMT Subject: CN=d4b3575ee44f2552320d9966462992ca062a6f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c5:40:eb:c7:c9:12:02:43:ca:cb:fe:ea:8c: 3f:9b:06:51:9f:3b:23:39:a2:72:e9:13:f8:86:a7: 39:95:8b:04:2f:77:6c:4e:fb:3e:0b:8e:fb:b2:e9: 60:33:70:c0:fa:d7:03:54:bd:23:cf:37:af:80:25: 06:94:6e:18:f3:75:12:32:99:1e:e6:d0:9e:10:de: ce:d9:91:fa:4d:71:dc:f9:66:2b:12:f0:b0:da:9d: e8:57:ac:00:c5:db:33:1b:dd:17:92:46:3e:79:d8: f7:70:4a:94:f1:3f:c3:db:f7:8d:40:20:91:d7:13: 82:2a:8c:77:71:9e:8a:29:7c:0f:37:89:93:25:ad: 55:df:d4:9a:4b:34:ab:42:0b:ca:8f:7d:c9:20:6d: 82:7d:4b:10:62:9a:e1:af:c4:ce:5f:c3:0f:70:0e: 6d:88:fa:f9:db:78:f7:ec:31:37:b0:6f:20:41:d8: 3e:e1:30:64:6d:86:19:f6:fe:af:10:f6:6f:89:03: 54:f5:87:c9:2a:5f:0b:7a:57:87:d9:34:ca:c9:a2: c7:52:fd:ea:7a:74:1e:96:cf:07:2e:1a:c0:8f:98: e5:6f:c2:49:e9:0a:be:4a:f4:3e:a5:15:48:fd:ef: b3:b0:66:14:d1:e7:05:f2:e4:d9:62:1a:2b:06:0c: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B3:57:5E:E4:4F:25:52:32:0D:99:66:46:29:92:CA:06:2A:6F:64 X509v3 Authority Key Identifier: keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:62:55:60:76:25:aa:9d:7e:b0:96:ea:39:d3:38:bd:ba:69: 7d:b5:be:25:6e:3b:56:52:54:b1:d7:28:49:21:cc:de:8a:c6: af:74:21:fa:15:75:0e:86:be:5d:3b:a2:66:02:2e:6a:59:9a: 04:27:61:bf:cf:65:2d:6a:de:b6:e1:fb:6b:06:33:66:4a:bd: 4b:e8:8b:ae:06:70:69:0d:f6:6e:b5:2a:68:1e:2a:3b:81:11: 08:47:15:56:2e:88:11:24:12:1a:d0:90:e6:7b:f2:49:05:88: a8:52:ac:48:07:67:da:3c:e9:32:0f:65:a8:a3:6f:27:33:f5: 95:47:d9:bb:0b:89:3e:89:58:fd:82:94:67:77:d8:a5:2a:26: ce:35:90:8e:35:a9:99:26:92:43:bd:94:9b:75:51:9b:6a:45: aa:f7:15:c2:f5:55:79:85:c7:67:25:26:b9:c4:1d:0b:e7:d4: 6b:a9:d7:5c:a3:b9:53:1a:a1:fb:79:c0:0f:e2:76:fd:0e:b9: c7:85:ba:c2:39:fa:70:c5:7d:73:4c:ec:cf:46:e1:ac:42:a8: 7f:21:bb:bb:bd:5c:10:07:ac:91:03:a3:43:44:3c:73:1d:72: 40:82:98:67:46:b4:fb:ec:6f:18:69:56:a0:e4:ab:fc:ee:e4: 38:4b:66:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUCh+/D6+EnS9gpE7bC/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx ZTI5YzQwHhcNMjYwMTI1MDQwMTE1WhcNMjYwMTI2MDQwMTE1WjAzMTEwLwYDVQQD EyhkNGIzNTc1ZWU0NGYyNTUyMzIwZDk5NjY0NjI5OTJjYTA2MmE2ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cVA68fJEgJDysv+6ow/mwZRnzsj OaJy6RP4hqc5lYsEL3dsTvs+C477sulgM3DA+tcDVL0jzzevgCUGlG4Y83USMpke 5tCeEN7O2ZH6TXHc+WYrEvCw2p3oV6wAxdszG90XkkY+edj3cEqU8T/D2/eNQCCR 1xOCKox3cZ6KKXwPN4mTJa1V39SaSzSrQgvKj33JIG2CfUsQYprhr8TOX8MPcA5t iPr523j37DE3sG8gQdg+4TBkbYYZ9v6vEPZviQNU9YfJKl8LeleH2TTKyaLHUv3q enQels8HLhrAj5jlb8JJ6Qq+SvQ+pRVI/e+zsGYU0ecF8uTZYhorBgzA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSzV17kTyVSMg2ZZkYpksoGKm9kMB8GA1UdIwQY MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2JVYHYl qp1+sJbqOdM4vbppfbW+JW47VlJUsdcoSSHM3orGr3Qh+hV1Doa+XTuiZgIualma BCdhv89lLWretuH7awYzZkq9S+iLrgZwaQ32brUqaB4qO4ERCEcVVi6IESQSGtCQ 5nvySQWIqFKsSAdn2jzpMg9lqKNvJzP1lUfZuwuJPolY/YKUZ3fYpSomzjWQjjWp mSaSQ72Um3VRm2pFqvcVwvVVeYXHZyUmucQdC+fUa6nXXKO5Uxqh+3nAD+J2/Q65 x4W6wjn6cMV9c0zsz0bhrEKofyG7u71cEAeskQOjQ0Q8cx1yQIKYZ0a0++xvGGlW oOSr/O7kOEtmxQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:40:20 2026 by rpki-client