This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json) Hash identifier: F5R3tECry1ouYe1vpCmYy7zBStYL3h9C46RFsTiqtzg= Subject key identifier: 04:5B:93:AB:5A:0B:B7:5B:56:27:1C:1E:CC:32:F0:16:CF:1C:A6:CA Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Certificate serial: 019BF651245E692684777F4CE361C7ED9EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft Manifest number: 1115 Signing time: Sun 25 Jan 2026 18:01:11 +0000 Manifest this update: Sun 25 Jan 2026 18:01:11 +0000 Manifest next update: Mon 26 Jan 2026 18:01:11 +0000 Files and hashes: 1: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: SgxSqzyvQaw38OLF28eyNmwu1YZYaoPPqXIdoQMiJ/c=) 2: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:24:5e:69:26:84:77:7f:4c:e3:61:c7:ed:9e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Validity Not Before: Jan 25 18:01:11 2026 GMT Not After : Jan 26 18:01:11 2026 GMT Subject: CN=045b93ab5a0bb75b56271c1ecc32f016cf1ca6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:a4:e6:c9:37:f9:b4:41:07:90:d2:28:06: a2:13:3d:9b:93:2d:bd:d1:85:ad:47:ed:4b:ce:85: f7:ab:74:f0:af:0d:6b:b6:b1:c5:fa:8f:4b:04:eb: e4:7d:ed:0b:d2:0f:82:d2:96:1b:2c:a9:d4:af:16: f2:90:33:fa:af:f2:77:8a:24:d0:69:3a:ec:ad:08: cd:7d:ae:d5:dd:05:67:c0:47:67:4c:6c:12:88:b5: 96:d1:15:33:90:54:7f:04:e5:f1:5a:45:03:43:31: b7:ae:27:5a:53:c3:15:8e:95:27:77:4c:15:31:6e: c4:a6:28:6c:92:9c:9d:3f:f6:56:f9:d3:9e:e5:4f: 08:10:77:1d:dd:7f:20:e8:1d:91:0d:f3:b0:9d:43: ac:1d:ef:c5:57:c8:44:61:a0:18:62:32:01:dc:d7: 51:29:fe:fc:bb:8b:2d:ef:7e:8f:e1:1c:01:b1:98: b5:9e:46:04:c0:27:68:49:29:72:38:8e:4d:2d:a9: e4:32:39:17:d9:f5:04:01:8f:06:82:14:cb:99:ae: 1e:3b:08:a9:17:dd:4f:ca:95:f2:bd:f2:ef:40:87: 2c:2f:79:f1:51:0e:59:97:9c:b3:b5:15:a6:d2:5e: 0e:6b:7b:cf:74:cc:94:81:ca:0f:b5:00:fc:2a:1f: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5B:93:AB:5A:0B:B7:5B:56:27:1C:1E:CC:32:F0:16:CF:1C:A6:CA X509v3 Authority Key Identifier: keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b5:d2:6d:77:97:be:e4:b6:08:12:d8:0e:d6:4b:f4:b8:4c: 47:a4:f0:2c:d2:40:b2:f1:70:f6:82:0f:67:03:95:c8:10:b1: eb:55:8a:78:5a:7a:8a:81:0e:54:6f:d6:62:3a:e8:ea:a3:5d: 95:39:94:fa:02:82:6b:e4:70:1f:f2:12:c7:bf:97:95:96:b7: 7e:54:39:f2:72:a1:a1:80:49:52:91:a7:f3:78:5d:0c:9a:51: 36:43:f2:11:30:c6:fd:f2:09:56:1e:49:87:d8:90:96:3c:0d: 28:65:d8:00:5d:76:37:b5:45:ad:1a:b3:2c:de:7d:1e:a9:dd: bc:85:19:9f:4b:95:25:93:30:39:9b:2c:02:71:c3:d6:c6:b9: 61:b5:18:3d:68:d9:2e:fa:a3:3a:32:b0:df:39:7d:99:e1:1a: 8a:1a:a8:28:5c:5b:54:9b:0f:db:07:f5:46:04:22:14:18:91: b2:70:19:e7:57:ef:5f:5b:81:19:e8:7b:34:5f:9e:8e:bc:db: a9:0d:04:b6:95:c0:04:41:8a:99:6c:e5:30:90:d9:46:65:53: b1:3a:19:51:6d:ad:db:98:72:51:82:ac:d4:c5:31:42:a1:07: df:3a:29:6b:85:63:64:d8:50:82:91:f5:96:51:22:a9:ae:1e: 32:fb:8e:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2USReaSaEd39M42HH7Z6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh ZWQwYjEwHhcNMjYwMTI1MTgwMTExWhcNMjYwMTI2MTgwMTExWjAzMTEwLwYDVQQD EygwNDViOTNhYjVhMGJiNzViNTYyNzFjMWVjYzMyZjAxNmNmMWNhNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z+k5sk3+bRBB5DSKAaiEz2bky29 0YWtR+1LzoX3q3Twrw1rtrHF+o9LBOvkfe0L0g+C0pYbLKnUrxbykDP6r/J3iiTQ aTrsrQjNfa7V3QVnwEdnTGwSiLWW0RUzkFR/BOXxWkUDQzG3ridaU8MVjpUnd0wV MW7EpihskpydP/ZW+dOe5U8IEHcd3X8g6B2RDfOwnUOsHe/FV8hEYaAYYjIB3NdR Kf78u4st736P4RwBsZi1nkYEwCdoSSlyOI5NLankMjkX2fUEAY8GghTLma4eOwip F91PypXyvfLvQIcsL3nxUQ5Zl5yztRWm0l4Oa3vPdMyUgcoPtQD8Kh+PAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARbk6taC7dbViccHswy8BbPHKbKMB8GA1UdIwQY MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbXSbXeX vuS2CBLYDtZL9LhMR6TwLNJAsvFw9oIPZwOVyBCx61WKeFp6ioEOVG/WYjro6qNd lTmU+gKCa+RwH/ISx7+XlZa3flQ58nKhoYBJUpGn83hdDJpRNkPyETDG/fIJVh5J h9iQljwNKGXYAF12N7VFrRqzLN59HqndvIUZn0uVJZMwOZssAnHD1sa5YbUYPWjZ LvqjOjKw3zl9meEaihqoKFxbVJsP2wf1RgQiFBiRsnAZ51fvX1uBGeh7NF+ejrzb qQ0EtpXABEGKmWzlMJDZRmVTsToZUW2t25hyUYKs1MUxQqEH3zopa4VjZNhQgpH1 llEiqa4eMvuOwg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:31 2026 by rpki-client