This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json) Hash identifier: 1BGudkUMKqNnnjiY9HFgeiNIRThZxriR1xNbo1Uvg7U= Subject key identifier: B9:4B:A7:D4:5B:22:01:62:2C:03:6F:FA:40:69:34:15:F0:2C:2A:9F Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Certificate serial: 019BF53DDD207082531A1F2B4C20E6239A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft Manifest number: 03D0 Signing time: Sun 25 Jan 2026 13:00:30 +0000 Manifest this update: Sun 25 Jan 2026 13:00:30 +0000 Manifest next update: Mon 26 Jan 2026 13:00:30 +0000 Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=) 2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: 7nCCwWwHnnkgTznc6+CxHnHGZLIcEA2hEXlAaYPNH7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:dd:20:70:82:53:1a:1f:2b:4c:20:e6:23:9a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Validity Not Before: Jan 25 13:00:30 2026 GMT Not After : Jan 26 13:00:30 2026 GMT Subject: CN=b94ba7d45b2201622c036ffa40693415f02c2a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:11:2c:9b:ad:53:78:7d:68:6a:fd:98:ea: 0c:1d:05:79:ca:74:82:1f:36:88:ab:a8:f1:e5:f0: 78:58:26:e8:8a:3d:d0:64:a3:36:93:cf:e9:d6:07: 20:58:ea:6d:53:c7:e6:6f:ee:24:ce:a8:75:87:0b: 80:03:09:86:33:71:c7:f6:b1:14:e6:49:b3:b1:dc: 34:d6:d3:47:ab:f5:b2:52:77:f5:fa:4e:43:53:d3: 2a:e0:1c:9a:93:d0:21:13:36:8e:3b:a7:c3:c0:c6: 5c:2f:b0:fd:1f:c9:34:cf:09:70:b4:45:36:97:0c: b1:cb:69:df:58:10:af:6a:c2:df:8f:6e:77:59:04: 00:db:69:19:17:15:ac:ed:01:0f:a6:48:f1:0b:1f: 9a:7b:92:58:0b:42:b9:83:c4:b5:0d:2c:a8:77:27: 3c:64:6f:cb:4f:b2:93:d4:c9:28:cd:f4:06:1a:7f: f9:cb:60:ce:1f:61:57:22:32:fa:59:3b:ad:ab:a0: 50:29:95:e6:47:d7:56:e4:17:5e:8f:76:21:cd:70: 45:b5:2b:7c:8c:62:07:ad:d7:53:f3:56:11:74:8c: d5:c4:69:a8:c9:91:9d:af:1f:fa:27:6c:41:71:5f: d7:4b:c9:86:3f:ba:1f:85:92:bb:3c:c5:25:00:80: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4B:A7:D4:5B:22:01:62:2C:03:6F:FA:40:69:34:15:F0:2C:2A:9F X509v3 Authority Key Identifier: keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:10:39:ab:be:b3:31:ac:43:e6:5c:7a:8f:89:6f:40:b7:34: 44:7b:00:2f:df:f2:30:0a:13:4a:7c:99:09:ac:b9:d7:94:5b: bf:85:fd:cc:e6:c0:8a:0c:ff:1c:41:a7:de:ff:fb:ec:35:0b: 59:ea:e7:5d:83:be:21:c6:02:59:2e:04:29:f3:4d:96:7a:52: 3f:dd:f9:00:93:f9:e1:dd:ce:5c:bd:62:91:ee:79:1f:2f:e3: cb:5c:b1:c9:d7:f0:54:a6:46:f5:91:80:86:50:7d:d3:9f:de: cf:1a:91:f6:a7:1b:59:bd:1e:dd:1e:e9:4d:5d:c7:a5:14:00: b8:e4:50:56:0f:6e:50:ae:89:b9:24:97:51:62:00:00:e4:b3: 46:bf:cf:fc:11:24:ff:5f:c3:74:f0:f4:80:ad:02:72:fd:4a: 03:09:c1:2f:26:fe:33:a1:18:e7:94:b4:b5:5a:a5:bf:f4:96: 29:43:f3:55:22:60:b0:1c:2d:bf:44:92:2b:b6:a2:aa:cc:6e: c5:2e:cb:8f:41:a5:23:46:50:47:b9:59:b3:66:45:99:c8:df: 81:2b:5f:a3:4d:f3:77:0e:63:70:df:81:73:75:a0:73:2b:2d: 17:da:7c:c8:b9:3e:f2:c9:eb:19:34:88:a4:f5:5e:38:1a:66: da:45:09:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pd0gcIJTGh8rTCDmI5ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj Zjc2M2YwHhcNMjYwMTI1MTMwMDMwWhcNMjYwMTI2MTMwMDMwWjAzMTEwLwYDVQQD EyhiOTRiYTdkNDViMjIwMTYyMmMwMzZmZmE0MDY5MzQxNWYwMmMyYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaIRLJutU3h9aGr9mOoMHQV5ynSC HzaIq6jx5fB4WCboij3QZKM2k8/p1gcgWOptU8fmb+4kzqh1hwuAAwmGM3HH9rEU 5kmzsdw01tNHq/WyUnf1+k5DU9Mq4Byak9AhEzaOO6fDwMZcL7D9H8k0zwlwtEU2 lwyxy2nfWBCvasLfj253WQQA22kZFxWs7QEPpkjxCx+ae5JYC0K5g8S1DSyodyc8 ZG/LT7KT1MkozfQGGn/5y2DOH2FXIjL6WTutq6BQKZXmR9dW5Bdej3YhzXBFtSt8 jGIHrddT81YRdIzVxGmoyZGdrx/6J2xBcV/XS8mGP7ofhZK7PMUlAID59QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlLp9RbIgFiLANv+kBpNBXwLCqfMB8GA1UdIwQY MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRA5q76z MaxD5lx6j4lvQLc0RHsAL9/yMAoTSnyZCay515Rbv4X9zObAigz/HEGn3v/77DUL WernXYO+IcYCWS4EKfNNlnpSP935AJP54d3OXL1ike55Hy/jy1yxydfwVKZG9ZGA hlB905/ezxqR9qcbWb0e3R7pTV3HpRQAuORQVg9uUK6JuSSXUWIAAOSzRr/P/BEk /1/DdPD0gK0Ccv1KAwnBLyb+M6EY55S0tVqlv/SWKUPzVSJgsBwtv0SSK7aiqsxu xS7Lj0GlI0ZQR7lZs2ZFmcjfgStfo03zdw5jcN+Bc3WgcystF9p8yLk+8snrGTSI pPVeOBpm2kUJew== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:12 2026 by rpki-client