This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json) Hash identifier: /vMTK6Qe2WI4iLVvXMjYtsjSWIWPPjavmgpBAMzIcS8= Subject key identifier: 52:CE:1F:05:E2:6A:95:78:23:72:80:DC:81:DB:60:87:84:B7:8D:A9 Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Certificate serial: 019BF5AC139015BC9AFE45FF88E3414012FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft Manifest number: 17A9 Signing time: Sun 25 Jan 2026 15:00:53 +0000 Manifest this update: Sun 25 Jan 2026 15:00:53 +0000 Manifest next update: Mon 26 Jan 2026 15:00:53 +0000 Files and hashes: 1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=) 2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: NG9JltTjAYAItzNZBDj1mJMt3QWgSmO7GAhR0WbXWg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:13:90:15:bc:9a:fe:45:ff:88:e3:41:40:12:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Validity Not Before: Jan 25 15:00:53 2026 GMT Not After : Jan 26 15:00:53 2026 GMT Subject: CN=52ce1f05e26a9578237280dc81db608784b78da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:20:88:e7:a4:44:31:be:2f:b5:67:80:74: 6d:a3:3c:56:1c:79:4b:90:96:ec:0e:67:6e:35:a9: e4:86:60:b2:b3:ba:38:c1:41:5f:f2:59:65:2c:ed: cb:e7:34:91:fb:54:6e:2c:77:07:f6:92:ba:fc:0e: 3d:8f:95:80:b4:5c:f5:17:8e:6c:3b:29:9b:67:13: 4e:51:34:44:7f:6c:2f:88:cf:98:21:d0:b0:43:a4: 83:64:c2:ec:98:0f:f2:30:9e:bb:59:dd:c0:ee:3d: 26:5a:f0:a1:e0:3f:63:18:5b:74:25:ad:d9:02:01: 8f:66:53:ca:72:dc:ac:92:3b:a5:9a:7f:4e:e1:88: cb:f6:d7:28:d0:92:09:5c:b2:6e:e6:97:7d:6c:a2: a7:14:1e:99:9e:a8:b5:65:b7:84:ad:cf:71:65:5b: 72:36:b8:ef:53:88:3c:90:37:f1:62:b4:0e:dd:49: cc:2d:76:72:05:cb:39:c8:e1:2e:16:1e:64:55:f2: 8e:e5:ff:86:3d:ec:fa:a5:3a:7e:25:e2:3d:fd:11: ad:9d:94:c3:c7:83:65:e7:1f:e1:41:4b:55:70:1f: 8e:b9:b1:79:84:7c:66:33:ae:85:c0:5b:86:0c:68: cd:aa:20:42:d6:1e:a0:05:19:f4:74:d8:a0:f6:8b: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:1F:05:E2:6A:95:78:23:72:80:DC:81:DB:60:87:84:B7:8D:A9 X509v3 Authority Key Identifier: keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:96:9f:8b:54:e4:f2:8b:fc:f1:d3:b0:ff:66:81:a8:c3: 52:a2:35:2a:4b:32:aa:f3:f0:b6:b5:65:4d:41:8c:68:9a:c9: 08:3e:69:72:9b:32:3d:80:ca:b0:2f:aa:a5:35:d9:f6:8f:70: fd:ea:dc:78:11:79:54:60:b4:24:71:74:f1:3c:ef:38:2a:01: 9d:3b:6a:dd:9a:74:86:c2:b5:9e:13:0a:9f:a5:20:ed:d6:ee: 9c:16:f1:28:3f:9f:c4:a9:e9:37:63:14:5b:7b:08:97:52:66: 38:63:e9:9d:30:da:33:99:3a:e7:88:e7:31:77:a7:de:b0:63: f1:04:bc:fa:2b:6e:5e:56:fc:7d:60:11:93:83:6d:82:21:87: 4e:1c:1a:26:62:14:5d:94:85:eb:38:07:84:c6:4d:23:78:96: d8:81:0a:46:35:81:0a:9a:55:aa:69:09:02:f5:11:21:35:cf: b3:db:8b:cd:9e:99:89:f1:db:30:0b:21:55:9a:56:38:50:2e: b8:ee:53:b8:dd:95:ae:84:6d:01:22:ed:92:b5:e2:ed:da:47: ca:4c:14:bc:cc:2a:67:0b:11:56:e3:a3:86:1b:79:fa:31:ad: 4e:be:99:f2:0b:13:82:c3:2a:52:15:a2:7f:8e:62:c7:f6:47: c6:2d:9d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rBOQFbya/kX/iONBQBL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWJlYjAxOTJkMGQzNDZhNWU2ODU4YWE3NDRiMDQzNGZl ZDMxODkwHhcNMjYwMTI1MTUwMDUzWhcNMjYwMTI2MTUwMDUzWjAzMTEwLwYDVQQD Eyg1MmNlMWYwNWUyNmE5NTc4MjM3MjgwZGM4MWRiNjA4Nzg0Yjc4ZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oEgiOekRDG+L7VngHRtozxWHHlL kJbsDmduNankhmCys7o4wUFf8lllLO3L5zSR+1RuLHcH9pK6/A49j5WAtFz1F45s OymbZxNOUTREf2wviM+YIdCwQ6SDZMLsmA/yMJ67Wd3A7j0mWvCh4D9jGFt0Ja3Z AgGPZlPKctyskjulmn9O4YjL9tco0JIJXLJu5pd9bKKnFB6Znqi1ZbeErc9xZVty NrjvU4g8kDfxYrQO3UnMLXZyBcs5yOEuFh5kVfKO5f+GPez6pTp+JeI9/RGtnZTD x4Nl5x/hQUtVcB+OubF5hHxmM66FwFuGDGjNqiBC1h6gBRn0dNig9ourcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLOHwXiapV4I3KA3IHbYIeEt42pMB8GA1UdIwQY MBaAFPyb6wGS0NNGpeaFiqdEsENP7TGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTIt NmI3MDE2OWNkYTFiLzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTItNmI3MDE2OWNkYTFi LzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwGWn4tU 5PKL/PHTsP9mgajDUqI1KksyqvPwtrVlTUGMaJrJCD5pcpsyPYDKsC+qpTXZ9o9w /erceBF5VGC0JHF08TzvOCoBnTtq3Zp0hsK1nhMKn6Ug7dbunBbxKD+fxKnpN2MU W3sIl1JmOGPpnTDaM5k654jnMXen3rBj8QS8+ituXlb8fWARk4NtgiGHThwaJmIU XZSF6zgHhMZNI3iW2IEKRjWBCppVqmkJAvURITXPs9uLzZ6ZifHbMAshVZpWOFAu uO5TuN2VroRtASLtkrXi7dpHykwUvMwqZwsRVuOjhht5+jGtTr6Z8gsTgsMqUhWi f45ix/ZHxi2d1A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:12 2026 by rpki-client