This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json) Hash identifier: kwCXia7Ba37gnhr5f4crf0jOYNXKvuJeO8aMuWtNl38= Subject key identifier: 2A:FF:2B:8D:18:19:9A:D6:0B:5F:56:05:74:EA:B2:57:64:75:6C:20 Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Certificate serial: 019BF988FB7479EF4EFA6414A365D6985452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft Manifest number: 0ACA Signing time: Mon 26 Jan 2026 09:01:02 +0000 Manifest this update: Mon 26 Jan 2026 09:01:02 +0000 Manifest next update: Tue 27 Jan 2026 09:01:02 +0000 Files and hashes: 1: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (hash: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps=) 2: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: qWYv4EJegW4RtUQvs96jPt41x1gb3Z+627eLXuZLV0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:fb:74:79:ef:4e:fa:64:14:a3:65:d6:98:54:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Validity Not Before: Jan 26 09:01:02 2026 GMT Not After : Jan 27 09:01:02 2026 GMT Subject: CN=2aff2b8d18199ad60b5f560574eab25764756c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:3c:a7:ee:2f:b7:67:83:ba:75:e0:66:e9: 4f:3f:72:7c:25:93:27:f8:7b:ee:2c:1a:6f:64:4b: fa:cf:eb:a6:52:3b:4f:c9:92:c7:e9:40:04:dd:ad: 06:f6:4e:dc:6a:f9:a8:22:88:5c:3d:1e:34:fd:01: 02:90:46:63:e9:e4:fe:1b:44:ae:71:cc:db:34:0c: eb:8d:da:9f:ca:0f:d9:81:a3:05:1a:7a:f5:83:c8: ca:45:3f:88:ee:2f:b1:36:0d:50:53:b0:4f:bc:c0: 17:aa:13:fe:3c:a2:f6:2d:e7:9b:13:b3:c3:01:be: 55:88:6a:96:27:55:32:33:15:68:e9:93:de:2d:88: f6:12:de:ab:cc:e8:45:20:ee:38:c1:8e:07:56:7b: fc:98:74:24:8a:c5:1d:43:05:28:3d:71:3c:03:47: c2:5a:c2:72:d1:e4:c5:6f:40:e9:99:e5:88:d8:c5: ca:6d:d9:0c:15:60:77:2d:43:aa:e9:36:0f:a6:d4: 94:f2:5b:62:63:c4:05:b7:13:e0:a9:fa:db:ed:09: 47:25:54:43:2b:ea:0a:02:07:10:62:96:04:ab:c9: 23:48:d0:f0:75:a4:5f:c3:5d:c2:0b:39:b8:ea:96: 3e:1a:44:ea:c9:f5:31:64:0a:2e:88:56:49:d2:74: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FF:2B:8D:18:19:9A:D6:0B:5F:56:05:74:EA:B2:57:64:75:6C:20 X509v3 Authority Key Identifier: keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b8:28:7d:61:5a:af:a1:cd:fa:f7:e2:94:ed:c1:4d:68:0b: 87:af:ba:79:ab:b5:8f:c5:f3:7f:81:7a:cf:a9:ce:a0:0a:ee: 07:cd:8f:f5:92:9f:7c:c8:78:5a:81:cd:89:dd:79:6c:36:14: 40:d5:1c:a5:6c:9b:a2:1b:24:f2:59:d5:a6:18:e4:65:5b:66: 9a:cf:89:6e:f7:b8:69:1f:1d:f7:63:33:5d:83:cf:f4:58:2d: be:d3:8a:5a:8b:00:22:c6:41:a6:bf:77:56:6a:06:40:53:24: ea:0c:f5:e0:4a:6d:fd:3d:eb:8d:76:5f:71:1a:04:3a:18:a1: 7f:a9:d0:05:87:e7:da:39:29:eb:77:f1:71:16:f0:e7:11:c8: 34:6b:cf:ec:22:95:4c:00:88:63:da:4a:35:c7:cd:41:3e:38: 8c:bb:6b:59:b7:88:71:e9:f1:23:cc:66:12:be:ec:04:43:b5: b2:12:5f:d1:45:b7:9c:76:2f:00:fd:d9:99:24:49:24:48:ba: 1e:c9:66:c3:38:1a:b2:d4:82:50:58:cf:f0:88:57:b9:07:c6: 68:37:03:c3:e8:dd:92:a6:09:3e:61:74:54:77:a8:fd:6c:8a: fc:c5:bb:0e:0f:ca:d5:5c:75:a0:ab:de:3d:7c:21:38:c0:8c: 6b:a1:f0:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iPt0ee9O+mQUo2XWmFRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1 ZjU2ZTQwHhcNMjYwMTI2MDkwMTAyWhcNMjYwMTI3MDkwMTAyWjAzMTEwLwYDVQQD EygyYWZmMmI4ZDE4MTk5YWQ2MGI1ZjU2MDU3NGVhYjI1NzY0NzU2YzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ww8p+4vt2eDunXgZulPP3J8JZMn +HvuLBpvZEv6z+umUjtPyZLH6UAE3a0G9k7cavmoIohcPR40/QECkEZj6eT+G0Su cczbNAzrjdqfyg/ZgaMFGnr1g8jKRT+I7i+xNg1QU7BPvMAXqhP+PKL2LeebE7PD Ab5ViGqWJ1UyMxVo6ZPeLYj2Et6rzOhFIO44wY4HVnv8mHQkisUdQwUoPXE8A0fC WsJy0eTFb0DpmeWI2MXKbdkMFWB3LUOq6TYPptSU8ltiY8QFtxPgqfrb7QlHJVRD K+oKAgcQYpYEq8kjSNDwdaRfw13CCzm46pY+GkTqyfUxZAouiFZJ0nTQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr/K40YGZrWC19WBXTqsldkdWwgMB8GA1UdIwQY MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLgofWFa r6HN+vfilO3BTWgLh6+6eau1j8Xzf4F6z6nOoAruB82P9ZKffMh4WoHNid15bDYU QNUcpWybohsk8lnVphjkZVtmms+Jbve4aR8d92MzXYPP9FgtvtOKWosAIsZBpr93 VmoGQFMk6gz14Ept/T3rjXZfcRoEOhihf6nQBYfn2jkp63fxcRbw5xHINGvP7CKV TACIY9pKNcfNQT44jLtrWbeIcenxI8xmEr7sBEO1shJf0UW3nHYvAP3ZmSRJJEi6 HslmwzgastSCUFjP8IhXuQfGaDcDw+jdkqYJPmF0VHeo/WyK/MW7Dg/K1Vx1oKve PXwhOMCMa6Hw8w== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:19 2026 by rpki-client