This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json) Hash identifier: HHxCw6Ecf/kxAkX8iuEhu7Nu6TBbvt67nl+SsYQkTj8= Subject key identifier: 42:11:EC:6A:8B:B0:6B:C9:85:E8:43:05:83:E4:A8:25:1D:32:9E:90 Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9 Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9 Certificate serial: 019BF8E43630E9CB4E57934A9181C7B993F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 06:01:04 +0000 Manifest this update: Mon 26 Jan 2026 06:01:04 +0000 Manifest next update: Tue 27 Jan 2026 06:01:04 +0000 Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=) 2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: zXy5C6R8DtBT4gKwKIzN/oSbp9m3+cHS2ONEN+J3GZE=) 3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:36:30:e9:cb:4e:57:93:4a:91:81:c7:b9:93:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9 Validity Not Before: Jan 26 06:01:04 2026 GMT Not After : Jan 27 06:01:04 2026 GMT Subject: CN=4211ec6a8bb06bc985e8430583e4a8251d329e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:6e:cf:45:00:b4:35:8c:07:38:3d:3e:48: 3d:cb:09:d1:0f:ed:db:92:30:3c:8f:94:b4:11:ae: cb:a3:0e:da:1a:22:85:55:38:14:d8:79:54:9f:db: 3d:2a:33:9a:74:4b:9d:35:f2:db:2a:8c:ba:e8:ac: 73:9c:2a:a1:be:f1:1c:50:91:40:4c:a5:dc:d4:00: 43:1d:41:c9:f0:1c:62:ba:9c:d1:97:bd:f6:9b:c2: 59:f5:63:3c:d6:14:b7:54:7d:33:49:2b:1f:69:e3: 7d:53:7f:3f:50:a3:e8:aa:32:90:15:0f:2a:f4:5b: eb:79:6d:c2:3a:d9:cf:27:00:c9:59:2e:63:cd:31: 0e:7a:ce:e9:e9:5a:f2:e9:1d:26:74:ff:b9:8a:ee: 14:42:88:f5:45:46:00:13:94:c6:22:2c:84:6a:fd: e8:11:36:42:ee:a6:d4:be:67:35:8a:97:52:74:9e: e2:ef:a0:22:1f:c9:af:27:2d:e6:26:54:99:f1:b6: a6:ae:35:f7:03:6b:ef:ac:8b:97:37:01:a6:f5:dd: cd:1e:6c:c0:f8:bc:d9:eb:e8:2c:95:db:e6:1d:e5: e2:fc:9e:39:d2:98:c5:4b:a8:fb:91:06:9a:a1:0b: 96:41:b3:aa:8c:e3:41:07:09:3d:b6:9d:78:ba:6a: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:11:EC:6A:8B:B0:6B:C9:85:E8:43:05:83:E4:A8:25:1D:32:9E:90 X509v3 Authority Key Identifier: keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d7:ea:b3:7b:ed:2b:45:9e:ad:6e:12:fe:e0:f9:23:6d:ec: f8:57:35:74:38:3e:44:29:f5:91:c1:5f:e8:9c:15:e8:6f:17: 67:d5:0b:3a:39:36:43:b3:fe:a9:17:01:fc:28:07:be:d3:a4: 18:58:83:3d:de:bb:28:06:68:2e:ec:46:ef:43:70:d4:8a:df: f7:40:35:63:2f:2e:7c:97:30:8f:30:c6:e9:8a:b7:a9:04:46: e7:81:43:da:63:6f:b7:d7:87:fa:53:de:d3:05:73:a1:bc:bf: 92:2c:80:1a:3c:34:1e:68:48:80:f2:c9:27:4e:62:c9:66:3a: 37:ef:62:bd:f7:77:2d:9c:2d:75:0f:0a:5f:35:90:e9:f6:b1: 2f:89:30:07:dd:50:47:97:36:03:a5:19:28:8b:f0:05:88:6b: 06:df:60:ca:75:1b:cb:60:42:c2:aa:6e:5d:ac:e5:1f:25:43: d0:58:38:4c:59:10:95:22:8c:9f:df:4d:ea:ba:4a:b0:06:e6: 7c:0e:ce:e0:09:5a:5d:91:af:d2:80:c6:5c:fa:16:1c:d7:25: 86:ae:8e:58:80:b8:73:ab:46:37:68:4c:62:62:11:4d:81:60: bf:d8:e3:0d:3c:bd:6b:96:1e:fc:fb:e1:be:53:fd:d5:ef:bd: 2e:50:48:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45DYw6ctOV5NKkYHHuZP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDlhMTZjMmZhN2Q0YzM3MGI1MzI1MjE0YmU0NDIwYjYx MWYxZjkwHhcNMjYwMTI2MDYwMTA0WhcNMjYwMTI3MDYwMTA0WjAzMTEwLwYDVQQD Eyg0MjExZWM2YThiYjA2YmM5ODVlODQzMDU4M2U0YTgyNTFkMzI5ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY9uz0UAtDWMBzg9Pkg9ywnRD+3b kjA8j5S0Ea7Low7aGiKFVTgU2HlUn9s9KjOadEudNfLbKoy66KxznCqhvvEcUJFA TKXc1ABDHUHJ8BxiupzRl732m8JZ9WM81hS3VH0zSSsfaeN9U38/UKPoqjKQFQ8q 9FvreW3COtnPJwDJWS5jzTEOes7p6Vry6R0mdP+5iu4UQoj1RUYAE5TGIiyEav3o ETZC7qbUvmc1ipdSdJ7i76AiH8mvJy3mJlSZ8bamrjX3A2vvrIuXNwGm9d3NHmzA +LzZ6+gsldvmHeXi/J450pjFS6j7kQaaoQuWQbOqjONBBwk9tp14umouQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIR7GqLsGvJhehDBYPkqCUdMp6QMB8GA1UdIwQY MBaAFCbZoWwvp9TDcLUyUhS+RCC2EfH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEt NDQwMjNjM2I3ODRlLzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEtNDQwMjNjM2I3ODRl LzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNfqs3vt K0WerW4S/uD5I23s+Fc1dDg+RCn1kcFf6JwV6G8XZ9ULOjk2Q7P+qRcB/CgHvtOk GFiDPd67KAZoLuxG70Nw1Irf90A1Yy8ufJcwjzDG6Yq3qQRG54FD2mNvt9eH+lPe 0wVzoby/kiyAGjw0HmhIgPLJJ05iyWY6N+9ivfd3LZwtdQ8KXzWQ6faxL4kwB91Q R5c2A6UZKIvwBYhrBt9gynUby2BCwqpuXazlHyVD0Fg4TFkQlSKMn99N6rpKsAbm fA7O4AlaXZGv0oDGXPoWHNclhq6OWIC4c6tGN2hMYmIRTYFgv9jjDTy9a5Ye/Pvh vlP91e+9LlBIMw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:35 2026 by rpki-client