This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json) Hash identifier: xfUpWNxtJ29v4gscJXBkeui8RyKGW5YKbFoQw963O8E= Subject key identifier: 59:89:22:2F:0F:13:FF:B2:47:F0:61:85:C3:AD:18:9F:8E:86:3F:9C Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338 Certificate serial: 019BFAD25EEF2E5F78814A0505DD7DF33519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 15:00:49 +0000 Manifest this update: Mon 26 Jan 2026 15:00:49 +0000 Manifest next update: Tue 27 Jan 2026 15:00:49 +0000 Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=) 2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: iNiB+pckNterXxEyEQwwMD7Cu6lm1kWJ9Yo9FSby3+s=) 3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:5e:ef:2e:5f:78:81:4a:05:05:dd:7d:f3:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338 Validity Not Before: Jan 26 15:00:49 2026 GMT Not After : Jan 27 15:00:49 2026 GMT Subject: CN=5989222f0f13ffb247f06185c3ad189f8e863f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:b4:d6:85:fe:5e:ee:09:4c:6d:ad:e5:5d: be:0c:f3:77:a8:47:37:97:37:cf:b3:aa:11:2a:a4: 2b:39:19:07:26:95:c9:15:d9:f6:06:b5:34:0c:41: b7:d8:36:56:cc:eb:35:71:21:b0:03:89:23:d4:2e: 58:60:13:66:e8:0b:6d:11:ac:5d:d3:15:f8:df:5b: c0:d0:08:72:bb:18:2d:b6:24:f0:46:d8:e6:43:a6: f8:77:80:fd:4c:c5:e1:23:4b:7f:94:5d:09:04:ba: c5:61:09:0e:07:4b:8c:3a:fc:43:f3:63:65:00:c0: f3:a7:88:e7:dc:87:79:ef:db:ab:4a:07:d6:dc:a5: 64:15:b8:56:38:7f:31:6d:60:96:28:e1:f1:5e:e1: 58:2e:dc:ef:b4:e0:36:32:fb:14:ab:03:7d:1b:04: 59:a6:27:56:26:60:ea:20:45:6c:69:17:ff:a1:ce: 8b:58:97:5c:ef:17:c8:6b:9a:ba:ed:6c:11:3b:cd: 51:dd:18:f2:9e:e3:14:b6:4f:37:72:b8:83:93:0f: 2f:6a:a3:eb:c5:57:21:ac:92:cd:d8:41:71:a8:18: dc:3d:24:b1:b2:7e:95:76:34:37:0a:68:7a:5f:ba: e3:35:03:6a:0e:c3:e9:c1:01:ec:e6:e3:20:de:6c: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:22:2F:0F:13:FF:B2:47:F0:61:85:C3:AD:18:9F:8E:86:3F:9C X509v3 Authority Key Identifier: keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:dd:3a:52:ee:59:ed:60:6f:6b:ac:5b:69:93:2a:c8:1b:59: ee:a0:b6:89:2b:75:b8:43:57:42:18:7a:0d:49:a8:4d:eb:25: 03:54:16:73:65:73:86:68:b5:36:a4:22:b9:18:db:6a:f1:11: bf:37:5d:6d:4d:c4:41:37:97:f0:23:39:4f:4f:e5:81:14:c6: 21:9c:6d:ab:46:78:6c:ba:b5:1f:a9:67:4a:1d:39:fd:22:46: de:3d:92:50:f0:79:92:ca:ee:ca:c9:0a:d3:31:ff:4c:a6:7a: 21:3e:ee:88:0d:fe:9a:7a:c0:92:3d:d7:8e:57:a8:43:5f:81: 96:12:2c:05:cd:1f:44:14:1a:1b:cb:34:fe:a2:2b:57:63:79: 88:e4:11:b3:d3:8b:73:80:a7:02:5a:16:06:08:62:c5:22:e7: 6b:46:07:61:1c:45:ad:15:91:2a:bf:bd:ab:53:a0:90:9c:75: 23:df:bd:b9:77:69:dd:0e:d9:40:02:79:2f:44:3a:f4:46:7a: fd:21:9c:9f:cd:8c:d8:60:53:33:60:20:40:ca:6a:d8:b8:8b: 1b:68:f2:d8:89:ae:83:64:87:a9:f1:82:a7:3c:2b:e0:97:8d: e8:6a:ef:d2:10:a8:b9:de:1c:02:82:f6:f1:44:5e:d8:cb:33: 4c:6f:ae:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60l7vLl94gUoFBd198zUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4 NzEzMzgwHhcNMjYwMTI2MTUwMDQ5WhcNMjYwMTI3MTUwMDQ5WjAzMTEwLwYDVQQD Eyg1OTg5MjIyZjBmMTNmZmIyNDdmMDYxODVjM2FkMTg5ZjhlODYzZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoe01oX+Xu4JTG2t5V2+DPN3qEc3 lzfPs6oRKqQrORkHJpXJFdn2BrU0DEG32DZWzOs1cSGwA4kj1C5YYBNm6AttEaxd 0xX431vA0AhyuxgttiTwRtjmQ6b4d4D9TMXhI0t/lF0JBLrFYQkOB0uMOvxD82Nl AMDzp4jn3Id579urSgfW3KVkFbhWOH8xbWCWKOHxXuFYLtzvtOA2MvsUqwN9GwRZ pidWJmDqIEVsaRf/oc6LWJdc7xfIa5q67WwRO81R3RjynuMUtk83criDkw8vaqPr xVchrJLN2EFxqBjcPSSxsn6VdjQ3Cmh6X7rjNQNqDsPpwQHs5uMg3myM7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmJIi8PE/+yR/BhhcOtGJ+Ohj+cMB8GA1UdIwQY MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt06Uu5Z 7WBva6xbaZMqyBtZ7qC2iSt1uENXQhh6DUmoTeslA1QWc2Vzhmi1NqQiuRjbavER vzddbU3EQTeX8CM5T0/lgRTGIZxtq0Z4bLq1H6lnSh05/SJG3j2SUPB5ksruyskK 0zH/TKZ6IT7uiA3+mnrAkj3XjleoQ1+BlhIsBc0fRBQaG8s0/qIrV2N5iOQRs9OL c4CnAloWBghixSLna0YHYRxFrRWRKr+9q1OgkJx1I9+9uXdp3Q7ZQAJ5L0Q69EZ6 /SGcn82M2GBTM2AgQMpq2LiLG2jy2Imug2SHqfGCpzwr4JeN6Grv0hCoud4cAoL2 8URe2MszTG+uCg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:44 2026 by rpki-client