This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json) Hash identifier: ZRKRlUPvd3ZDNsq5tGXLi9SnFZoYM8JoXTBOCHluP8U= Subject key identifier: 06:2A:8B:C1:6B:3C:6F:BD:87:7A:49:5F:4A:79:AF:F5:8C:52:EF:44 Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab Certificate serial: 019BF6F5E9FBA99E38877BEB344CE7B3ADDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft Manifest number: 14C0 Signing time: Sun 25 Jan 2026 21:01:09 +0000 Manifest this update: Sun 25 Jan 2026 21:01:09 +0000 Manifest next update: Mon 26 Jan 2026 21:01:09 +0000 Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: J5D93sO2/bLpsPER5s133bbt2eA/MY1QA9mlT0228Zg=) 2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:e9:fb:a9:9e:38:87:7b:eb:34:4c:e7:b3:ad:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab Validity Not Before: Jan 25 21:01:09 2026 GMT Not After : Jan 26 21:01:09 2026 GMT Subject: CN=062a8bc16b3c6fbd877a495f4a79aff58c52ef44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:9e:27:d3:98:f2:72:87:83:da:10:9b:8e: c2:6c:8a:fe:c2:c3:6f:ec:1f:51:61:3f:4d:1e:d6: 97:24:c1:61:66:09:95:d5:0a:c0:54:54:b6:2a:15: 83:bd:09:4c:52:6d:47:b7:3c:c4:1b:60:c5:a0:6e: 56:55:a6:f7:d0:4a:bc:16:70:37:6a:60:6d:0a:c1: 5b:0b:2a:79:00:f2:3d:1a:d2:2a:a1:3b:6d:d1:4b: ff:14:31:da:3d:74:21:42:4f:11:37:2c:f8:88:e0: b7:22:6d:b2:3a:07:8f:10:58:88:e0:42:b2:df:eb: cc:d8:5e:fa:12:a8:2e:d1:72:cb:a8:df:0b:a7:f9: b7:67:fe:a2:a0:88:9c:41:81:c0:ed:7f:2d:90:72: f8:fd:62:0f:e2:14:fd:e4:62:a8:69:ea:79:ea:d2: 90:e7:92:e7:e7:e6:63:c9:cf:90:e5:c0:75:31:79: 2b:d2:66:94:ec:a2:5c:82:8d:c7:1d:ba:36:31:5b: 5e:30:f5:5c:99:4e:f5:b2:bd:f5:ca:2e:5d:d0:d4: f4:e1:9e:91:2a:c9:b0:ef:3e:4d:4c:50:02:bd:e8: 30:9b:f3:46:00:ce:8b:05:55:da:35:be:43:09:3f: 91:3a:27:c8:a7:f6:49:e0:af:9d:31:3c:98:e5:76: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2A:8B:C1:6B:3C:6F:BD:87:7A:49:5F:4A:79:AF:F5:8C:52:EF:44 X509v3 Authority Key Identifier: keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1a:18:5f:a5:e8:fa:5a:3a:6e:40:06:6b:77:5f:27:e9:78: 28:2b:6a:e4:98:2a:6a:67:ff:09:6b:ad:ff:47:87:18:87:37: b5:66:63:db:32:f5:bb:1c:c1:ff:16:bc:a8:a8:3a:2c:74:0f: a4:02:d5:1a:62:05:e1:15:26:7f:51:a4:31:ed:44:78:87:c0: f5:e8:22:d9:61:8c:96:82:bd:7b:48:d4:53:04:d1:48:3f:df: 6c:f9:0a:92:7a:29:af:1e:c6:e0:b4:65:88:f1:3c:b3:c9:63: 5e:1c:4c:52:15:6f:2b:1a:f4:f6:9c:0f:26:50:79:e1:92:c5: af:97:96:07:bc:47:37:d7:6f:42:c0:2f:23:c6:d2:c6:7a:d7: 40:6a:79:f5:47:db:5e:60:0a:fa:cb:a9:06:92:e7:cf:ec:d2: ab:86:15:c5:cf:81:1e:60:cc:8d:6f:af:f1:4a:a5:08:24:ab: 50:26:34:ed:28:75:15:6b:90:5e:58:d1:62:f4:5c:ec:e9:c1: f8:fe:9c:a5:76:fb:fa:12:2b:1c:22:df:fe:7d:aa:29:cb:67: e4:a7:f8:cb:3d:3d:cf:9b:83:b1:96:ed:91:ce:8c:0d:18:7b: 35:9e:b2:9f:0a:ab:c3:e4:96:b2:76:33:a5:d1:92:71:9e:15: dd:66:3d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29en7qZ44h3vrNEzns63fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll OTVhYWIwHhcNMjYwMTI1MjEwMTA5WhcNMjYwMTI2MjEwMTA5WjAzMTEwLwYDVQQD EygwNjJhOGJjMTZiM2M2ZmJkODc3YTQ5NWY0YTc5YWZmNThjNTJlZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtSeJ9OY8nKHg9oQm47CbIr+wsNv 7B9RYT9NHtaXJMFhZgmV1QrAVFS2KhWDvQlMUm1HtzzEG2DFoG5WVab30Eq8FnA3 amBtCsFbCyp5API9GtIqoTtt0Uv/FDHaPXQhQk8RNyz4iOC3Im2yOgePEFiI4EKy 3+vM2F76Eqgu0XLLqN8Lp/m3Z/6ioIicQYHA7X8tkHL4/WIP4hT95GKoaep56tKQ 55Ln5+Zjyc+Q5cB1MXkr0maU7KJcgo3HHbo2MVteMPVcmU71sr31yi5d0NT04Z6R Ksmw7z5NTFACvegwm/NGAM6LBVXaNb5DCT+ROifIp/ZJ4K+dMTyY5XY10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYqi8FrPG+9h3pJX0p5r/WMUu9EMB8GA1UdIwQY MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhoYX6Xo +lo6bkAGa3dfJ+l4KCtq5Jgqamf/CWut/0eHGIc3tWZj2zL1uxzB/xa8qKg6LHQP pALVGmIF4RUmf1GkMe1EeIfA9egi2WGMloK9e0jUUwTRSD/fbPkKknoprx7G4LRl iPE8s8ljXhxMUhVvKxr09pwPJlB54ZLFr5eWB7xHN9dvQsAvI8bSxnrXQGp59Ufb XmAK+supBpLnz+zSq4YVxc+BHmDMjW+v8UqlCCSrUCY07Sh1FWuQXljRYvRc7OnB +P6cpXb7+hIrHCLf/n2qKctn5Kf4yz09z5uDsZbtkc6MDRh7NZ6ynwqrw+SWsnYz pdGScZ4V3WY9nw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:50 2026 by rpki-client