This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json) Hash identifier: uIVkP87DMRYvM+ai0FP1FYYG/FuY9xPpdE69gf4z/g0= Subject key identifier: D3:3E:DC:95:06:C5:05:73:FF:BC:16:23:DE:F0:04:2C:DA:A1:40:9F Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Certificate serial: 019BF8088A8A0320A9376553096C57DFFBB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft Manifest number: 0E91 Signing time: Mon 26 Jan 2026 02:01:07 +0000 Manifest this update: Mon 26 Jan 2026 02:01:07 +0000 Manifest next update: Tue 27 Jan 2026 02:01:07 +0000 Files and hashes: 1: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (hash: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y=) 2: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: FRg0oxywqyAF6KQ65O02JsYECrqM1wbts2oNz6ZSBdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:8a:8a:03:20:a9:37:65:53:09:6c:57:df:fb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Validity Not Before: Jan 26 02:01:07 2026 GMT Not After : Jan 27 02:01:07 2026 GMT Subject: CN=d33edc9506c50573ffbc1623def0042cdaa1409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:9a:5a:d0:c6:48:dd:58:73:1e:75:cc:b3: 3c:eb:cc:fa:f8:71:34:c1:84:82:40:f8:7b:53:d6: 84:02:c7:8e:e6:1d:64:cb:e4:1e:09:ef:18:64:67: 19:8b:50:59:3a:54:15:77:6b:b1:a8:6c:a9:c8:e0: e6:f9:4b:db:26:82:63:d6:03:a4:6f:ae:30:6a:7d: dc:c1:50:30:40:e1:0c:89:ae:78:75:27:d3:07:e0: 9f:bc:e4:3f:60:7a:fb:74:9a:7d:bf:c5:f6:11:a4: 97:8a:c4:13:72:c7:6b:0f:98:34:d5:04:2e:a2:d6: 5e:6b:ed:d5:3e:17:2a:d0:79:32:ac:c9:46:b9:3b: aa:1e:fd:ff:b1:53:bc:f1:31:b0:a2:6e:69:7f:4a: 05:bd:9e:b3:7e:c0:7c:9b:09:a7:59:15:0c:31:07: b6:04:82:60:82:0d:8d:45:54:b0:50:ed:e4:4f:19: a5:08:b8:48:2f:07:b0:56:44:ca:dc:0e:6d:b9:df: 67:17:2a:03:89:2d:84:1c:62:18:98:ae:33:9f:ab: 1a:42:c5:a2:23:ca:38:58:cf:f7:e2:56:3d:47:91: 5a:c0:6b:92:2b:d8:98:25:2a:c5:f8:ad:cc:7d:ee: 7d:1b:09:a7:a9:0e:a1:2d:25:b1:08:3e:95:d9:60: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3E:DC:95:06:C5:05:73:FF:BC:16:23:DE:F0:04:2C:DA:A1:40:9F X509v3 Authority Key Identifier: keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:3b:ce:93:76:cd:a5:7b:7a:96:85:0a:2c:b8:08:27:96:f8: 75:90:a6:a4:e6:14:69:e5:06:c4:be:d7:49:96:69:9d:1e:c0: 37:f4:09:73:29:1b:c0:76:48:a4:a3:5c:e7:05:d2:69:4c:f0: a4:d5:2b:8f:5b:77:0c:69:0a:7b:6c:cf:21:43:ee:3d:b9:43: d7:38:98:b6:87:6d:8f:e4:2b:7e:65:9c:99:ae:2b:d0:5a:34: 36:6e:42:44:4f:90:85:4e:2b:1f:ea:40:05:0d:50:bf:73:0b: 21:92:67:10:51:ba:ee:b4:b2:f5:e2:f3:1c:97:cc:97:93:d6: b1:1e:87:2e:94:e3:76:97:81:df:a4:6e:3e:ab:28:de:55:71: 16:36:d8:36:c9:46:ca:cf:aa:17:27:16:6d:52:56:5b:60:cb: fa:3f:2f:64:45:73:31:fd:01:c8:fe:f8:44:01:43:2d:3c:43: cb:1f:de:ed:50:ea:2a:5a:aa:9f:ab:07:11:f8:c4:82:8a:04: 52:a6:1a:b8:b3:fe:3d:2f:ec:38:6e:15:c4:ae:9f:86:d2:0c: 4d:32:75:86:74:35:5f:15:0c:07:ca:33:91:28:37:d9:49:23: 73:ec:ad:a0:7c:fe:87:aa:54:51:45:58:3e:07:8f:f3:72:fd: 51:bb:46:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CIqKAyCpN2VTCWxX3/u0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy NzFmMjQwHhcNMjYwMTI2MDIwMTA3WhcNMjYwMTI3MDIwMTA3WjAzMTEwLwYDVQQD EyhkMzNlZGM5NTA2YzUwNTczZmZiYzE2MjNkZWYwMDQyY2RhYTE0MDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe2aWtDGSN1Ycx51zLM868z6+HE0 wYSCQPh7U9aEAseO5h1ky+QeCe8YZGcZi1BZOlQVd2uxqGypyODm+UvbJoJj1gOk b64wan3cwVAwQOEMia54dSfTB+CfvOQ/YHr7dJp9v8X2EaSXisQTcsdrD5g01QQu otZea+3VPhcq0HkyrMlGuTuqHv3/sVO88TGwom5pf0oFvZ6zfsB8mwmnWRUMMQe2 BIJggg2NRVSwUO3kTxmlCLhILwewVkTK3A5tud9nFyoDiS2EHGIYmK4zn6saQsWi I8o4WM/34lY9R5FawGuSK9iYJSrF+K3Mfe59GwmnqQ6hLSWxCD6V2WC4PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM+3JUGxQVz/7wWI97wBCzaoUCfMB8GA1UdIwQY MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2 LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzvOk3bN pXt6loUKLLgIJ5b4dZCmpOYUaeUGxL7XSZZpnR7AN/QJcykbwHZIpKNc5wXSaUzw pNUrj1t3DGkKe2zPIUPuPblD1ziYtodtj+QrfmWcma4r0Fo0Nm5CRE+QhU4rH+pA BQ1Qv3MLIZJnEFG67rSy9eLzHJfMl5PWsR6HLpTjdpeB36RuPqso3lVxFjbYNslG ys+qFycWbVJWW2DL+j8vZEVzMf0ByP74RAFDLTxDyx/e7VDqKlqqn6sHEfjEgooE UqYauLP+PS/sOG4VxK6fhtIMTTJ1hnQ1XxUMB8ozkSg32Ukjc+ytoHz+h6pUUUVY PgeP83L9UbtGMA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:23 2026 by rpki-client