This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json) Hash identifier: 2cH6ieTuaIl8j0g1H8B0OZxvNvgfW/NZDBpJwUvAbfs= Subject key identifier: B3:9E:68:CC:36:F9:9C:D2:FF:90:A2:4C:A0:9B:F4:E6:25:72:7E:84 Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876 Certificate serial: 019BF53EA65673EF51466DD33FFE4736C500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft Manifest number: 0B03 Signing time: Sun 25 Jan 2026 13:01:22 +0000 Manifest this update: Sun 25 Jan 2026 13:01:22 +0000 Manifest next update: Mon 26 Jan 2026 13:01:22 +0000 Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: bKFAX3HzS8pjb+s9pIkuDk/As5iVHVlCnzml/vHo0KY=) 2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=) 3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a6:56:73:ef:51:46:6d:d3:3f:fe:47:36:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457027e3a087b65f968b535e415f67432695876 Validity Not Before: Jan 25 13:01:22 2026 GMT Not After : Jan 26 13:01:22 2026 GMT Subject: CN=b39e68cc36f99cd2ff90a24ca09bf4e625727e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:9b:95:fb:1a:af:60:39:91:93:45:f5:3a: 3f:63:37:7b:b7:7f:b1:b4:c7:48:dc:1a:e6:ac:9a: 6e:92:29:34:00:2e:b4:17:43:f7:a3:2c:77:52:16: b2:9f:db:eb:71:a5:44:c0:1d:ef:7b:0e:14:b0:21: 96:30:1a:ba:ed:5a:3f:02:8e:9c:35:ab:62:96:5f: 3d:1f:2e:b9:42:f8:98:cc:c2:92:b8:87:20:75:19: ef:31:01:34:71:e7:e0:84:b9:23:9d:27:fa:70:60: c7:d2:ad:1f:e7:a3:4e:a0:0c:ec:4f:f4:c1:e3:a5: 20:27:f5:56:65:42:8c:0f:63:0d:cf:fc:63:6b:cf: 57:6f:46:f3:84:08:f0:2d:f9:11:ce:9f:a1:c9:af: 08:29:8b:7f:0e:33:00:67:60:0d:56:e6:24:86:c2: b7:22:fd:0c:99:8a:45:c1:5d:dc:4a:81:6e:df:81: 5c:ec:52:ae:e9:31:0e:7f:09:e1:29:57:90:dc:93: 67:71:1d:54:d8:3d:35:3e:ee:a4:b2:34:b1:1e:69: 4b:4d:90:89:25:a8:75:3c:fc:64:8f:0c:08:a0:9f: c8:33:9e:ad:53:6b:13:52:7d:c5:13:c8:a1:8c:56: b0:69:fa:27:54:c8:9f:2c:22:48:0e:54:ad:34:d8: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9E:68:CC:36:F9:9C:D2:FF:90:A2:4C:A0:9B:F4:E6:25:72:7E:84 X509v3 Authority Key Identifier: keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:22:ba:34:11:91:0d:06:63:fd:4a:c6:8d:cc:11:7a:b0: 6b:f4:26:a5:b8:08:17:e1:61:f4:97:00:89:e7:2e:f9:4f:06: 64:0e:4e:fc:e6:3e:fb:c6:4a:9b:a5:25:82:ce:96:82:38:f0: 39:e7:fc:e8:f7:cf:48:f9:ab:5b:83:cf:ce:1b:d3:56:5e:88: a9:3e:a3:fd:87:fb:90:97:00:82:b2:a9:14:e6:99:2c:40:a3: 42:4b:54:51:1e:03:61:66:5f:17:8e:a3:87:76:c1:c2:05:63: 27:d6:9b:e7:2c:21:2f:6e:d1:02:1b:0e:6e:2a:48:d7:9e:06: 51:e7:92:fa:be:8b:df:2a:29:52:ef:78:2b:a2:27:0c:53:68: 79:98:46:48:2c:ef:ef:9b:ee:7e:63:cc:80:c4:9b:85:25:12: bf:f3:8e:f9:f1:7d:41:54:c6:29:7c:c9:64:77:09:9b:9f:a5: 69:6c:53:37:89:30:a1:a8:98:a2:71:fc:f3:7a:2a:a7:13:3c: 65:cf:57:81:5b:45:35:37:33:48:93:d4:1f:a3:7c:87:0b:d4: 82:19:83:6b:21:e4:32:bb:95:66:24:5e:81:fb:97:bc:e5:f7: 50:d2:a9:47:b4:5e:37:45:9e:06:b0:71:30:0b:f0:e3:37:86: 85:86:a4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqZWc+9RRm3TP/5HNsUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2 OTU4NzYwHhcNMjYwMTI1MTMwMTIyWhcNMjYwMTI2MTMwMTIyWjAzMTEwLwYDVQQD EyhiMzllNjhjYzM2Zjk5Y2QyZmY5MGEyNGNhMDliZjRlNjI1NzI3ZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjOblfsar2A5kZNF9To/Yzd7t3+x tMdI3BrmrJpukik0AC60F0P3oyx3Uhayn9vrcaVEwB3vew4UsCGWMBq67Vo/Ao6c Natill89Hy65QviYzMKSuIcgdRnvMQE0cefghLkjnSf6cGDH0q0f56NOoAzsT/TB 46UgJ/VWZUKMD2MNz/xja89Xb0bzhAjwLfkRzp+hya8IKYt/DjMAZ2ANVuYkhsK3 Iv0MmYpFwV3cSoFu34Fc7FKu6TEOfwnhKVeQ3JNncR1U2D01Pu6ksjSxHmlLTZCJ Jah1PPxkjwwIoJ/IM56tU2sTUn3FE8ihjFawafonVMifLCJIDlStNNjQWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOeaMw2+ZzS/5CiTKCb9OYlcn6EMB8GA1UdIwQY MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3 LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaEiujQR kQ0GY/1Kxo3MEXqwa/QmpbgIF+Fh9JcAiecu+U8GZA5O/OY++8ZKm6Ulgs6Wgjjw Oef86PfPSPmrW4PPzhvTVl6IqT6j/Yf7kJcAgrKpFOaZLECjQktUUR4DYWZfF46j h3bBwgVjJ9ab5ywhL27RAhsObipI154GUeeS+r6L3yopUu94K6InDFNoeZhGSCzv 75vufmPMgMSbhSUSv/OO+fF9QVTGKXzJZHcJm5+laWxTN4kwoaiYonH883oqpxM8 Zc9XgVtFNTczSJPUH6N8hwvUghmDayHkMruVZiRegfuXvOX3UNKpR7ReN0WeBrBx MAvw4zeGhYakpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:10 2026 by rpki-client