This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json) Hash identifier: zHRTiFNBMn1/E5cvtNpI0cdLbYHC5F4epQ5IzeqVMHM= Subject key identifier: 14:F1:8A:7A:82:5E:4D:2B:84:EE:E2:07:FF:57:24:28:90:74:75:0A Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019BF6BF5FDC00201F37C455108AE09136BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft Manifest number: 08D3 Signing time: Sun 25 Jan 2026 20:01:35 +0000 Manifest this update: Sun 25 Jan 2026 20:01:35 +0000 Manifest next update: Mon 26 Jan 2026 20:01:35 +0000 Files and hashes: 1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=) 2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=) 3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: yFvlFsTUGG/ky/6W8CMZ1G9QMvKzUKIzcuvR5eS7Jsk=) 4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:5f:dc:00:20:1f:37:c4:55:10:8a:e0:91:36:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Jan 25 20:01:35 2026 GMT Not After : Jan 26 20:01:35 2026 GMT Subject: CN=14f18a7a825e4d2b84eee207ff5724289074750a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:d3:6e:a8:1d:99:81:0d:97:17:9a:b6:02: 87:10:2e:18:d6:5a:ad:4c:84:f8:ec:c2:4e:e8:48: 89:c9:75:fe:34:30:98:4c:cc:3e:b6:92:03:22:c7: 69:2d:a6:76:ba:d1:1d:50:03:e9:cb:7f:65:20:6e: 77:e4:d2:9e:bd:38:61:de:f6:f9:2d:2b:00:b2:81: 5b:e2:ca:7c:81:3b:b3:c9:3b:3f:8f:23:d7:a8:05: 05:9d:41:9c:ae:a4:58:49:8f:46:4f:b0:ac:52:3c: 47:58:16:1d:6a:ee:ab:d9:da:5b:a7:1a:7f:39:13: ad:9f:e0:ae:23:f6:6a:bc:67:88:6a:c4:21:3b:b3: 1a:81:99:54:c7:10:72:2a:00:35:79:52:de:52:52: 3b:be:e5:ed:60:ab:4c:ce:27:d3:04:1b:c0:97:4b: 01:08:66:cb:f2:b5:9f:a2:95:1b:eb:68:15:77:50: c6:61:9e:0d:98:fe:54:e4:d2:80:72:f5:97:24:37: 4a:29:5c:59:95:4a:98:43:57:ad:02:c2:be:8d:ac: 6f:a2:58:3d:b5:05:e5:6e:dd:ba:79:3a:56:a3:9e: ee:bf:2b:4c:bb:28:60:99:be:c2:56:b6:db:07:6d: de:9f:47:f5:a4:bd:8b:75:7e:04:ce:90:c0:d1:c1: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F1:8A:7A:82:5E:4D:2B:84:EE:E2:07:FF:57:24:28:90:74:75:0A X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:17:f7:44:5f:89:a5:0d:ff:67:6a:54:11:0c:47:72:bd:f8: 81:da:e1:c7:00:d4:5a:de:f6:98:a9:d9:b2:45:1e:e2:7d:ff: 5d:bb:34:27:b4:c9:cf:7f:dd:11:53:33:d8:9e:48:85:37:f6: 7f:7f:05:72:c8:b9:4c:18:94:0f:be:3a:52:66:d9:1b:b9:fb: b3:d5:4c:46:44:5d:ad:f4:5d:b2:3e:42:17:17:a5:f5:4c:e0: 92:8b:4c:78:7a:50:d0:c2:06:cd:b4:c3:14:d0:3c:1a:30:39: 4a:2b:4d:73:27:60:14:10:b9:8a:4f:a5:eb:fa:97:a8:91:7c: 10:0f:a4:a6:90:6d:b8:7c:df:c0:cb:41:d7:bc:20:2b:5b:07: 68:e2:14:ab:55:89:2a:51:86:79:6c:7b:43:42:c6:4e:ea:24: fe:27:40:a6:fa:81:52:c8:fa:20:8f:62:36:57:7a:fa:2d:ba: fb:39:b6:ce:d4:76:f5:2e:5b:19:83:5b:54:7f:64:99:bb:1c: c7:e0:9c:33:54:42:f3:30:0d:76:72:79:a7:24:4e:30:26:f3: c9:d1:57:1c:f9:19:4a:98:e2:34:89:fd:eb:54:e2:a0:40:38: 66:ff:2c:7d:c9:0f:f4:de:e6:3a:f5:aa:62:dc:b9:71:07:6c: d1:c0:83:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1/cACAfN8RVEIrgkTa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjYwMTI1MjAwMTM1WhcNMjYwMTI2MjAwMTM1WjAzMTEwLwYDVQQD EygxNGYxOGE3YTgyNWU0ZDJiODRlZWUyMDdmZjU3MjQyODkwNzQ3NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKPTbqgdmYENlxeatgKHEC4Y1lqt TIT47MJO6EiJyXX+NDCYTMw+tpIDIsdpLaZ2utEdUAPpy39lIG535NKevThh3vb5 LSsAsoFb4sp8gTuzyTs/jyPXqAUFnUGcrqRYSY9GT7CsUjxHWBYdau6r2dpbpxp/ OROtn+CuI/ZqvGeIasQhO7MagZlUxxByKgA1eVLeUlI7vuXtYKtMzifTBBvAl0sB CGbL8rWfopUb62gVd1DGYZ4NmP5U5NKAcvWXJDdKKVxZlUqYQ1etAsK+jaxvolg9 tQXlbt26eTpWo57uvytMuyhgmb7CVrbbB23en0f1pL2LdX4EzpDA0cHskQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTxinqCXk0rhO7iB/9XJCiQdHUKMB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxf3RF+J pQ3/Z2pUEQxHcr34gdrhxwDUWt72mKnZskUe4n3/Xbs0J7TJz3/dEVMz2J5IhTf2 f38Fcsi5TBiUD746UmbZG7n7s9VMRkRdrfRdsj5CFxel9UzgkotMeHpQ0MIGzbTD FNA8GjA5SitNcydgFBC5ik+l6/qXqJF8EA+kppBtuHzfwMtB17wgK1sHaOIUq1WJ KlGGeWx7Q0LGTuok/idApvqBUsj6II9iNld6+i26+zm2ztR29S5bGYNbVH9kmbsc x+CcM1RC8zANdnJ5pyROMCbzydFXHPkZSpjiNIn961TioEA4Zv8sfckP9N7mOvWq Yty5cQds0cCD0w== -----END CERTIFICATE-----Generated at Mon Jan 26 02:17:01 2026 by rpki-client