This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json) Hash identifier: 94eCZKgtqzEKwTU7HRs4a59hXsDsM8g6bUTZzSbYIpU= Subject key identifier: F1:8B:1D:E6:11:A7:57:7D:FF:36:BF:E4:50:3C:68:F7:92:1C:4E:59 Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Certificate serial: 019BF6884B5CCBD44BA8A8DF91819ED7EEC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft Manifest number: 0ECA Signing time: Sun 25 Jan 2026 19:01:25 +0000 Manifest this update: Sun 25 Jan 2026 19:01:25 +0000 Manifest next update: Mon 26 Jan 2026 19:01:25 +0000 Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=) 2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: 8OCinjwfr0cmJbwx5KQcaWb4I5fzJlMWOpYe22ihljA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4b:5c:cb:d4:4b:a8:a8:df:91:81:9e:d7:ee:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Validity Not Before: Jan 25 19:01:25 2026 GMT Not After : Jan 26 19:01:25 2026 GMT Subject: CN=f18b1de611a7577dff36bfe4503c68f7921c4e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:9b:05:95:e9:51:e8:04:da:3f:8c:4e:78: 30:5a:fb:33:e9:a3:18:d3:74:28:a9:27:3a:16:19: 82:cc:6e:46:20:a8:9b:a7:bd:c8:d0:61:08:a5:e1: 8a:46:a6:40:75:09:d6:62:1e:da:29:9b:28:6a:5a: 2d:ab:32:2f:63:9b:03:cb:70:c9:ad:49:8d:cc:b1: 3d:f3:9c:ac:51:38:a6:0e:f3:86:33:ce:d1:1c:9a: 05:ee:69:2c:e4:cb:b1:c2:e8:30:48:c0:f3:ad:25: 18:fa:e3:bb:72:d9:4b:36:1d:6c:3f:a5:47:9f:39: 0f:03:c0:fa:47:e3:cc:09:a2:d2:26:76:99:a9:57: 46:52:a3:2f:36:80:8c:05:2f:f1:c4:7c:0f:3f:69: 57:e3:12:5a:ae:d3:33:68:c0:6c:b8:6d:8e:a0:67: 4e:da:2c:68:75:2e:cc:7d:da:52:67:67:87:c1:0e: 46:48:64:65:b2:b6:90:ff:96:84:6d:98:5e:81:8b: 78:5c:65:44:40:72:9e:98:ba:51:5f:f5:7f:de:44: 5f:13:19:09:88:c8:27:10:70:20:af:20:7b:66:58: f1:d9:0a:a8:5d:e3:3f:72:8c:02:14:0e:b9:07:1e: 8a:17:b4:4b:83:99:6e:00:e5:98:3a:15:81:bf:84: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:1D:E6:11:A7:57:7D:FF:36:BF:E4:50:3C:68:F7:92:1C:4E:59 X509v3 Authority Key Identifier: keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e8:95:f4:20:55:1c:30:a4:0d:1a:96:da:45:d6:02:39:0e: e9:0d:77:8f:e2:0f:33:70:ba:13:66:d8:a0:21:7b:7a:b2:26: 7c:74:0c:da:e1:39:17:4a:af:80:da:c8:e7:ed:3a:89:5e:90: 9a:d2:5c:10:ed:d0:de:d8:bd:2e:15:f5:c8:e9:48:dc:4a:b8: b4:7c:c2:1e:d5:ab:b8:c1:a2:00:dd:6e:a3:9e:66:18:86:b0: f0:d6:be:15:fc:02:7f:aa:a6:f5:03:bc:9d:e4:5e:63:e8:34: 2d:b0:19:8b:07:22:c3:29:bf:6d:44:a9:c1:d1:2a:9a:1a:1a: cd:88:8f:5b:2e:72:b3:94:51:4b:ee:d3:1d:6b:fe:1e:de:47: 2d:56:d4:b6:b5:27:a7:f6:9d:b0:a7:4b:07:77:2f:ff:bb:5a: 14:8c:26:f8:96:26:01:f0:73:b5:7a:14:bf:c8:a2:4b:cd:29: fc:2d:1e:8b:0f:52:46:42:70:7c:b0:a9:88:a9:68:fb:1c:3b: d2:70:61:a0:16:ee:44:c6:e0:54:e9:b3:7f:3b:9c:3d:05:27: cd:2c:f7:6f:9e:75:69:4a:86:67:cc:79:6a:fd:00:86:ae:a4: ed:2d:e5:f1:0c:77:ce:43:6e:1b:17:e1:d3:95:c8:20:35:50: dc:82:51:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEtcy9RLqKjfkYGe1+7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy Nzc5YTgwHhcNMjYwMTI1MTkwMTI1WhcNMjYwMTI2MTkwMTI1WjAzMTEwLwYDVQQD EyhmMThiMWRlNjExYTc1NzdkZmYzNmJmZTQ1MDNjNjhmNzkyMWM0ZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTqbBZXpUegE2j+MTngwWvsz6aMY 03QoqSc6FhmCzG5GIKibp73I0GEIpeGKRqZAdQnWYh7aKZsoalotqzIvY5sDy3DJ rUmNzLE985ysUTimDvOGM87RHJoF7mks5MuxwugwSMDzrSUY+uO7ctlLNh1sP6VH nzkPA8D6R+PMCaLSJnaZqVdGUqMvNoCMBS/xxHwPP2lX4xJartMzaMBsuG2OoGdO 2ixodS7MfdpSZ2eHwQ5GSGRlsraQ/5aEbZhegYt4XGVEQHKemLpRX/V/3kRfExkJ iMgnEHAgryB7Zljx2QqoXeM/cowCFA65Bx6KF7RLg5luAOWYOhWBv4Q24QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGLHeYRp1d9/za/5FA8aPeSHE5ZMB8GA1UdIwQY MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeiV9CBV HDCkDRqW2kXWAjkO6Q13j+IPM3C6E2bYoCF7erImfHQM2uE5F0qvgNrI5+06iV6Q mtJcEO3Q3ti9LhX1yOlI3Eq4tHzCHtWruMGiAN1uo55mGIaw8Na+FfwCf6qm9QO8 neReY+g0LbAZiwciwym/bUSpwdEqmhoazYiPWy5ys5RRS+7THWv+Ht5HLVbUtrUn p/adsKdLB3cv/7taFIwm+JYmAfBztXoUv8iiS80p/C0eiw9SRkJwfLCpiKlo+xw7 0nBhoBbuRMbgVOmzfzucPQUnzSz3b551aUqGZ8x5av0Ahq6k7S3l8Qx3zkNuGxfh 05XIIDVQ3IJRxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:59 2026 by rpki-client