This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json) Hash identifier: uqPjzUaInvs9DF07yEmMTa1fsfW4xrRoWrkdaFLY7eE= Subject key identifier: 31:A4:34:3E:FC:AD:87:9A:7C:D3:02:E1:68:6A:BD:5C:8B:EB:C2:44 Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7 Certificate serial: 019BF988FD372FD22E9F21221F63E3F2E05A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 09:01:02 +0000 Manifest this update: Mon 26 Jan 2026 09:01:02 +0000 Manifest next update: Tue 27 Jan 2026 09:01:02 +0000 Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=) 2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: jMSfbZ7U6Oic9CH7YQHe+EfAGDwo6VmLNAeDcfacGxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:fd:37:2f:d2:2e:9f:21:22:1f:63:e3:f2:e0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7 Validity Not Before: Jan 26 09:01:02 2026 GMT Not After : Jan 27 09:01:02 2026 GMT Subject: CN=31a4343efcad879a7cd302e1686abd5c8bebc244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:03:bf:7c:0e:80:fe:08:7e:21:7c:0d:06: f9:ce:13:9c:17:b7:ee:68:27:5e:40:4e:75:9f:b0: 5a:c8:6c:b3:62:11:63:b6:59:b3:c7:19:6c:93:ae: b6:6c:38:31:41:02:8a:42:1a:0f:dc:a1:be:71:c6: fe:d8:a0:3e:de:5a:70:51:1d:cf:19:54:a6:a8:fc: 88:c6:ec:2a:cd:88:8c:fb:b5:3e:41:07:7f:c1:17: 09:66:59:ac:ad:f5:a7:cb:74:53:62:af:65:70:ab: 69:14:fb:08:58:bd:c5:12:6d:35:cb:cd:86:07:e0: e5:6f:e8:7e:ae:20:50:f0:46:02:e2:d8:7c:f1:37: e5:cd:22:51:b6:f1:06:6e:49:aa:c5:c2:39:3d:39: b5:51:58:76:ea:0c:e7:08:77:2d:a6:20:07:d8:ef: 9b:3f:d1:06:e8:31:5c:24:d5:ad:87:61:52:5d:24: bc:9c:7f:b3:92:f3:cd:12:6d:ca:77:65:df:1c:40: 36:d0:84:e7:83:08:8f:7e:3f:9b:ed:66:56:10:8b: ee:1b:5b:3a:10:27:80:95:61:36:ec:9f:cb:a1:af: 50:ca:e4:0b:23:ee:9d:e6:e4:e4:9d:16:77:02:e6: 5b:02:71:c7:eb:13:ae:b2:c1:be:15:30:f5:16:ce: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A4:34:3E:FC:AD:87:9A:7C:D3:02:E1:68:6A:BD:5C:8B:EB:C2:44 X509v3 Authority Key Identifier: keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:3e:f5:dc:b1:c3:05:62:61:67:17:3b:e7:22:11:7b:da: 29:69:c8:11:3f:8e:5e:5f:e7:92:8d:d5:56:81:fb:5d:8b:08: 34:17:43:1a:02:20:14:f8:f2:0e:91:4d:72:89:41:40:6c:e6: 00:d7:c2:55:8c:b6:08:d5:22:79:02:e5:b5:a7:e3:5c:47:da: bd:3d:a2:66:35:46:36:46:3d:6e:d9:91:ed:a2:fe:49:2a:d7: 0e:55:57:c3:78:c6:94:38:19:cf:a5:1c:a3:22:1a:dc:c8:dc: 01:6d:09:58:ce:57:06:05:8b:6e:78:24:cd:88:51:0d:a8:81: 00:7a:06:56:c4:b9:94:8d:50:dc:47:b6:71:53:44:d0:ce:2d: 04:4a:7d:0b:ae:3a:15:57:ec:f7:4e:8e:a1:e3:f4:95:04:9d: 7a:c0:8c:d1:39:7a:7b:2b:89:13:f0:08:36:7a:86:c8:59:1c: da:f1:58:f0:c6:ad:51:86:c3:97:3e:5c:61:d4:bf:ff:26:aa: 27:0f:90:28:fb:3e:0e:44:e8:53:78:9f:94:8d:7c:82:16:70: da:da:38:7d:6f:5b:4b:fd:b3:71:76:88:51:6a:4b:e8:2e:fb: 6c:a9:83:c9:3c:de:d4:2f:ed:bb:54:e7:50:fa:21:7a:9c:21: 13:ed:79:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iP03L9IunyEiH2Pj8uBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl ZWMyZTcwHhcNMjYwMTI2MDkwMTAyWhcNMjYwMTI3MDkwMTAyWjAzMTEwLwYDVQQD EygzMWE0MzQzZWZjYWQ4NzlhN2NkMzAyZTE2ODZhYmQ1YzhiZWJjMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRsDv3wOgP4IfiF8DQb5zhOcF7fu aCdeQE51n7BayGyzYhFjtlmzxxlsk662bDgxQQKKQhoP3KG+ccb+2KA+3lpwUR3P GVSmqPyIxuwqzYiM+7U+QQd/wRcJZlmsrfWny3RTYq9lcKtpFPsIWL3FEm01y82G B+Dlb+h+riBQ8EYC4th88TflzSJRtvEGbkmqxcI5PTm1UVh26gznCHctpiAH2O+b P9EG6DFcJNWth2FSXSS8nH+zkvPNEm3Kd2XfHEA20ITngwiPfj+b7WZWEIvuG1s6 ECeAlWE27J/Loa9QyuQLI+6d5uTknRZ3AuZbAnHH6xOussG+FTD1Fs4IBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGkND78rYeafNMC4WhqvVyL68JEMB8GA1UdIwQY MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt ZGJlNmM5MTBiYmE2LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2 LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoI+9dyx wwViYWcXO+ciEXvaKWnIET+OXl/nko3VVoH7XYsINBdDGgIgFPjyDpFNcolBQGzm ANfCVYy2CNUieQLltafjXEfavT2iZjVGNkY9btmR7aL+SSrXDlVXw3jGlDgZz6Uc oyIa3MjcAW0JWM5XBgWLbngkzYhRDaiBAHoGVsS5lI1Q3Ee2cVNE0M4tBEp9C646 FVfs906OoeP0lQSdesCM0Tl6eyuJE/AINnqGyFkc2vFY8MatUYbDlz5cYdS//yaq Jw+QKPs+DkToU3iflI18ghZw2to4fW9bS/2zcXaIUWpL6C77bKmDyTze1C/tu1Tn UPohepwhE+15Iw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:30 2026 by rpki-client