This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json) Hash identifier: wt24KDXtUSvuaOSqo2Kb2X0FpPtIn2X9aQqtsIlaUh8= Subject key identifier: 62:75:F4:22:29:83:2D:F7:46:E4:8E:E1:A0:A6:4E:60:E5:EB:81:05 Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac Certificate serial: 019BF6BF1A528EBFD4F57BF146F215B85AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft Manifest number: 1509 Signing time: Sun 25 Jan 2026 20:01:17 +0000 Manifest this update: Sun 25 Jan 2026 20:01:17 +0000 Manifest next update: Mon 26 Jan 2026 20:01:17 +0000 Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: U99ONkOKR30AmZwp/Rxd09svRbeW0nK2a9hloQK7ovc=) 2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:1a:52:8e:bf:d4:f5:7b:f1:46:f2:15:b8:5a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac Validity Not Before: Jan 25 20:01:17 2026 GMT Not After : Jan 26 20:01:17 2026 GMT Subject: CN=6275f42229832df746e48ee1a0a64e60e5eb8105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:d3:d9:aa:02:b5:7a:62:6d:a0:dd:e6:13: b0:23:97:13:03:c3:3a:2d:97:a1:c9:83:fe:cc:c2: 04:93:9f:3d:f9:74:8d:06:7a:ea:78:80:de:6a:11: 96:53:35:2a:09:77:97:00:d5:e1:92:98:4a:99:f9: cf:c4:ac:8e:15:3a:3c:e0:6f:5d:cc:be:84:07:15: 29:65:0a:10:9d:31:41:fa:13:ba:6f:42:7c:83:63: f5:07:92:1e:48:ea:10:ab:be:24:b5:5d:a1:ce:34: 57:ec:7c:69:ec:21:11:a3:c9:77:8f:7e:de:24:25: 8b:bd:94:98:55:c4:f5:95:03:b2:10:ae:cf:ed:aa: 4c:c1:a3:3a:02:76:0e:83:2b:f5:73:cf:a3:e7:45: d5:09:5d:ff:e3:f4:d7:17:1f:53:a6:19:4d:1a:44: b4:4a:bc:3d:3b:e2:7f:10:77:07:14:4b:70:14:d0: b7:70:08:33:d2:1d:3b:69:45:7f:98:68:a7:b0:e3: 0f:47:4c:12:91:0b:ac:df:fb:5a:11:7d:74:12:7d: 65:4e:3f:07:23:f5:6c:3d:12:8e:22:0d:3b:50:75: 2e:f0:da:5d:c6:36:9c:86:91:74:e3:0d:87:60:70: f8:ac:70:21:84:c7:bb:0c:c0:ed:05:a3:7f:b9:b4: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:F4:22:29:83:2D:F7:46:E4:8E:E1:A0:A6:4E:60:E5:EB:81:05 X509v3 Authority Key Identifier: keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f4:71:bf:e8:76:f7:7a:62:54:2f:c6:bb:b3:0f:e8:64:4c: ed:81:10:b4:4d:08:aa:2a:91:59:5a:45:bc:b7:f8:8e:38:a5: 09:20:3a:01:a3:3b:73:e9:73:dd:9b:4c:2d:5e:02:e3:c1:d4: 68:ee:8e:29:c5:36:02:c9:1e:3c:b1:37:cc:0f:9c:c9:43:d7: d9:f8:a7:c5:bd:20:3c:ae:56:ad:ca:8d:14:bc:cf:d9:77:06: 2e:22:f8:1c:7d:31:3b:90:b8:1e:7e:34:ef:c9:e4:cb:f7:4d: c3:b7:6f:79:e0:36:cd:e9:c0:98:e5:14:20:a9:d1:9d:d6:41: ec:fc:68:35:32:49:62:32:f4:bc:a3:cc:ba:c5:87:d3:9e:41: d9:5e:6a:c9:ab:f0:b9:55:bc:f0:d1:7b:1c:9f:a1:44:f5:54: e1:cd:66:2c:db:ca:34:37:4d:4f:5f:b8:b2:f5:c9:12:a8:a8: 3f:c0:f2:40:23:f8:b6:46:31:f0:74:75:7c:ce:f1:69:d8:7d: 63:47:92:04:3b:3c:14:d1:a9:81:da:64:e7:b2:70:6b:3c:53: 41:dc:00:30:26:ce:a7:bf:1e:2d:62:bc:68:0e:51:23:b1:bd: 03:85:77:2c:9f:27:db:b9:49:dc:70:5d:31:ee:84:2a:39:31: 58:b9:5a:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxpSjr/U9XvxRvIVuFruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj ZDQ5YWMwHhcNMjYwMTI1MjAwMTE3WhcNMjYwMTI2MjAwMTE3WjAzMTEwLwYDVQQD Eyg2Mjc1ZjQyMjI5ODMyZGY3NDZlNDhlZTFhMGE2NGU2MGU1ZWI4MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsofT2aoCtXpibaDd5hOwI5cTA8M6 LZehyYP+zMIEk589+XSNBnrqeIDeahGWUzUqCXeXANXhkphKmfnPxKyOFTo84G9d zL6EBxUpZQoQnTFB+hO6b0J8g2P1B5IeSOoQq74ktV2hzjRX7Hxp7CERo8l3j37e JCWLvZSYVcT1lQOyEK7P7apMwaM6AnYOgyv1c8+j50XVCV3/4/TXFx9TphlNGkS0 Srw9O+J/EHcHFEtwFNC3cAgz0h07aUV/mGinsOMPR0wSkQus3/taEX10En1lTj8H I/VsPRKOIg07UHUu8NpdxjachpF04w2HYHD4rHAhhMe7DMDtBaN/ubQ0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ19CIpgy33RuSO4aCmTmDl64EFMB8GA1UdIwQY MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt ODJmN2I5OWM1NDY3LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3 LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefRxv+h2 93piVC/Gu7MP6GRM7YEQtE0IqiqRWVpFvLf4jjilCSA6AaM7c+lz3ZtMLV4C48HU aO6OKcU2AskePLE3zA+cyUPX2finxb0gPK5WrcqNFLzP2XcGLiL4HH0xO5C4Hn40 78nky/dNw7dveeA2zenAmOUUIKnRndZB7PxoNTJJYjL0vKPMusWH055B2V5qyavw uVW88NF7HJ+hRPVU4c1mLNvKNDdNT1+4svXJEqioP8DyQCP4tkYx8HR1fM7xadh9 Y0eSBDs8FNGpgdpk57JwazxTQdwAMCbOp78eLWK8aA5RI7G9A4V3LJ8n27lJ3HBd Me6EKjkxWLlalQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:44 2026 by rpki-client