This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json) Hash identifier: NpFmCyfBOATIOgtmqiXBFOcNz94Y/vRuzjL/K4pH7QU= Subject key identifier: D9:36:A6:51:19:3C:D2:F2:B3:CF:F2:C0:2E:B3:4C:38:F5:CC:5E:DE Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f Certificate serial: 019BF5076FEC5F1819D7C2D5A8AB7294A2F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft Manifest number: 021C Signing time: Sun 25 Jan 2026 12:01:03 +0000 Manifest this update: Sun 25 Jan 2026 12:01:03 +0000 Manifest next update: Mon 26 Jan 2026 12:01:03 +0000 Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=) 2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=) 3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: Y8YbnhVvWl+TAd9RLC2h1m9ei3QkZtiYAiJcxwsTuRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:6f:ec:5f:18:19:d7:c2:d5:a8:ab:72:94:a2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f Validity Not Before: Jan 25 12:01:03 2026 GMT Not After : Jan 26 12:01:03 2026 GMT Subject: CN=d936a651193cd2f2b3cff2c02eb34c38f5cc5ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:a7:0f:2b:2d:58:a1:a5:52:17:d9:69:20: ad:a2:b3:6b:a5:63:de:05:91:5d:ab:d8:a7:bc:8e: ba:6d:8c:6a:fd:7c:78:e4:c3:03:32:4d:59:ef:2d: a9:bc:3b:9e:c7:d8:a9:2a:25:c6:ac:9d:c8:51:67: d4:14:b8:d7:01:28:42:be:fd:f9:91:72:4e:cb:97: 36:84:16:30:2a:6d:ef:0e:9c:93:26:63:61:18:9d: 8c:fa:45:8c:a1:3d:dd:bc:a3:89:1c:b8:58:34:77: 88:c2:ac:81:76:3a:1a:89:65:6a:c9:16:6d:3e:4b: 0b:18:dd:59:64:fb:b5:f8:86:6d:f0:f4:82:33:43: 44:4f:d2:2d:a8:36:84:a1:0b:d1:0f:8f:e7:89:10: b5:6c:94:0e:20:a7:48:38:12:56:1f:ad:b4:ee:7d: 32:15:14:8d:c4:01:44:49:e3:c8:b0:5a:1b:2d:87: 58:34:48:6f:c2:66:42:6e:63:1d:4d:f8:48:07:b9: 7b:4b:6e:40:d1:3b:0b:f2:25:f8:29:93:63:73:79: ed:c6:ff:8c:ae:2f:f3:28:19:94:39:00:ac:36:8b: 00:70:ec:65:34:52:c2:69:08:93:78:d7:dc:95:ad: cb:ea:dc:c8:be:95:14:10:64:d3:db:d6:b4:f5:9b: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:36:A6:51:19:3C:D2:F2:B3:CF:F2:C0:2E:B3:4C:38:F5:CC:5E:DE X509v3 Authority Key Identifier: keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:66:a8:e7:08:df:5a:79:5f:06:bd:4b:36:7a:c0:33:34:18: 6c:a6:2f:9f:c5:7f:81:0f:f0:74:b2:e6:20:ed:e5:c6:bf:c1: 23:c4:67:ef:b8:2c:50:db:c5:e1:91:6a:e7:10:e4:c2:86:e8: 59:5d:a0:30:ef:2c:e2:27:e8:5b:b6:ea:05:3d:8e:3e:95:40: 66:1e:0e:35:06:83:ee:3a:5b:9e:e8:98:3d:68:a0:02:60:05: cb:87:61:56:06:78:3d:36:16:65:49:dc:50:0b:0c:43:bd:d4: 08:f6:88:5c:c4:6d:e3:14:7f:c5:de:41:47:c3:6b:af:9b:76: 5e:6c:ab:05:de:5f:c7:c5:b1:e1:a5:e7:e9:87:88:7f:cd:49: 58:a7:f0:f9:03:dc:6b:75:79:28:b3:42:12:ae:47:64:3a:7c: a6:aa:99:66:55:3d:7b:c2:d9:1e:a5:bf:b7:05:9b:9b:d7:69: 40:0e:2a:b4:56:df:b1:7b:87:40:0b:df:87:66:d2:0f:0a:f2: 75:fd:ac:37:d1:d2:09:9f:10:65:e9:d9:3b:c9:cc:c4:ec:73: 8c:0d:b4:5d:23:6b:a1:0b:ba:62:04:be:32:cb:3f:ba:a5:54: 22:9f:eb:67:ba:d1:78:37:be:b8:d5:e9:6c:ef:12:1a:5a:b2: b2:c0:75:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2/sXxgZ18LVqKtylKL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk OTBiNGYwHhcNMjYwMTI1MTIwMTAzWhcNMjYwMTI2MTIwMTAzWjAzMTEwLwYDVQQD EyhkOTM2YTY1MTE5M2NkMmYyYjNjZmYyYzAyZWIzNGMzOGY1Y2M1ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArROnDystWKGlUhfZaSCtorNrpWPe BZFdq9invI66bYxq/Xx45MMDMk1Z7y2pvDuex9ipKiXGrJ3IUWfUFLjXAShCvv35 kXJOy5c2hBYwKm3vDpyTJmNhGJ2M+kWMoT3dvKOJHLhYNHeIwqyBdjoaiWVqyRZt PksLGN1ZZPu1+IZt8PSCM0NET9ItqDaEoQvRD4/niRC1bJQOIKdIOBJWH6207n0y FRSNxAFESePIsFobLYdYNEhvwmZCbmMdTfhIB7l7S25A0TsL8iX4KZNjc3ntxv+M ri/zKBmUOQCsNosAcOxlNFLCaQiTeNfcla3L6tzIvpUUEGTT29a09ZsYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk2plEZPNLys8/ywC6zTDj1zF7eMB8GA1UdIwQY MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumao5wjf WnlfBr1LNnrAMzQYbKYvn8V/gQ/wdLLmIO3lxr/BI8Rn77gsUNvF4ZFq5xDkwobo WV2gMO8s4ifoW7bqBT2OPpVAZh4ONQaD7jpbnuiYPWigAmAFy4dhVgZ4PTYWZUnc UAsMQ73UCPaIXMRt4xR/xd5BR8Nrr5t2XmyrBd5fx8Wx4aXn6YeIf81JWKfw+QPc a3V5KLNCEq5HZDp8pqqZZlU9e8LZHqW/twWbm9dpQA4qtFbfsXuHQAvfh2bSDwry df2sN9HSCZ8QZenZO8nMxOxzjA20XSNroQu6YgS+Mss/uqVUIp/rZ7rReDe+uNXp bO8SGlqyssB1vw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:52 2026 by rpki-client