This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json) Hash identifier: pKhGFDynCVnitYJb2u8+dNtk9JLoD8gIhSyLciztOFw= Subject key identifier: 7C:73:0C:BA:65:E0:68:65:39:79:DF:75:E6:18:45:15:02:0A:2E:AA Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Certificate serial: 019BFBAE99400A70166B67335D2EC1782B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft Manifest number: 1559 Signing time: Mon 26 Jan 2026 19:01:22 +0000 Manifest this update: Mon 26 Jan 2026 19:01:22 +0000 Manifest next update: Tue 27 Jan 2026 19:01:22 +0000 Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=) 2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=) 3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=) 4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: SwC7DtFJqCBA4kmB7RRA6GsWRNzhiW2SYzAnUIg4Jwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:99:40:0a:70:16:6b:67:33:5d:2e:c1:78:2b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Validity Not Before: Jan 26 19:01:22 2026 GMT Not After : Jan 27 19:01:22 2026 GMT Subject: CN=7c730cba65e068653979df75e6184515020a2eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:72:0e:36:68:87:95:b2:8b:39:07:8e:84: 5d:01:a0:b3:e8:26:d1:16:fe:e4:e4:d8:11:9b:08: 18:32:e2:99:9e:8e:b6:61:bf:bd:49:58:54:24:7f: a3:cd:4d:9b:ea:14:18:af:60:85:17:18:38:42:de: 36:db:e2:cc:17:0d:96:e3:3b:1b:3e:df:59:e8:e0: 2e:72:d0:a5:fe:94:9b:60:c8:9e:ad:63:54:52:6e: 9c:65:e7:af:4d:39:0d:7f:9a:d1:4b:26:e0:53:57: a9:24:81:77:ff:17:fc:68:e7:39:ca:11:40:94:12: ed:56:c8:28:d4:a7:12:70:8b:95:4e:54:7c:1a:28: d6:57:9d:5b:51:21:69:45:66:dd:dd:6a:45:30:4a: aa:3e:45:1a:f2:69:3f:86:ca:a6:3d:6b:82:00:21: e5:0e:3e:29:cd:16:a7:87:c6:b2:99:0d:a4:e0:68: ee:15:76:c3:88:6e:2e:f5:b9:e8:75:4f:ef:41:77: c0:bc:66:e7:3a:d3:37:75:fa:dd:54:53:2d:28:a2: 1c:47:cd:d8:d1:e6:ff:19:cd:d0:ff:d6:f3:63:75: 2b:b3:cd:a5:82:96:85:e0:8f:f1:86:9e:a9:52:46: 25:8a:62:8e:dd:0b:ae:f3:56:22:d9:4b:8e:aa:36: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:73:0C:BA:65:E0:68:65:39:79:DF:75:E6:18:45:15:02:0A:2E:AA X509v3 Authority Key Identifier: keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3d:cb:e9:51:17:b9:a9:f3:4f:ec:bf:a2:dc:37:58:d5:a5: 6a:ba:a3:2a:c7:7b:75:48:94:a2:c3:6e:57:85:52:38:b4:25: cc:3d:22:7c:6f:65:37:e8:a3:4a:7a:2c:f4:c7:57:23:83:15: 81:16:b3:7e:6b:14:13:c2:a9:1d:94:8d:16:88:80:47:da:9d: aa:db:36:ff:21:f9:05:9d:fa:ef:98:16:a7:7b:8a:33:e6:14: 12:44:40:cb:1c:72:2a:65:56:5a:1d:44:1e:a5:f8:50:9f:e3: 37:04:7a:96:6c:74:d6:75:e4:eb:f7:a6:20:4e:6d:dc:fc:a6: 94:ec:32:e6:b6:57:c3:69:70:2b:95:eb:a4:59:7b:9d:30:94: 51:64:d3:4a:50:58:81:da:46:d1:0c:7b:6e:29:15:46:9a:00: d3:03:df:63:0d:fa:bc:c8:24:3e:dc:db:d7:6c:71:8e:48:e8: a0:35:4e:32:74:99:fc:e9:e7:3c:61:95:58:67:2d:7f:74:dd: da:6f:93:eb:6d:e4:ef:bc:23:3b:9f:e6:93:b5:9a:fe:4f:ef: c8:ab:d8:e6:2c:9e:6c:d6:c6:61:16:5c:8b:be:49:20:22:a0: 58:43:51:bf:64:bf:a6:bd:a5:b3:74:33:79:b7:44:2a:99:1b: ef:b0:f0:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rplACnAWa2czXS7BeCtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk ODc3NDkwHhcNMjYwMTI2MTkwMTIyWhcNMjYwMTI3MTkwMTIyWjAzMTEwLwYDVQQD Eyg3YzczMGNiYTY1ZTA2ODY1Mzk3OWRmNzVlNjE4NDUxNTAyMGEyZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMVyDjZoh5WyizkHjoRdAaCz6CbR Fv7k5NgRmwgYMuKZno62Yb+9SVhUJH+jzU2b6hQYr2CFFxg4Qt422+LMFw2W4zsb Pt9Z6OAuctCl/pSbYMierWNUUm6cZeevTTkNf5rRSybgU1epJIF3/xf8aOc5yhFA lBLtVsgo1KcScIuVTlR8GijWV51bUSFpRWbd3WpFMEqqPkUa8mk/hsqmPWuCACHl Dj4pzRanh8aymQ2k4GjuFXbDiG4u9bnodU/vQXfAvGbnOtM3dfrdVFMtKKIcR83Y 0eb/Gc3Q/9bzY3Urs82lgpaF4I/xhp6pUkYlimKO3Quu81Yi2UuOqjYarwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxzDLpl4GhlOXnfdeYYRRUCCi6qMB8GA1UdIwQY MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt YmNhODBlNDdjNTczLzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeD3L6VEX uanzT+y/otw3WNWlarqjKsd7dUiUosNuV4VSOLQlzD0ifG9lN+ijSnos9MdXI4MV gRazfmsUE8KpHZSNFoiAR9qdqts2/yH5BZ3675gWp3uKM+YUEkRAyxxyKmVWWh1E HqX4UJ/jNwR6lmx01nXk6/emIE5t3PymlOwy5rZXw2lwK5XrpFl7nTCUUWTTSlBY gdpG0Qx7bikVRpoA0wPfYw36vMgkPtzb12xxjkjooDVOMnSZ/OnnPGGVWGctf3Td 2m+T623k77wjO5/mk7Wa/k/vyKvY5iyebNbGYRZci75JICKgWENRv2S/pr2ls3Qz ebdEKpkb77DwVQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:34 2026 by rpki-client