This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json) Hash identifier: jtzTxwdMdi3mP6Wqc2fgANazRDEm585EBK/tyuaiA08= Subject key identifier: DE:4A:26:92:80:78:78:D5:86:1B:8C:D4:A1:9D:01:E3:BA:53:E0:C7 Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Certificate serial: 019BA158C8F1394AC50145D6FBE030B5A4F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft Manifest number: 173F Signing time: Fri 09 Jan 2026 06:01:48 +0000 Manifest this update: Fri 09 Jan 2026 06:01:48 +0000 Manifest next update: Sat 10 Jan 2026 06:01:48 +0000 Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=) 2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 3W54fQ22a0ZCoDEIv6teXFSacieSHhnc+JsEOyyp4d0=) 3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:58:c8:f1:39:4a:c5:01:45:d6:fb:e0:30:b5:a4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Validity Not Before: Jan 9 06:01:48 2026 GMT Not After : Jan 10 06:01:48 2026 GMT Subject: CN=de4a2692807878d5861b8cd4a19d01e3ba53e0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:b2:fb:bc:74:8e:1d:ac:bc:c6:fe:2d:b8: b9:26:6d:a2:c6:0e:c4:1d:b6:30:08:5a:b0:ce:7c: bd:42:35:20:da:27:92:f0:a0:d3:2f:b7:5b:86:d7: 76:40:e4:a1:84:a8:7d:1b:e2:bd:e9:15:53:da:82: 2d:fc:91:20:dd:cc:1b:7f:5d:29:84:f2:8b:d1:ff: df:0c:6e:b7:54:5f:7e:08:8b:bc:cb:a1:49:36:c3: 35:fc:ce:45:3e:51:4e:16:a7:ad:5e:6f:45:aa:71: b3:fe:d3:5f:7e:d8:53:7b:93:15:7e:12:a4:d2:72: 83:0b:67:c8:02:94:b8:ca:c1:a5:9a:b9:f0:8f:9c: d7:2b:c2:05:39:19:2b:c8:79:d4:38:16:ec:56:24: 20:f2:36:67:b5:57:6b:e7:6c:7b:09:ed:5b:eb:87: a7:1a:26:f3:ca:d5:01:47:f3:a3:a1:8e:c3:eb:22: a6:de:c3:af:53:09:a6:3d:83:85:a0:d3:d5:a3:75: 2a:1c:b2:4d:31:db:1a:61:45:3b:75:c6:06:9b:d1: 18:66:97:00:de:39:d5:cc:94:80:1d:d3:66:2d:fe: 34:26:bc:42:aa:1d:03:bb:d7:29:e9:69:26:e8:d7: c4:8f:07:d6:69:b2:10:ca:c1:ee:14:4b:83:bf:e7: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:26:92:80:78:78:D5:86:1B:8C:D4:A1:9D:01:E3:BA:53:E0:C7 X509v3 Authority Key Identifier: keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:03:63:3e:cb:1b:a7:c2:27:13:bf:be:cd:1f:b5:c1:e6:7b: 97:9a:a1:23:7e:90:55:eb:60:7e:91:f3:e6:7a:55:a1:a5:df: 90:d3:70:9b:b2:6a:27:e4:15:f2:23:53:3d:91:06:ff:86:41: 1e:37:8a:37:93:43:1e:dc:4a:b6:3b:27:ec:37:14:15:9f:af: 2d:f9:51:d0:d8:b2:92:96:d4:32:b4:a7:10:11:d4:dc:09:26: 50:21:c2:4c:66:bc:b2:8d:89:35:72:14:70:12:d5:58:71:df: a5:da:db:a8:c5:ba:e3:b6:e0:08:ae:a9:43:96:1a:58:27:87: 17:67:1c:9f:8d:89:18:1b:0a:b2:5b:b8:6f:d7:63:23:1b:65: ce:78:66:e9:73:66:70:44:62:5f:2b:96:06:83:b8:d2:b3:b7: c6:67:5a:75:a5:d3:87:a6:52:90:40:02:2b:50:7e:c8:66:22: 2a:c7:be:40:34:84:b6:4a:c5:da:0e:38:6e:ca:7d:65:f1:a1: 3d:bc:d1:9d:86:70:9a:9d:be:d5:43:24:af:21:ae:2d:73:3a: 30:35:7f:77:c9:52:55:fe:cc:1c:c8:1f:0d:83:89:58:a6:b9: 1a:f0:58:5d:91:ce:e4:6d:c1:c3:69:9b:79:6a:3a:72:7b:5e: b4:f5:7f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWMjxOUrFAUXW++AwtaT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl ZGMwYTcwHhcNMjYwMTA5MDYwMTQ4WhcNMjYwMTEwMDYwMTQ4WjAzMTEwLwYDVQQD EyhkZTRhMjY5MjgwNzg3OGQ1ODYxYjhjZDRhMTlkMDFlM2JhNTNlMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj2y+7x0jh2svMb+Lbi5Jm2ixg7E HbYwCFqwzny9QjUg2ieS8KDTL7dbhtd2QOShhKh9G+K96RVT2oIt/JEg3cwbf10p hPKL0f/fDG63VF9+CIu8y6FJNsM1/M5FPlFOFqetXm9FqnGz/tNffthTe5MVfhKk 0nKDC2fIApS4ysGlmrnwj5zXK8IFORkryHnUOBbsViQg8jZntVdr52x7Ce1b64en GibzytUBR/OjoY7D6yKm3sOvUwmmPYOFoNPVo3UqHLJNMdsaYUU7dcYGm9EYZpcA 3jnVzJSAHdNmLf40JrxCqh0Du9cp6Wkm6NfEjwfWabIQysHuFEuDv+eQ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5KJpKAeHjVhhuM1KGdAeO6U+DHMB8GA1UdIwQY MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt Y2U2OTU1Njc2MWJkLzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwNjPssb p8InE7++zR+1weZ7l5qhI36QVetgfpHz5npVoaXfkNNwm7JqJ+QV8iNTPZEG/4ZB HjeKN5NDHtxKtjsn7DcUFZ+vLflR0NiykpbUMrSnEBHU3AkmUCHCTGa8so2JNXIU cBLVWHHfpdrbqMW647bgCK6pQ5YaWCeHF2ccn42JGBsKslu4b9djIxtlznhm6XNm cERiXyuWBoO40rO3xmdadaXTh6ZSkEACK1B+yGYiKse+QDSEtkrF2g44bsp9ZfGh PbzRnYZwmp2+1UMkryGuLXM6MDV/d8lSVf7MHMgfDYOJWKa5GvBYXZHO5G3Bw2mb eWo6cntetPV/fg== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:32 2026 by rpki-client