This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json) Hash identifier: 4ArPb+Iq6D5unCetslbbwNHrRkz2SCz4+mWWEYh4GKE= Subject key identifier: 8E:3A:DE:95:4E:AB:E2:36:35:8A:DD:D2:43:0F:27:73:5E:E5:4E:70 Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Certificate serial: 019BD733EF876D121DE1E90FDA745C481257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft Manifest number: 17D8 Signing time: Mon 19 Jan 2026 17:01:03 +0000 Manifest this update: Mon 19 Jan 2026 17:01:03 +0000 Manifest next update: Tue 20 Jan 2026 17:01:03 +0000 Files and hashes: 1: 0DnLoCEjuk9LA09NU-Pj6xztVUg.roa (hash: eavdDhCPv5oKejhQ3E73neB1uw2GLpbCsVavoHAgMTA=) 2: 6kx7RSGU2eDdKnON8ulnwP0DoEM.roa (hash: mBB9XF7/IVEobcs0wBYP2r9M7bnVaTZmf6dDGW+5sqI=) 3: S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa (hash: iXSwMrT+vGCWBRxTBdKA3OOmkhNM967qgIOHYI7fwnY=) 4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: kjBLw6p3l4Wpj/YlW10k8P5Fvj+kIyDlmPX8ulLaYgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:33:ef:87:6d:12:1d:e1:e9:0f:da:74:5c:48:12:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Validity Not Before: Jan 19 17:01:03 2026 GMT Not After : Jan 20 17:01:03 2026 GMT Subject: CN=8e3ade954eabe236358addd2430f27735ee54e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:94:ef:f6:82:f6:10:87:f4:11:43:5e:9c: 5c:0b:52:2e:0b:f1:7f:77:8c:0d:ae:7f:d3:bd:7b: 4c:5b:07:28:72:3d:fb:ea:6f:17:25:0d:f6:15:d1: 05:61:7a:cc:e9:70:b1:82:ea:ec:12:0f:1c:9f:5e: 00:1c:76:a8:0b:3e:d3:14:17:24:2a:94:a1:2f:ca: f7:2d:17:35:19:68:c0:f3:43:e0:9b:1b:5c:25:45: cf:59:ca:84:88:61:4a:09:81:76:3d:7f:95:a9:d2: 5e:09:a5:12:66:45:ac:2e:5a:25:a4:13:a7:c4:1e: 01:13:5a:76:d2:2e:39:00:93:74:5f:49:39:b7:18: 83:e7:a7:88:16:ef:97:77:8e:50:02:80:cb:3f:41: 6a:c5:87:cf:39:09:47:5e:ba:63:b4:9d:47:ce:91: 6e:a6:0f:69:93:a5:a8:e0:a5:b8:a0:9b:79:9c:37: f5:5c:e3:20:63:13:a5:6c:d0:f9:9a:99:e1:c8:f8: 4a:22:b9:e0:04:b4:a7:b0:f1:b2:47:c1:70:46:e0: db:42:d2:57:07:0a:2a:ef:4c:2b:6d:9b:02:50:c9: a4:e2:e0:2e:7d:2b:88:f5:28:73:9c:a5:64:0f:dc: e1:31:99:a8:a4:b6:5e:77:e4:f5:79:34:32:bf:8f: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3A:DE:95:4E:AB:E2:36:35:8A:DD:D2:43:0F:27:73:5E:E5:4E:70 X509v3 Authority Key Identifier: keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:33:75:d9:37:c1:b3:20:cd:66:7e:95:84:01:1b:11:a3:bc: c7:cb:94:67:23:58:e3:d8:c0:36:1e:8f:1c:a5:ee:79:9f:9c: 82:77:24:cc:4f:86:14:ac:d9:87:fc:1b:20:8f:b8:e0:f9:61: 0b:50:53:6a:99:af:96:1c:24:c3:aa:ac:28:9c:fa:51:64:70: 0a:c0:2b:0f:5e:f1:d1:07:90:91:b3:24:af:72:e3:a9:19:4a: 5a:48:48:4f:2b:21:97:0f:fb:26:d3:d3:91:79:0b:53:ac:78: 68:bd:ee:5a:92:15:45:0d:3d:b2:53:e4:b3:e4:d7:d3:25:a9: d3:b0:44:5a:6a:eb:36:e8:84:01:37:65:c0:df:0b:55:d3:b4: 52:78:74:51:2e:bb:51:34:fd:9d:bd:9a:b9:ca:85:3c:b2:c9: 18:0d:03:a9:48:64:2d:c7:6a:e0:d6:05:9e:64:f7:b3:e1:e4: 03:7f:93:67:1e:51:bd:02:55:b0:9c:77:3f:7a:f9:5f:55:d2: ea:d4:33:50:c0:b6:4c:9f:6a:ed:62:1b:28:49:1b:73:71:b5: 37:02:f0:9d:2a:93:12:98:17:36:a8:d9:4f:5d:a9:ac:48:8b: d1:38:01:bc:9a:51:5d:30:c8:50:20:44:c8:6c:21:2a:69:c6: 89:8e:ee:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXM++HbRId4ekP2nRcSBJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk OGE5ZjUwHhcNMjYwMTE5MTcwMTAzWhcNMjYwMTIwMTcwMTAzWjAzMTEwLwYDVQQD Eyg4ZTNhZGU5NTRlYWJlMjM2MzU4YWRkZDI0MzBmMjc3MzVlZTU0ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D2U7/aC9hCH9BFDXpxcC1IuC/F/ d4wNrn/TvXtMWwcocj376m8XJQ32FdEFYXrM6XCxgursEg8cn14AHHaoCz7TFBck KpShL8r3LRc1GWjA80PgmxtcJUXPWcqEiGFKCYF2PX+VqdJeCaUSZkWsLlolpBOn xB4BE1p20i45AJN0X0k5txiD56eIFu+Xd45QAoDLP0FqxYfPOQlHXrpjtJ1HzpFu pg9pk6Wo4KW4oJt5nDf1XOMgYxOlbND5mpnhyPhKIrngBLSnsPGyR8FwRuDbQtJX Bwoq70wrbZsCUMmk4uAufSuI9ShznKVkD9zhMZmopLZed+T1eTQyv4/DiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI463pVOq+I2NYrd0kMPJ3Ne5U5wMB8GA1UdIwQY MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt N2E3OTRkNWNlZDNkLzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDN12TfB syDNZn6VhAEbEaO8x8uUZyNY49jANh6PHKXueZ+cgnckzE+GFKzZh/wbII+44Plh C1BTapmvlhwkw6qsKJz6UWRwCsArD17x0QeQkbMkr3LjqRlKWkhITyshlw/7JtPT kXkLU6x4aL3uWpIVRQ09slPks+TX0yWp07BEWmrrNuiEATdlwN8LVdO0Unh0US67 UTT9nb2aucqFPLLJGA0DqUhkLcdq4NYFnmT3s+HkA3+TZx5RvQJVsJx3P3r5X1XS 6tQzUMC2TJ9q7WIbKEkbc3G1NwLwnSqTEpgXNqjZT12prEiL0TgBvJpRXTDIUCBE yGwhKmnGiY7uRw== -----END CERTIFICATE-----Generated at Tue Jan 20 03:01:51 2026 by rpki-client