This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json) Hash identifier: vnVgqpY6m0M6fpX5hc5oiUJG1arkV+IoW5YUfOBkNJk= Subject key identifier: 66:9B:B8:5F:D5:D4:22:3E:C7:38:AE:05:B3:15:D0:A2:3B:20:D9:CC Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab Certificate serial: 019BFEAFB674F6C5997370449A8FBAB57FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft Manifest number: 0B70 Signing time: Tue 27 Jan 2026 09:01:26 +0000 Manifest this update: Tue 27 Jan 2026 09:01:26 +0000 Manifest next update: Wed 28 Jan 2026 09:01:26 +0000 Files and hashes: 1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=) 2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: g+clVD910wWZHqWhLqhndU2GAK8OwL6uPsi+CkYZZ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:b6:74:f6:c5:99:73:70:44:9a:8f:ba:b5:7f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab Validity Not Before: Jan 27 09:01:26 2026 GMT Not After : Jan 28 09:01:26 2026 GMT Subject: CN=669bb85fd5d4223ec738ae05b315d0a23b20d9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:cf:fa:c1:b6:32:de:2a:8a:79:06:2f:f6: 7a:f4:67:32:d7:e4:54:23:2d:0c:88:79:91:34:74: d0:a9:bc:0f:00:0b:4f:2e:c2:a5:fd:26:6a:cb:bc: 4c:d2:d1:c5:b1:3f:94:c5:95:54:7a:37:0f:fd:b6: 25:18:be:b3:e1:81:76:87:34:37:34:17:66:79:28: 28:cb:f6:43:80:4f:f5:86:d0:23:8b:f8:ff:80:24: 45:29:5e:74:38:ae:cf:d4:6e:af:7a:31:2f:5b:31: ae:77:86:f1:45:73:6f:c1:f0:d2:32:a6:97:46:cd: 0e:d2:a3:b1:b6:2a:ec:14:ac:8e:73:1a:3b:6d:a3: 33:22:70:69:fd:7a:4e:f2:8b:df:87:68:c7:8a:24: b6:34:dc:a4:1c:10:2d:da:3a:e8:82:bb:bb:0c:8a: 60:a9:63:11:2f:76:34:fe:27:f8:55:be:f0:89:43: 78:9f:ef:c9:66:99:28:81:c3:c0:5b:ac:33:ff:bc: d3:1d:16:89:61:cd:5f:7d:69:43:c0:93:fe:63:da: fe:a2:bb:0e:3e:a3:a1:97:49:74:c9:6a:9f:0e:a3: dc:6c:71:9e:23:73:13:8d:14:55:56:7c:66:00:f5: 5d:22:61:89:3e:e5:65:40:e4:a3:31:ee:79:df:c8: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:B8:5F:D5:D4:22:3E:C7:38:AE:05:B3:15:D0:A2:3B:20:D9:CC X509v3 Authority Key Identifier: keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d7:01:9b:d3:f0:fc:12:be:78:07:a6:f5:fb:27:91:21:d0: 1a:c1:a4:c7:fd:02:69:ee:28:f0:48:ec:0c:99:48:4c:a7:c8: d7:e6:ed:fb:a0:80:fd:ed:75:6f:7a:b0:30:03:8c:dd:a0:fd: 4d:9c:f2:1d:d8:f4:65:55:fa:d0:83:4f:c7:d5:89:b5:5c:7c: 74:93:e6:2b:67:d5:85:03:9b:ec:1b:fc:ec:f7:54:aa:39:13: a9:c6:64:5b:f7:bf:e0:3c:2b:7e:65:a3:46:37:eb:74:8f:a3: 6b:ee:b6:a0:20:15:ed:55:8a:0c:cc:8d:30:b4:a5:71:0e:a1: f2:af:52:a2:16:5b:e3:7b:d1:ec:a3:34:41:c6:13:5c:df:09: 16:00:5b:d4:d5:38:d7:f2:b3:27:99:5b:9f:e0:51:f1:a6:8d: 59:a9:41:31:83:93:3a:f5:26:24:42:b2:03:12:c5:4c:00:99: 7a:00:c4:f7:d1:4d:73:ff:b5:73:c8:70:0c:05:69:da:3c:cb: 8c:bb:d8:c7:bc:5f:a9:f5:9d:54:a0:32:91:55:ca:bb:5d:16: ed:d8:6b:5f:68:ac:fa:29:e7:04:05:77:24:75:7e:f0:5f:b8: fe:b5:87:29:11:da:23:a2:e0:28:86:6f:8e:fd:2a:3b:dc:85: 7b:e0:d3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r7Z09sWZc3BEmo+6tX+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy YWIwYWIwHhcNMjYwMTI3MDkwMTI2WhcNMjYwMTI4MDkwMTI2WjAzMTEwLwYDVQQD Eyg2NjliYjg1ZmQ1ZDQyMjNlYzczOGFlMDViMzE1ZDBhMjNiMjBkOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nvP+sG2Mt4qinkGL/Z69Gcy1+RU Iy0MiHmRNHTQqbwPAAtPLsKl/SZqy7xM0tHFsT+UxZVUejcP/bYlGL6z4YF2hzQ3 NBdmeSgoy/ZDgE/1htAji/j/gCRFKV50OK7P1G6vejEvWzGud4bxRXNvwfDSMqaX Rs0O0qOxtirsFKyOcxo7baMzInBp/XpO8ovfh2jHiiS2NNykHBAt2jrogru7DIpg qWMRL3Y0/if4Vb7wiUN4n+/JZpkogcPAW6wz/7zTHRaJYc1ffWlDwJP+Y9r+orsO PqOhl0l0yWqfDqPcbHGeI3MTjRRVVnxmAPVdImGJPuVlQOSjMe5538g8LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGabuF/V1CI+xziuBbMV0KI7INnMMB8GA1UdIwQY MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNcBm9Pw /BK+eAem9fsnkSHQGsGkx/0Cae4o8EjsDJlITKfI1+bt+6CA/e11b3qwMAOM3aD9 TZzyHdj0ZVX60INPx9WJtVx8dJPmK2fVhQOb7Bv87PdUqjkTqcZkW/e/4DwrfmWj RjfrdI+ja+62oCAV7VWKDMyNMLSlcQ6h8q9SohZb43vR7KM0QcYTXN8JFgBb1NU4 1/KzJ5lbn+BR8aaNWalBMYOTOvUmJEKyAxLFTACZegDE99FNc/+1c8hwDAVp2jzL jLvYx7xfqfWdVKAykVXKu10W7dhrX2is+innBAV3JHV+8F+4/rWHKRHaI6LgKIZv jv0qO9yFe+DT8w== -----END CERTIFICATE-----Generated at Tue Jan 27 11:16:12 2026 by rpki-client