This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json) Hash identifier: Bk61wYtp0skZJuoqGRRpfI2+nVJtHbmML+fV87wi7HI= Subject key identifier: 53:81:86:B1:1D:47:EE:AB:02:42:AC:69:83:28:62:8A:41:7C:5A:1F Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf Certificate serial: 019BFB4035A47E3422FA6D81A57B739F5DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft Manifest number: 1412 Signing time: Mon 26 Jan 2026 17:00:47 +0000 Manifest this update: Mon 26 Jan 2026 17:00:47 +0000 Manifest next update: Tue 27 Jan 2026 17:00:47 +0000 Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=) 2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: RLNCi0NMdcE7XjyBfjNHQyTzMZfV5ke4XnKlmUpDsmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:35:a4:7e:34:22:fa:6d:81:a5:7b:73:9f:5d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf Validity Not Before: Jan 26 17:00:47 2026 GMT Not After : Jan 27 17:00:47 2026 GMT Subject: CN=538186b11d47eeab0242ac698328628a417c5a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:1c:a9:8d:9a:99:1f:20:ec:e6:3f:05:d7: 78:9f:a5:02:d6:59:57:85:b4:09:b3:d3:e1:5d:09: 1d:2c:d0:f0:d8:d2:0a:fd:4c:49:96:91:df:93:58: e0:ff:d6:4a:b7:0f:41:e7:65:b1:e1:0a:86:f4:17: 01:d0:1e:8d:25:d7:a8:c1:1e:dd:7e:8d:d2:56:2d: 71:0f:30:95:46:fd:9a:42:fb:87:41:e8:ba:25:bb: 70:a1:0f:13:b5:39:59:db:6e:40:19:28:ec:7b:d7: 93:6d:a3:08:bd:34:31:ac:f9:1e:7d:35:d4:2d:d0: d0:d1:1d:ac:03:e1:b0:a3:37:dd:59:b0:77:fd:ff: b0:ed:09:61:97:f2:a4:f4:e7:13:df:1a:90:dc:cb: f3:4e:5f:4c:63:69:b2:92:82:f5:36:cb:79:cb:ca: 7a:f8:82:59:5c:cf:73:fe:66:2e:50:86:18:a2:d5: 29:c5:c9:2a:23:10:97:db:46:ad:f9:85:8c:18:6f: d9:9d:3a:fa:fd:f2:ee:ce:36:f3:95:6c:a4:4d:82: df:0d:26:16:3d:98:15:84:db:51:9b:95:7e:e0:06: 9b:f5:4a:7e:8b:cf:18:2b:fd:43:3a:4e:f3:a2:6b: 84:d8:25:32:65:94:7e:1b:01:1c:02:e9:dc:7f:bd: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:86:B1:1D:47:EE:AB:02:42:AC:69:83:28:62:8A:41:7C:5A:1F X509v3 Authority Key Identifier: keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:1e:6e:cc:9d:f1:6d:1c:e8:63:7c:79:16:0e:ec:97:d2: 91:ea:e6:e4:24:13:ec:5a:e9:45:47:78:df:0a:01:e9:c4:93: 84:ef:9a:e7:35:68:45:31:17:fe:26:2f:36:b5:a6:01:92:fb: 80:e3:6d:4b:b0:09:62:a2:20:eb:0a:d1:42:ee:4a:bd:d3:78: 08:27:b4:5f:bb:b0:64:5d:8c:1d:27:78:77:2b:d4:d8:59:71: 5a:0d:6c:25:39:2a:82:b3:19:df:65:41:14:a8:22:a6:3f:cb: 07:72:5f:a9:7a:ba:f5:04:95:d9:33:f0:8b:13:62:1b:28:9c: 0d:87:cd:25:b1:e9:63:8c:9b:01:c8:b2:20:8b:b8:f8:9e:bd: 62:4c:3d:7a:ae:50:f1:35:4d:1c:41:4a:df:df:4b:b7:93:64: 03:40:d2:03:27:c1:a3:06:38:c8:7c:61:17:90:ba:be:63:c4: fc:16:12:90:9e:25:a7:fc:1e:8b:a5:c9:62:69:70:d4:13:5c: a0:94:36:07:84:11:12:9b:9b:3e:91:1a:56:45:34:6e:5e:2b: 05:6d:1e:5a:4f:4c:72:8e:bc:c0:e2:10:52:3a:6d:c9:f2:37: 73:40:8f:2c:33:48:5f:29:d8:a2:51:6b:b2:75:4a:2d:f8:43: 17:f8:16:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QDWkfjQi+m2BpXtzn12nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDBiNjU0NzU0ODgwMmVhNTk4MTQ2NzI1NDdiY2M4MzZk NzBmY2YwHhcNMjYwMTI2MTcwMDQ3WhcNMjYwMTI3MTcwMDQ3WjAzMTEwLwYDVQQD Eyg1MzgxODZiMTFkNDdlZWFiMDI0MmFjNjk4MzI4NjI4YTQxN2M1YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIEcqY2amR8g7OY/Bdd4n6UC1llX hbQJs9PhXQkdLNDw2NIK/UxJlpHfk1jg/9ZKtw9B52Wx4QqG9BcB0B6NJdeowR7d fo3SVi1xDzCVRv2aQvuHQei6JbtwoQ8TtTlZ225AGSjse9eTbaMIvTQxrPkefTXU LdDQ0R2sA+GwozfdWbB3/f+w7Qlhl/Kk9OcT3xqQ3MvzTl9MY2mykoL1Nst5y8p6 +IJZXM9z/mYuUIYYotUpxckqIxCX20at+YWMGG/ZnTr6/fLuzjbzlWykTYLfDSYW PZgVhNtRm5V+4Aab9Up+i88YK/1DOk7zomuE2CUyZZR+GwEcAuncf73bwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOBhrEdR+6rAkKsaYMoYopBfFofMB8GA1UdIwQY MBaAFIzQtlR1SIAupZgUZyVHvMg21w/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2It MGFlNjk2YmQzNjhhLzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2ItMGFlNjk2YmQzNjhh LzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOMebsyd 8W0c6GN8eRYO7JfSkerm5CQT7FrpRUd43woB6cSThO+a5zVoRTEX/iYvNrWmAZL7 gONtS7AJYqIg6wrRQu5KvdN4CCe0X7uwZF2MHSd4dyvU2FlxWg1sJTkqgrMZ32VB FKgipj/LB3JfqXq69QSV2TPwixNiGyicDYfNJbHpY4ybAciyIIu4+J69Ykw9eq5Q 8TVNHEFK399Lt5NkA0DSAyfBowY4yHxhF5C6vmPE/BYSkJ4lp/wei6XJYmlw1BNc oJQ2B4QREpubPpEaVkU0bl4rBW0eWk9Mco68wOIQUjptyfI3c0CPLDNIXynYolFr snVKLfhDF/gWXg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:39 2026 by rpki-client