This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json) Hash identifier: AB5GDj0zY5HWzS+VOx8nYi7JTNdnl4hGen4NZlpNRtQ= Subject key identifier: 87:8D:79:84:BB:55:6E:18:37:D7:20:7C:78:0C:AA:5B:50:05:D4:24 Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Certificate serial: 019BFD9C875A8A991CED235B62F9CB531748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft Manifest number: 17C0 Signing time: Tue 27 Jan 2026 04:00:52 +0000 Manifest this update: Tue 27 Jan 2026 04:00:52 +0000 Manifest next update: Wed 28 Jan 2026 04:00:52 +0000 Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=) 2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: FXu1jTNKGS7zR9Aqm7MeXluwGFVvAKQsMaosVNlZnZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:87:5a:8a:99:1c:ed:23:5b:62:f9:cb:53:17:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Validity Not Before: Jan 27 04:00:52 2026 GMT Not After : Jan 28 04:00:52 2026 GMT Subject: CN=878d7984bb556e1837d7207c780caa5b5005d424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:de:31:48:31:33:35:ae:35:10:59:da:02: c7:8d:a1:3b:47:1c:0e:bb:bf:cc:36:cb:a3:8a:06: 98:d9:ba:03:be:00:e9:25:af:ce:a6:fa:73:77:3f: 24:3a:80:cc:f6:a8:ea:ac:46:c7:86:bd:bd:cb:92: e0:c2:e6:e6:1b:89:c7:72:f8:0a:f8:2d:3d:87:55: ed:97:2f:0b:42:0f:cd:f9:12:79:73:2f:98:7c:44: 5e:c2:8c:a5:1b:7b:03:6d:89:50:b9:25:1b:8a:45: 43:0e:a9:ec:c0:c6:8f:f0:1e:17:be:f7:ed:06:ea: 23:df:cf:da:4a:2e:d9:4a:67:56:cc:db:57:c0:37: bf:4c:7d:29:ed:e9:a2:93:64:ab:78:35:32:f1:a0: ce:d0:7f:64:5e:2d:90:44:50:df:0a:c4:e3:20:28: 44:ea:34:4c:cf:d8:22:22:48:9e:dc:d9:17:9c:46: b5:a1:03:0b:3e:0a:61:5e:72:95:98:ce:28:01:0f: 8d:95:12:23:dc:32:c2:fb:42:5e:22:0d:66:5a:39: d3:8c:d4:26:06:10:f5:87:e6:2d:b4:fd:33:59:78: 77:97:6e:24:72:13:e6:33:59:eb:ca:27:2e:bf:d2: dc:ea:7b:69:cc:48:fe:88:81:01:a6:cb:e6:49:88: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8D:79:84:BB:55:6E:18:37:D7:20:7C:78:0C:AA:5B:50:05:D4:24 X509v3 Authority Key Identifier: keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5c:c0:b5:0d:37:68:c1:4e:bc:92:90:d2:46:8e:24:d1:17: 31:e8:a7:8e:66:99:3d:b0:91:5d:bc:22:f4:31:9b:66:3a:34: 0f:f8:08:08:2b:30:40:77:03:cd:9e:60:aa:10:0d:c2:36:e4: 45:ea:a1:54:1e:d9:2a:db:98:8e:aa:0b:8e:d9:ae:30:dd:29: 78:60:bb:39:0e:df:3c:6a:1b:ee:2a:c0:dd:c0:2d:4e:2e:5f: 55:39:c5:88:f3:9f:93:09:42:cb:9b:cd:0f:78:98:10:47:81: 18:27:b5:76:3e:d1:41:aa:b3:fd:97:0d:37:2f:7f:01:ce:6e: 3e:dc:66:29:20:16:d6:36:64:15:e4:57:6e:74:aa:25:ca:cd: 92:c5:87:0a:f1:bd:8d:20:86:ec:78:71:23:4c:7c:7a:fe:04: 2c:ff:3f:06:13:cb:e2:18:be:ac:4b:67:27:d4:f5:10:d1:bd: 92:c4:17:2c:36:48:db:fd:fb:37:d6:e3:c2:c7:8f:0f:2b:d5: 20:3c:b5:79:fd:33:e6:cb:11:66:d2:09:04:68:92:a4:ee:b9: 2d:d1:aa:52:3e:75:77:bf:90:a9:a9:d8:87:fc:e7:8d:5c:c1: 93:d6:8c:2a:b0:72:0b:b8:52:56:60:6a:bb:d0:30:3c:55:d1: 53:2e:61:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nIdaipkc7SNbYvnLUxdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk ODYxNjkwHhcNMjYwMTI3MDQwMDUyWhcNMjYwMTI4MDQwMDUyWjAzMTEwLwYDVQQD Eyg4NzhkNzk4NGJiNTU2ZTE4MzdkNzIwN2M3ODBjYWE1YjUwMDVkNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNTeMUgxMzWuNRBZ2gLHjaE7RxwO u7/MNsujigaY2boDvgDpJa/Opvpzdz8kOoDM9qjqrEbHhr29y5LgwubmG4nHcvgK +C09h1Xtly8LQg/N+RJ5cy+YfERewoylG3sDbYlQuSUbikVDDqnswMaP8B4Xvvft Buoj38/aSi7ZSmdWzNtXwDe/TH0p7emik2SreDUy8aDO0H9kXi2QRFDfCsTjIChE 6jRMz9giIkie3NkXnEa1oQMLPgphXnKVmM4oAQ+NlRIj3DLC+0JeIg1mWjnTjNQm BhD1h+YttP0zWXh3l24kchPmM1nryicuv9Lc6ntpzEj+iIEBpsvmSYgaIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeNeYS7VW4YN9cgfHgMqltQBdQkMB8GA1UdIwQY MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFzAtQ03 aMFOvJKQ0kaOJNEXMeinjmaZPbCRXbwi9DGbZjo0D/gICCswQHcDzZ5gqhANwjbk ReqhVB7ZKtuYjqoLjtmuMN0peGC7OQ7fPGob7irA3cAtTi5fVTnFiPOfkwlCy5vN D3iYEEeBGCe1dj7RQaqz/ZcNNy9/Ac5uPtxmKSAW1jZkFeRXbnSqJcrNksWHCvG9 jSCG7HhxI0x8ev4ELP8/BhPL4hi+rEtnJ9T1ENG9ksQXLDZI2/37N9bjwsePDyvV IDy1ef0z5ssRZtIJBGiSpO65LdGqUj51d7+QqanYh/znjVzBk9aMKrByC7hSVmBq u9AwPFXRUy5hAg== -----END CERTIFICATE-----Generated at Tue Jan 27 13:38:53 2026 by rpki-client