This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json) Hash identifier: thfQb3fInhnHuoxfy560kzPggqmZpErr9ReOExu8sQ4= Subject key identifier: 39:07:6B:1D:ED:BE:3A:23:08:6A:81:20:1F:EB:EF:57:13:74:ED:F4 Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0 Certificate serial: 019BFB0937B9256978F5831FF286B4788DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft Manifest number: 1836 Signing time: Mon 26 Jan 2026 16:00:43 +0000 Manifest this update: Mon 26 Jan 2026 16:00:43 +0000 Manifest next update: Tue 27 Jan 2026 16:00:43 +0000 Files and hashes: 1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=) 2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=) 3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=) 4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=) 5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: P97818PRLW+Kgs5FiLRZuZz2LT8JPQ7vpHhyriPjmCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:37:b9:25:69:78:f5:83:1f:f2:86:b4:78:8d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0 Validity Not Before: Jan 26 16:00:43 2026 GMT Not After : Jan 27 16:00:43 2026 GMT Subject: CN=39076b1dedbe3a23086a81201febef571374edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:e6:8b:2a:b9:6d:75:18:86:23:bb:7d:06: 46:49:70:d6:6e:73:6f:0d:97:88:42:a6:e5:aa:72: 6f:fd:f4:a9:4f:11:a8:3c:79:da:dd:b6:4d:11:ff: 68:fb:52:9d:e5:c5:41:75:3f:19:bf:d6:37:d3:35: 47:3d:85:3f:fc:18:7f:f1:e5:1e:2a:6f:44:33:ed: 70:0d:84:bc:9d:7f:32:e6:06:e7:a7:9a:20:a4:34: 19:ec:8b:d3:be:06:00:28:6c:c5:66:4b:51:18:80: 01:2f:f7:2b:63:20:a4:d1:53:d4:07:36:ac:9f:75: 1c:a4:c3:82:e1:51:70:ff:3d:81:da:a4:54:3f:88: 4d:88:e8:12:53:6a:e8:87:f3:a7:d6:b4:15:a1:0e: 63:35:a2:b4:a0:79:4d:b0:25:f7:5f:cf:7c:e7:ff: 9b:89:75:b8:af:83:5d:39:3b:5a:37:04:72:63:12: 46:0c:b8:a2:82:a1:d8:cf:3b:9c:69:d7:51:31:0d: 53:ba:f3:d5:f1:0e:58:4d:c8:7b:9f:82:72:38:22: 28:38:06:37:ac:df:da:17:51:2c:49:37:0b:6b:f1: 89:eb:6b:82:2a:81:92:20:65:9a:9e:a6:58:35:53: d6:8d:76:cd:c1:02:93:44:09:b6:67:7b:89:f6:93: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:07:6B:1D:ED:BE:3A:23:08:6A:81:20:1F:EB:EF:57:13:74:ED:F4 X509v3 Authority Key Identifier: keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:de:cd:37:a3:8d:36:48:7e:25:be:eb:e4:15:d1:0a:b2:31: 5b:b3:c4:d0:f8:2d:53:95:81:c0:84:63:01:43:90:ed:c4:c5: 4e:0b:01:29:e2:67:ef:f1:b0:15:2e:b5:9e:90:83:86:0f:d2: 0b:d0:2a:78:65:5f:0c:ba:c0:c8:bb:8d:bc:07:61:87:97:5b: 4f:1b:ac:40:e6:02:f4:ef:8c:52:72:ba:ad:02:e7:28:8b:da: 0b:35:5c:ba:2a:6a:df:2e:e9:c1:ff:f1:a0:28:9a:a7:e8:d5: f8:6b:1e:66:7d:ba:5f:ba:01:9a:cd:40:19:b9:db:70:84:17: 6f:7f:30:f8:2a:ad:6f:d1:91:1c:69:5e:db:ff:56:54:6f:cd: b6:92:e6:0b:79:b6:c3:a5:a3:35:ad:32:b4:b9:4f:5f:a5:df: e9:5a:8f:d7:3a:57:77:99:53:40:02:40:28:84:2c:28:65:a0: 1f:26:8b:5f:aa:fc:01:a4:2e:6e:1b:0f:e9:3e:27:30:ec:67: 7a:fb:bc:0d:9f:d6:bb:91:55:6d:3b:e8:f9:c4:db:60:97:5d: 2b:03:f2:3f:e3:aa:56:39:f0:52:0c:22:8d:50:23:70:62:66: 6a:fe:38:7e:b1:58:61:7f:b1:d1:db:61:47:7e:bb:1c:e9:08: 27:e1:f5:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CTe5JWl49YMf8oa0eI2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx NzgzZDAwHhcNMjYwMTI2MTYwMDQzWhcNMjYwMTI3MTYwMDQzWjAzMTEwLwYDVQQD EygzOTA3NmIxZGVkYmUzYTIzMDg2YTgxMjAxZmViZWY1NzEzNzRlZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Hmiyq5bXUYhiO7fQZGSXDWbnNv DZeIQqblqnJv/fSpTxGoPHna3bZNEf9o+1Kd5cVBdT8Zv9Y30zVHPYU//Bh/8eUe Km9EM+1wDYS8nX8y5gbnp5ogpDQZ7IvTvgYAKGzFZktRGIABL/crYyCk0VPUBzas n3UcpMOC4VFw/z2B2qRUP4hNiOgSU2roh/On1rQVoQ5jNaK0oHlNsCX3X8985/+b iXW4r4NdOTtaNwRyYxJGDLiigqHYzzucaddRMQ1TuvPV8Q5YTch7n4JyOCIoOAY3 rN/aF1EsSTcLa/GJ62uCKoGSIGWanqZYNVPWjXbNwQKTRAm2Z3uJ9pMS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkHax3tvjojCGqBIB/r71cTdO30MB8GA1UdIwQY MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt NjI2NTUyMWY2ZGY3LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3 LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt7NN6ON Nkh+Jb7r5BXRCrIxW7PE0PgtU5WBwIRjAUOQ7cTFTgsBKeJn7/GwFS61npCDhg/S C9AqeGVfDLrAyLuNvAdhh5dbTxusQOYC9O+MUnK6rQLnKIvaCzVcuipq3y7pwf/x oCiap+jV+GseZn26X7oBms1AGbnbcIQXb38w+Cqtb9GRHGle2/9WVG/NtpLmC3m2 w6WjNa0ytLlPX6Xf6VqP1zpXd5lTQAJAKIQsKGWgHyaLX6r8AaQubhsP6T4nMOxn evu8DZ/Wu5FVbTvo+cTbYJddKwPyP+OqVjnwUgwijVAjcGJmav44frFYYX+x0dth R367HOkIJ+H1aQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:48 2026 by rpki-client