This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json) Hash identifier: W3j17qEOM/L9ERTZ4dQTJfNk7WEAqAU5WQVGtxNoTPc= Subject key identifier: 1C:E3:21:33:B6:F5:48:F1:F4:95:43:B1:64:BC:3F:02:6D:D9:0F:1B Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Certificate serial: 019BFDD3A95510D41BE7203F34E82C1B8D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft Manifest number: 0AAD Signing time: Tue 27 Jan 2026 05:01:05 +0000 Manifest this update: Tue 27 Jan 2026 05:01:05 +0000 Manifest next update: Wed 28 Jan 2026 05:01:05 +0000 Files and hashes: 1: hd5bwKcEpm08QIWCcytv3QQlZzY.roa (hash: ISacRaLyRAgjnsAWpFUYnRjcBj6/iOfbYqamKB5VXnE=) 2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: sBPgAtDEXZFsD4R6u5iI8nzRR/WSj7JrlPuzvKqvZeU=) 3: nDnHPolJ7TSeZpO4aoqRkF-x4cs.roa (hash: KixiJnL2sI827lC65q66jtsbAXktFeWSXKlsl1bKQkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:a9:55:10:d4:1b:e7:20:3f:34:e8:2c:1b:8d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Validity Not Before: Jan 27 05:01:05 2026 GMT Not After : Jan 28 05:01:05 2026 GMT Subject: CN=1ce32133b6f548f1f49543b164bc3f026dd90f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:5d:d1:68:95:3d:81:c8:bf:6e:a7:e1:f8: 12:b8:a2:69:65:aa:cc:99:f6:03:c0:9f:09:fb:84: 5f:06:f0:c9:2f:f1:09:54:5d:05:67:ea:6c:5e:cd: 3f:de:e0:aa:df:d4:b5:4d:2c:de:96:5f:75:2c:1f: f4:7f:ee:b4:f6:54:ff:d4:b3:e3:60:82:f1:4d:3b: b3:99:bf:f7:57:85:44:5c:54:aa:7c:f2:47:fb:2c: ee:89:bf:69:35:8c:08:5c:1c:03:ec:70:b0:a5:63: 12:62:9a:ff:36:ba:fc:36:72:44:b1:e9:74:bf:72: cb:c1:58:5a:b7:70:b2:a8:8f:fa:47:a1:1c:8d:11: 1d:c1:8b:35:a2:f0:b8:6b:99:b2:95:77:19:6c:a1: 2c:10:4d:46:09:44:9c:30:58:45:9b:49:38:5f:4e: cf:1f:44:60:d1:7e:be:7f:e6:4f:1e:a1:b7:c9:24: b8:c5:ca:45:8e:41:0f:4c:7c:31:3d:8c:dd:24:d4: c7:cf:53:39:c5:79:b4:9c:8f:b4:77:d0:88:1d:1d: c8:ac:63:92:91:9c:33:d5:a0:67:5f:42:b2:c5:e9: 6c:65:ec:fa:a2:2c:16:93:3a:2d:72:50:59:fb:4d: 57:c6:42:2e:ba:07:29:01:45:d9:f9:bd:25:78:41: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E3:21:33:B6:F5:48:F1:F4:95:43:B1:64:BC:3F:02:6D:D9:0F:1B X509v3 Authority Key Identifier: keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8f:24:16:3c:3d:19:0d:75:b0:c8:d6:34:3a:d0:ab:ca:69: 81:69:9c:cd:7f:ad:1e:bb:70:43:06:70:d1:0a:ac:cb:23:28: 7e:56:a3:ca:b6:50:7e:4e:17:eb:a4:51:ab:70:28:08:1e:90: d2:19:80:ca:94:c8:83:b4:ed:fc:60:bb:bc:92:fe:6d:bb:09: 16:0a:17:6e:5c:dc:d4:96:84:59:b0:80:d8:be:75:e6:21:c6: 2b:10:f3:81:4c:5f:b7:1b:c4:e5:c3:84:4c:2b:2a:36:b4:8d: 65:55:20:fc:ae:72:1d:74:c6:bd:d6:a2:de:6a:75:0d:c1:0f: b4:a7:95:4e:ba:64:40:b7:49:46:bb:82:b1:36:3b:16:ea:06: 94:8e:59:09:1e:45:bc:44:38:b0:ca:4e:13:15:bc:1e:b6:04: a4:a9:a3:4c:e6:2d:5d:5a:a9:e1:1c:53:1d:08:98:9f:71:43: f9:b6:78:c0:30:0b:c8:b5:80:4b:fe:e7:57:11:f9:98:70:e9: 80:a2:a4:20:a4:3c:06:05:f7:64:58:28:b5:9b:28:d2:13:6b: 7a:77:4f:f1:e2:1e:4c:36:e7:87:c9:96:5b:64:c7:ce:d9:16: ba:1c:34:bc:42:cf:99:32:9f:ed:2e:4a:dd:f8:ee:87:cf:45: 35:05:6d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv906lVENQb5yA/NOgsG40bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2 NzQ5NDQwHhcNMjYwMTI3MDUwMTA1WhcNMjYwMTI4MDUwMTA1WjAzMTEwLwYDVQQD EygxY2UzMjEzM2I2ZjU0OGYxZjQ5NTQzYjE2NGJjM2YwMjZkZDkwZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k9d0WiVPYHIv26n4fgSuKJpZarM mfYDwJ8J+4RfBvDJL/EJVF0FZ+psXs0/3uCq39S1TSzell91LB/0f+609lT/1LPj YILxTTuzmb/3V4VEXFSqfPJH+yzuib9pNYwIXBwD7HCwpWMSYpr/Nrr8NnJEsel0 v3LLwVhat3CyqI/6R6EcjREdwYs1ovC4a5mylXcZbKEsEE1GCUScMFhFm0k4X07P H0Rg0X6+f+ZPHqG3ySS4xcpFjkEPTHwxPYzdJNTHz1M5xXm0nI+0d9CIHR3IrGOS kZwz1aBnX0KyxelsZez6oiwWkzotclBZ+01XxkIuugcpAUXZ+b0leEHNRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzjITO29Ujx9JVDsWS8PwJt2Q8bMB8GA1UdIwQY MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY8kFjw9 GQ11sMjWNDrQq8ppgWmczX+tHrtwQwZw0QqsyyMoflajyrZQfk4X66RRq3AoCB6Q 0hmAypTIg7Tt/GC7vJL+bbsJFgoXblzc1JaEWbCA2L515iHGKxDzgUxftxvE5cOE TCsqNrSNZVUg/K5yHXTGvdai3mp1DcEPtKeVTrpkQLdJRruCsTY7FuoGlI5ZCR5F vEQ4sMpOExW8HrYEpKmjTOYtXVqp4RxTHQiYn3FD+bZ4wDALyLWAS/7nVxH5mHDp gKKkIKQ8BgX3ZFgotZso0hNrendP8eIeTDbnh8mWW2THztkWuhw0vELPmTKf7S5K 3fjuh89FNQVt/g== -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:40 2026 by rpki-client