This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json) Hash identifier: a863rsg6/87FudRp5gPDs9ByEIWyL5oiF4+kOzGmtkw= Subject key identifier: 13:92:46:8E:B8:3B:4B:B5:6C:DA:FE:73:E2:CA:62:34:EC:73:C5:B2 Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Certificate serial: 019BF9C11352BFC6280646691E67B34EFB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft Manifest number: 0DC3 Signing time: Mon 26 Jan 2026 10:02:18 +0000 Manifest this update: Mon 26 Jan 2026 10:02:18 +0000 Manifest next update: Tue 27 Jan 2026 10:02:18 +0000 Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: G5ntdcCWpA5V2oKXVeguPtv+rd52pCTKPbrODE23wAs=) 2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c1:13:52:bf:c6:28:06:46:69:1e:67:b3:4e:fb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Validity Not Before: Jan 26 10:02:18 2026 GMT Not After : Jan 27 10:02:18 2026 GMT Subject: CN=1392468eb83b4bb56cdafe73e2ca6234ec73c5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:01:bb:49:46:07:d9:a9:b7:b1:6e:38:c6: 8c:c1:0a:32:1f:38:c7:c8:87:f2:30:8c:c0:69:90: 25:5d:ce:26:e1:33:f2:90:44:7f:49:08:52:44:f0: 14:34:bd:b5:ab:1f:b5:69:71:2b:42:01:80:98:11: 8f:2b:ed:93:81:9e:01:18:f8:26:f0:17:15:06:a1: 10:b0:8b:98:65:16:e8:31:48:ea:91:3f:66:6f:7a: 8f:50:16:8c:7b:44:23:0f:4a:5e:9c:da:1d:1e:26: 7c:50:bc:eb:a4:df:c9:80:3b:b0:ff:52:23:5b:45: 53:cc:9c:e5:26:e7:28:22:2d:65:e5:82:fe:16:e3: d7:68:cd:cf:8e:ed:96:22:3d:e9:ca:cb:ef:a3:fc: b9:ea:3f:51:82:98:dd:63:5a:bb:d0:16:28:4f:f3: 77:c4:53:1a:9d:f5:74:fa:1f:17:bb:43:74:8c:81: 0b:17:c4:d4:e7:3f:6a:22:9d:46:7a:6b:f0:c1:31: 2c:43:5f:a0:f1:da:79:4a:03:78:a0:bd:30:1f:41: 03:4b:e3:58:69:eb:79:bd:2e:27:63:50:52:17:f0: 1d:9c:52:61:ab:f0:28:b6:5c:60:d6:ee:3b:f6:ff: dd:41:fe:37:27:66:fd:55:0d:dd:21:5a:b3:94:40: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:92:46:8E:B8:3B:4B:B5:6C:DA:FE:73:E2:CA:62:34:EC:73:C5:B2 X509v3 Authority Key Identifier: keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f6:93:15:af:68:07:fd:d5:d4:82:ea:3e:6f:82:ac:b0:62: f4:68:05:e4:01:7e:a6:2f:21:8e:9f:8d:f4:ed:c7:2f:6a:c7: d6:9c:d6:7c:3d:6e:12:30:e5:53:4b:9c:19:fa:0a:06:c9:4b: c7:af:60:36:8c:13:08:46:01:78:17:01:b8:4e:b7:8d:68:d6: 54:6f:b3:d0:f8:e7:d8:1c:78:d8:74:64:ba:49:5b:fe:cc:97: 99:2f:ad:c7:b0:3a:e8:73:0c:ea:4f:8a:1d:9d:2b:cc:60:67: c9:dc:c6:5c:2b:b5:f4:56:dc:c7:66:d2:c2:81:2e:e8:0e:71: ab:0c:15:78:15:b1:8c:56:55:34:32:ac:da:fa:7d:cc:cf:5b: 50:93:7f:38:51:0c:be:8d:73:1a:7e:e1:be:33:52:64:89:18: fb:1b:c1:0d:8b:d1:3f:1d:f0:e7:9c:44:92:ea:02:fe:e0:c5: 7b:a6:fc:02:db:e8:43:b4:7f:53:7c:eb:6b:22:81:eb:02:f0: 13:75:2a:11:8a:bc:c1:0a:f9:dc:da:f9:42:fb:4c:ec:cb:3f: 75:84:10:90:9a:1c:3d:7a:82:a5:e8:c0:48:d2:64:2f:0f:a0: 15:4e:ea:46:d3:d3:fd:39:6d:1e:24:a4:60:29:ef:e5:1d:88: eb:d0:2e:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wRNSv8YoBkZpHmezTvsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi ODUyMjIwHhcNMjYwMTI2MTAwMjE4WhcNMjYwMTI3MTAwMjE4WjAzMTEwLwYDVQQD EygxMzkyNDY4ZWI4M2I0YmI1NmNkYWZlNzNlMmNhNjIzNGVjNzNjNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljwBu0lGB9mpt7FuOMaMwQoyHzjH yIfyMIzAaZAlXc4m4TPykER/SQhSRPAUNL21qx+1aXErQgGAmBGPK+2TgZ4BGPgm 8BcVBqEQsIuYZRboMUjqkT9mb3qPUBaMe0QjD0penNodHiZ8ULzrpN/JgDuw/1Ij W0VTzJzlJucoIi1l5YL+FuPXaM3Pju2WIj3pysvvo/y56j9RgpjdY1q70BYoT/N3 xFManfV0+h8Xu0N0jIELF8TU5z9qIp1GemvwwTEsQ1+g8dp5SgN4oL0wH0EDS+NY aet5vS4nY1BSF/AdnFJhq/Aotlxg1u479v/dQf43J2b9VQ3dIVqzlEAaZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOSRo64O0u1bNr+c+LKYjTsc8WyMB8GA1UdIwQY MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPaTFa9o B/3V1ILqPm+CrLBi9GgF5AF+pi8hjp+N9O3HL2rH1pzWfD1uEjDlU0ucGfoKBslL x69gNowTCEYBeBcBuE63jWjWVG+z0Pjn2Bx42HRkuklb/syXmS+tx7A66HMM6k+K HZ0rzGBnydzGXCu19Fbcx2bSwoEu6A5xqwwVeBWxjFZVNDKs2vp9zM9bUJN/OFEM vo1zGn7hvjNSZIkY+xvBDYvRPx3w55xEkuoC/uDFe6b8AtvoQ7R/U3zrayKB6wLw E3UqEYq8wQr53Nr5QvtM7Ms/dYQQkJocPXqCpejASNJkLw+gFU7qRtPT/TltHiSk YCnv5R2I69AubQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:20 2026 by rpki-client