This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json) Hash identifier: WmV+gWkLGWj53k2hnUEMoVwBXmQrO98PbexaK1ma0j0= Subject key identifier: C1:36:82:65:74:6D:5D:9C:18:13:60:EB:8E:FB:B5:6F:4A:D9:30:2F Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Certificate serial: 019BF9521D402FD95E630B867DF6B224E5A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft Manifest number: 06B9 Signing time: Mon 26 Jan 2026 08:01:06 +0000 Manifest this update: Mon 26 Jan 2026 08:01:06 +0000 Manifest next update: Tue 27 Jan 2026 08:01:06 +0000 Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=) 2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: 9n2mIsV0HYR0FD/in0soIENlCN648eAienoJsTFlw9k=) 3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:1d:40:2f:d9:5e:63:0b:86:7d:f6:b2:24:e5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Validity Not Before: Jan 26 08:01:06 2026 GMT Not After : Jan 27 08:01:06 2026 GMT Subject: CN=c1368265746d5d9c181360eb8efbb56f4ad9302f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:a7:d4:8f:09:fd:09:b3:f3:a5:25:23:7a: fd:2f:a4:6d:ca:14:8a:eb:2c:ec:eb:18:4b:bb:1c: ce:47:42:d0:32:ef:c9:6f:1f:f9:86:71:9d:2d:ab: 4f:7a:b8:cb:f7:c1:2b:0e:de:62:6c:55:eb:91:1e: d4:cf:ef:74:be:4a:79:d0:e8:8a:8e:ac:92:53:81: 4b:5b:02:eb:7e:b7:fe:4d:d9:1e:c9:c4:3e:fe:53: 44:2a:6e:00:55:61:f6:8e:92:f1:fc:4b:0d:8a:db: 3d:3a:53:7f:35:df:f8:67:42:82:65:e8:29:51:d2: be:3a:80:59:8f:22:71:65:7a:18:b0:a6:56:79:bb: 5e:06:d8:4c:15:e7:82:e2:3d:ef:bb:a7:d7:9b:ab: 47:03:ba:84:00:d3:63:40:bd:31:c1:22:18:ce:98: e1:36:a5:58:32:ef:e2:10:ad:8c:36:57:7d:48:db: 50:61:92:ff:ab:2a:64:d8:72:e5:dd:1a:04:2e:75: 3a:92:23:14:a7:46:a4:0c:49:95:33:e7:e5:09:42: 04:90:9b:33:a4:3d:24:31:0a:e5:08:22:7b:64:ac: 39:39:fb:60:c7:98:f8:6a:cc:6d:77:75:e7:6c:45: e4:61:a4:a3:69:71:95:a0:ba:fa:72:98:99:db:b6: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:82:65:74:6D:5D:9C:18:13:60:EB:8E:FB:B5:6F:4A:D9:30:2F X509v3 Authority Key Identifier: keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:af:14:ec:c0:66:9b:5b:e9:82:1e:25:e3:5a:57:3d:96:e1: e5:16:cf:e1:76:8c:6f:36:b9:d9:6e:30:c0:0d:d9:96:d4:3b: 6c:97:01:97:5b:20:ed:2d:5d:67:30:56:87:21:c6:7d:c6:05: 05:bc:80:f5:70:27:9c:74:d7:92:0c:82:25:f1:8b:13:53:c5: 20:b8:13:eb:55:9d:ae:01:5e:c4:cc:25:60:69:c6:05:93:e1: c6:42:10:8b:3a:c2:45:c1:a8:ee:ce:31:2a:d8:7e:03:85:65: 1b:d2:ef:24:55:35:1c:4f:ae:e0:43:7f:3c:40:9c:9b:2d:2e: f7:81:f7:67:b1:05:01:00:08:43:17:61:11:6a:e0:17:3b:ff: 8f:a5:2f:22:85:a4:99:6c:13:f1:90:40:e9:af:f2:c9:d3:3e: 43:1a:24:77:bf:4f:1f:bb:be:8e:eb:99:4c:e3:54:89:66:40: 67:5f:be:4d:f3:d3:73:46:78:91:bb:66:72:72:a0:3a:8f:5d: 0e:d5:48:97:8f:2a:68:5e:45:73:d0:6e:a8:c6:d8:8e:bd:01: 25:c2:ab:b9:f9:fb:29:b7:44:00:74:72:d2:d8:98:50:d5:6c: 58:72:d9:04:53:74:3d:b1:64:15:b3:dc:90:0c:e4:82:ce:a9: 16:71:3d:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Uh1AL9leYwuGffayJOWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0 NTZhYjQwHhcNMjYwMTI2MDgwMTA2WhcNMjYwMTI3MDgwMTA2WjAzMTEwLwYDVQQD EyhjMTM2ODI2NTc0NmQ1ZDljMTgxMzYwZWI4ZWZiYjU2ZjRhZDkzMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyban1I8J/Qmz86UlI3r9L6RtyhSK 6yzs6xhLuxzOR0LQMu/Jbx/5hnGdLatPerjL98ErDt5ibFXrkR7Uz+90vkp50OiK jqySU4FLWwLrfrf+TdkeycQ+/lNEKm4AVWH2jpLx/EsNits9OlN/Nd/4Z0KCZegp UdK+OoBZjyJxZXoYsKZWebteBthMFeeC4j3vu6fXm6tHA7qEANNjQL0xwSIYzpjh NqVYMu/iEK2MNld9SNtQYZL/qypk2HLl3RoELnU6kiMUp0akDEmVM+flCUIEkJsz pD0kMQrlCCJ7ZKw5Oftgx5j4asxtd3XnbEXkYaSjaXGVoLr6cpiZ27bgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME2gmV0bV2cGBNg6477tW9K2TAvMB8GA1UdIwQY MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGK8U7MBm m1vpgh4l41pXPZbh5RbP4XaMbza52W4wwA3ZltQ7bJcBl1sg7S1dZzBWhyHGfcYF BbyA9XAnnHTXkgyCJfGLE1PFILgT61WdrgFexMwlYGnGBZPhxkIQizrCRcGo7s4x Kth+A4VlG9LvJFU1HE+u4EN/PECcmy0u94H3Z7EFAQAIQxdhEWrgFzv/j6UvIoWk mWwT8ZBA6a/yydM+Qxokd79PH7u+juuZTONUiWZAZ1++TfPTc0Z4kbtmcnKgOo9d DtVIl48qaF5Fc9BuqMbYjr0BJcKrufn7KbdEAHRy0tiYUNVsWHLZBFN0PbFkFbPc kAzkgs6pFnE9Jw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:10 2026 by rpki-client