This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json) Hash identifier: NE95LNVJoOtTiFJNEBCLTOZoU64D9LsQtNA+7LMGbqs= Subject key identifier: 8D:C9:FB:ED:01:DE:9D:01:83:6E:59:E9:D0:F2:2E:74:B1:A2:00:31 Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Certificate serial: 019BFA2E01E05D9B408242642301DE0AFA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft Manifest number: 0273 Signing time: Mon 26 Jan 2026 12:01:17 +0000 Manifest this update: Mon 26 Jan 2026 12:01:17 +0000 Manifest next update: Tue 27 Jan 2026 12:01:17 +0000 Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: vf4FDLJ+fvH0OGwx6YvOJMU/m+NkYVcf0ZT9Sgsze54=) 2: c-F07oW418TCkLIDuM4bPsepLlw.roa (hash: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:01:e0:5d:9b:40:82:42:64:23:01:de:0a:fa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Validity Not Before: Jan 26 12:01:17 2026 GMT Not After : Jan 27 12:01:17 2026 GMT Subject: CN=8dc9fbed01de9d01836e59e9d0f22e74b1a20031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:61:50:ab:41:37:05:01:a2:c6:57:6e:81: 51:4c:56:85:7a:f1:7c:c7:66:b4:e0:ee:e5:ed:20: 4f:a7:a4:be:c7:38:34:88:61:ee:a1:94:f7:62:de: bc:bc:23:40:14:8f:bc:29:bc:e2:7f:ac:ae:c4:b3: 1c:54:ef:76:82:14:fb:d3:bd:73:62:44:5c:76:61: 54:3e:6e:e3:f2:44:b3:9a:ca:ae:b7:ff:52:25:dc: 92:72:cd:c9:98:9e:ad:1b:aa:a0:40:8a:94:72:19: fb:57:9d:ed:9f:2d:e0:bb:9e:b1:60:64:90:e1:cf: a1:9e:a0:b6:21:17:f8:d6:26:e9:b7:98:59:02:ff: c0:c5:5f:50:86:40:d7:08:94:95:cf:bb:b6:b6:e5: 6d:f1:b1:40:95:4b:57:62:c0:f6:55:e2:54:5f:77: aa:7a:b1:b1:c0:5c:ee:93:6e:62:b4:33:b2:6d:40: 5c:3c:c1:f6:c1:f6:ab:1f:14:f8:f1:21:6a:93:14: 63:63:22:90:b1:45:6f:47:74:04:51:dd:25:51:ff: 9a:c4:fa:0a:1f:97:3b:0f:e7:85:87:15:2b:63:5a: 4b:cc:bb:92:c7:3b:ec:b0:3a:72:18:cd:f4:cc:db: 62:7c:6f:85:73:95:ad:b4:7a:07:19:8c:81:7a:ed: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C9:FB:ED:01:DE:9D:01:83:6E:59:E9:D0:F2:2E:74:B1:A2:00:31 X509v3 Authority Key Identifier: keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cb:fa:5a:3e:d3:b0:0a:76:4f:aa:fd:9e:a7:20:7d:d0:7f: 32:d4:b6:09:a8:a3:96:32:ff:93:23:7a:ad:2c:d1:09:34:95: 2b:66:8b:b1:f2:a7:4b:05:b6:e4:2b:5c:e0:1b:19:cc:a7:10: 69:b1:7a:3e:39:a8:db:11:5c:c2:56:99:56:19:08:6a:f9:37: 82:73:8e:6a:5f:45:10:0b:df:58:a7:fe:65:a4:60:95:44:ca: 0a:0d:c5:a6:58:79:60:90:b1:96:ac:a0:67:07:18:4d:c1:68: dd:6f:53:3d:45:37:6e:17:89:9a:78:93:65:d7:d1:88:b1:fc: 5e:49:17:b9:79:82:1d:d0:7c:1b:e7:b3:15:86:4b:11:7b:27: 4e:e8:b8:19:d6:4c:b9:4a:98:34:2a:11:60:59:eb:b1:ee:64: fb:f2:6d:a4:b1:7a:9a:67:55:36:38:34:c8:3c:8b:71:ed:85: a3:28:08:b4:1f:26:84:86:ac:6a:8f:c7:20:f8:e9:ed:67:22: 8d:fc:14:ed:da:d0:d6:92:e1:35:35:9a:5d:f8:2d:e4:6a:a2: f8:14:9c:a5:28:f2:70:d8:7c:8a:ca:a0:6f:40:4a:37:3d:d2: 83:d9:b2:75:8f:2d:aa:04:16:cd:fd:0a:e3:7e:44:16:9e:91: 66:65:17:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LgHgXZtAgkJkIwHeCvo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm ZDRiMDEwHhcNMjYwMTI2MTIwMTE3WhcNMjYwMTI3MTIwMTE3WjAzMTEwLwYDVQQD Eyg4ZGM5ZmJlZDAxZGU5ZDAxODM2ZTU5ZTlkMGYyMmU3NGIxYTIwMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwNhUKtBNwUBosZXboFRTFaFevF8 x2a04O7l7SBPp6S+xzg0iGHuoZT3Yt68vCNAFI+8Kbzif6yuxLMcVO92ghT7071z YkRcdmFUPm7j8kSzmsqut/9SJdyScs3JmJ6tG6qgQIqUchn7V53tny3gu56xYGSQ 4c+hnqC2IRf41ibpt5hZAv/AxV9QhkDXCJSVz7u2tuVt8bFAlUtXYsD2VeJUX3eq erGxwFzuk25itDOybUBcPMH2wfarHxT48SFqkxRjYyKQsUVvR3QEUd0lUf+axPoK H5c7D+eFhxUrY1pLzLuSxzvssDpyGM30zNtifG+Fc5WttHoHGYyBeu1YDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3J++0B3p0Bg25Z6dDyLnSxogAxMB8GA1UdIwQY MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsv6Wj7T sAp2T6r9nqcgfdB/MtS2CaijljL/kyN6rSzRCTSVK2aLsfKnSwW25Ctc4BsZzKcQ abF6Pjmo2xFcwlaZVhkIavk3gnOOal9FEAvfWKf+ZaRglUTKCg3Fplh5YJCxlqyg ZwcYTcFo3W9TPUU3bheJmniTZdfRiLH8XkkXuXmCHdB8G+ezFYZLEXsnTui4GdZM uUqYNCoRYFnrse5k+/JtpLF6mmdVNjg0yDyLce2FoygItB8mhIasao/HIPjp7Wci jfwU7drQ1pLhNTWaXfgt5Gqi+BScpSjycNh8isqgb0BKNz3Sg9mydY8tqgQWzf0K 435EFp6RZmUXiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:29 2026 by rpki-client