This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft File: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json) Hash identifier: RxW47SXCuhOa+I237zrJt/H2KCsK05FYu84AyagjLvM= Subject key identifier: BA:0B:94:26:E8:6C:6F:87:B6:14:46:71:34:02:F2:4D:F1:39:CD:36 Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Certificate serial: 019BFF1D00186F862330A6005B7C7E4C3F5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 11:00:49 +0000 Manifest this update: Tue 27 Jan 2026 11:00:49 +0000 Manifest next update: Wed 28 Jan 2026 11:00:49 +0000 Files and hashes: 1: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: kux77dAtacc5C3YOz1cu9dBHdQs8aUMNaVQxk5aJznQ=) 2: f6iqlfdMArGL77ftRWPuRND2qEw.roa (hash: Y4n4zPlQ5X9WdhdswqlaVDVx5UOEzkW5UgOyIaM7S3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:00:18:6f:86:23:30:a6:00:5b:7c:7e:4c:3f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Validity Not Before: Jan 27 11:00:49 2026 GMT Not After : Jan 28 11:00:49 2026 GMT Subject: CN=ba0b9426e86c6f87b61446713402f24df139cd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:90:0e:33:71:57:55:2d:bd:fc:75:12:f7: 78:44:10:ea:c1:89:59:84:d4:f2:61:c7:57:fc:c5: b7:50:5e:ee:35:fa:be:1e:5c:1a:99:f3:ec:be:a3: 94:9c:6c:5f:29:f5:2c:10:67:45:ec:00:2a:98:0b: 15:0d:4c:3a:c3:f1:d0:8e:19:c3:c4:af:49:bd:c0: c5:9e:2b:73:0e:13:30:53:32:78:0a:e3:29:96:f7: 75:dc:30:d7:51:7f:a7:69:09:ec:61:de:17:bb:ad: 7c:39:2e:b8:02:fc:45:db:f3:2d:57:44:28:47:15: d6:b3:74:28:9f:7a:fa:c5:29:a8:cb:e6:d8:fa:1f: ad:2e:3b:8c:03:7c:af:cb:9d:1a:ff:a8:e9:1e:ff: e0:d7:31:81:14:ab:91:5f:10:0b:13:02:18:f0:89: 8f:d4:de:f7:d6:40:df:aa:77:a3:ed:10:25:a2:87: 44:0e:24:50:85:ce:c5:d0:02:d9:1c:44:bf:08:da: d1:14:f5:a5:4f:31:97:b2:5e:e0:0e:cf:ce:c0:05: b7:1a:de:dc:52:8b:59:c5:c5:39:cb:5a:05:57:f3: 39:13:34:ba:c3:f8:9c:e3:d4:08:4a:d7:99:a0:99: 9b:2b:41:2e:07:26:b3:bd:1a:24:8c:d8:c5:e8:db: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0B:94:26:E8:6C:6F:87:B6:14:46:71:34:02:F2:4D:F1:39:CD:36 X509v3 Authority Key Identifier: keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:c7:49:bc:be:b3:ac:4f:49:e3:13:bb:1d:52:ca:90:27: fc:70:8e:26:16:79:87:f0:21:d9:99:f5:72:b6:b7:cc:82:85: d2:c1:fc:e2:f4:cd:ab:67:13:27:9c:21:84:a9:e7:73:ab:13: 9c:d2:d9:f8:6e:2a:a4:f0:3d:f4:7b:1f:78:21:dc:53:81:5e: 1f:5f:ad:3c:66:b5:39:b6:29:9f:5b:74:8d:e2:bb:f6:10:e7: 76:b0:b2:31:38:6e:64:f0:64:a3:d9:65:2c:32:ab:f8:54:88: c2:ce:00:1a:4f:9d:b8:27:8b:ba:c5:95:b5:fe:a1:b9:8f:54: 58:64:87:a2:39:a1:d0:d6:8e:70:2c:c0:3a:ac:c6:da:d1:20: 65:d2:20:87:f0:c9:9f:1d:0e:43:cc:c5:92:20:b2:05:94:3c: d5:46:ca:5f:a6:07:b9:39:46:e8:64:65:34:f6:20:02:04:d2: bd:18:43:12:38:02:10:2e:5d:35:c8:e3:d2:83:27:66:5e:21: b4:1e:6c:d4:ad:ff:18:4d:11:06:67:47:ff:65:40:0a:45:0b: 46:72:69:c7:07:c5:1f:cb:73:40:79:b7:de:ee:bb:15:d6:31: 49:a5:90:3b:50:43:f1:70:d1:39:ba:5b:9e:ef:83:6f:7a:9e: 6b:0c:5c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HQAYb4YjMKYAW3x+TD9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTQ1NTYzOTViNDdiZjQzZTBkNWQ1NTZlN2UyNTViNmM4 YWNjYzIwHhcNMjYwMTI3MTEwMDQ5WhcNMjYwMTI4MTEwMDQ5WjAzMTEwLwYDVQQD EyhiYTBiOTQyNmU4NmM2Zjg3YjYxNDQ2NzEzNDAyZjI0ZGYxMzljZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6CQDjNxV1Utvfx1Evd4RBDqwYlZ hNTyYcdX/MW3UF7uNfq+HlwamfPsvqOUnGxfKfUsEGdF7AAqmAsVDUw6w/HQjhnD xK9JvcDFnitzDhMwUzJ4CuMplvd13DDXUX+naQnsYd4Xu618OS64AvxF2/MtV0Qo RxXWs3Qon3r6xSmoy+bY+h+tLjuMA3yvy50a/6jpHv/g1zGBFKuRXxALEwIY8ImP 1N731kDfqnej7RAloodEDiRQhc7F0ALZHES/CNrRFPWlTzGXsl7gDs/OwAW3Gt7c UotZxcU5y1oFV/M5EzS6w/ic49QISteZoJmbK0EuByazvRokjNjF6NseewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoLlCbobG+HthRGcTQC8k3xOc02MB8GA1UdIwQY MBaAFCeUVWOVtHv0Pg1dVW5+JVtsiszCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYt NzlkYTdhYWFhM2IyLzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYtNzlkYTdhYWFhM2Iy LzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6vHSby+ s6xPSeMTux1SypAn/HCOJhZ5h/Ah2Zn1cra3zIKF0sH84vTNq2cTJ5whhKnnc6sT nNLZ+G4qpPA99HsfeCHcU4FeH1+tPGa1ObYpn1t0jeK79hDndrCyMThuZPBko9ll LDKr+FSIws4AGk+duCeLusWVtf6huY9UWGSHojmh0NaOcCzAOqzG2tEgZdIgh/DJ nx0OQ8zFkiCyBZQ81UbKX6YHuTlG6GRlNPYgAgTSvRhDEjgCEC5dNcjj0oMnZl4h tB5s1K3/GE0RBmdH/2VACkULRnJpxwfFH8tzQHm33u67FdYxSaWQO1BD8XDRObpb nu+Db3qeawxc2A== -----END CERTIFICATE-----Generated at Tue Jan 27 14:28:45 2026 by rpki-client