This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json) Hash identifier: aX8yzmSkinTeJA+tmj09slL7eCAAyFrgX5CYoBIw1AM= Subject key identifier: 4E:A3:1C:53:4A:07:58:3D:7D:29:8F:6E:9F:A7:A4:74:9B:FE:53:76 Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c Certificate serial: 019BFC89EF3C3951C66C850460EF7E1292A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 23:00:56 +0000 Manifest this update: Mon 26 Jan 2026 23:00:56 +0000 Manifest next update: Tue 27 Jan 2026 23:00:56 +0000 Files and hashes: 1: GfudqaXCGAnzf5UM4tjEaiMqpTg.roa (hash: ++grS5tBSYFsZ6VlpAvw9mKJW4WJ4ROEzneK+4J3ekU=) 2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: itQxPTD2ZEBh5hQWNs13b6AB9NlXoi1CDc4JgB2Ng+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:ef:3c:39:51:c6:6c:85:04:60:ef:7e:12:92:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c Validity Not Before: Jan 26 23:00:56 2026 GMT Not After : Jan 27 23:00:56 2026 GMT Subject: CN=4ea31c534a07583d7d298f6e9fa7a4749bfe5376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:d4:21:16:43:5d:2b:6f:f8:0d:d6:27:81: c6:5f:6c:42:65:9a:d8:79:41:59:ce:43:a4:e3:8f: 79:bb:c2:18:1d:a8:a9:92:13:04:47:ac:b2:b7:87: fe:11:c9:7c:58:89:3d:1d:12:ca:45:df:1e:65:e4: e9:8e:b6:c6:05:61:d6:a6:fc:ce:76:83:a1:da:e4: 33:76:04:77:cc:b7:7d:07:ed:2c:d9:e3:e9:c3:5b: 27:60:4f:46:23:e2:d5:ff:8b:8f:16:d5:89:13:bf: 42:a4:cf:65:f0:88:97:3e:e5:15:9a:9f:32:1f:de: 0e:92:4a:2d:f4:a4:5d:c0:50:8f:49:36:ba:d0:34: 25:53:65:14:37:21:07:e4:57:f8:d9:e9:a8:c0:68: 4f:6a:08:e6:af:e3:a2:58:e1:d5:e4:14:f2:23:b8: 55:4f:32:1d:62:b2:6b:74:1e:1d:de:56:3f:e5:e7: 08:f4:85:d1:aa:07:3a:0f:f6:f1:88:d3:64:40:36: c5:ec:5f:c3:29:13:de:28:b4:5d:e8:d1:23:ef:ef: 2f:58:ac:86:02:fa:7d:98:81:a4:aa:37:1c:ea:7c: e3:6b:5a:fb:bd:91:5a:4d:a7:6e:37:ed:7f:b9:ff: 9a:20:05:3f:7b:39:30:57:cc:52:8b:c9:33:89:45: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A3:1C:53:4A:07:58:3D:7D:29:8F:6E:9F:A7:A4:74:9B:FE:53:76 X509v3 Authority Key Identifier: keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:32:25:ed:ce:f7:a9:cf:47:47:a9:fd:72:81:c2:70:88:ea: 7c:74:dd:05:18:b1:82:84:3b:52:20:dd:35:ce:d5:16:29:7f: db:f8:26:33:11:f8:c1:61:c6:ad:29:78:b3:dd:ed:39:bd:61: 7e:52:56:fc:8c:04:4f:e3:39:f8:32:f5:ea:78:27:10:0a:03: 9a:c0:89:3f:cb:61:f5:d2:23:59:c5:c9:15:32:28:4e:84:d7: ed:ec:e3:cf:e2:7f:29:3a:8e:fe:58:94:7f:27:ef:53:14:92: f2:72:70:17:2b:f0:96:5f:88:ad:b7:d5:da:a2:44:21:aa:ff: 16:82:89:18:88:37:db:07:e7:c5:10:81:71:ab:d0:b8:db:2c: cd:42:7a:f1:58:6e:27:01:9c:47:3a:16:8a:d4:8d:ef:d0:b8: c7:51:e5:7c:40:ba:93:f7:e2:04:8f:e8:68:3b:2b:5d:ca:84: 42:d7:a0:d0:8f:23:9f:76:2f:ab:57:18:89:f4:89:c5:11:3a: 94:5b:47:34:e5:e6:b4:e1:6b:46:9b:f2:a8:d5:66:57:69:a3: c9:b0:09:3c:54:7f:3d:04:08:0c:34:db:88:2e:f5:b8:62:f5: 87:6b:dc:58:33:6d:63:5e:17:c2:0a:c1:4a:eb:b6:b9:82:02: c0:36:ba:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ie88OVHGbIUEYO9+EpKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzg3NWE4MGFkMjMzZTljMjg3MTU5ODgzNzFmNzdlZWMz ZjYyMGMwHhcNMjYwMTI2MjMwMDU2WhcNMjYwMTI3MjMwMDU2WjAzMTEwLwYDVQQD Eyg0ZWEzMWM1MzRhMDc1ODNkN2QyOThmNmU5ZmE3YTQ3NDliZmU1Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh3UIRZDXStv+A3WJ4HGX2xCZZrY eUFZzkOk4495u8IYHaipkhMER6yyt4f+Ecl8WIk9HRLKRd8eZeTpjrbGBWHWpvzO doOh2uQzdgR3zLd9B+0s2ePpw1snYE9GI+LV/4uPFtWJE79CpM9l8IiXPuUVmp8y H94Okkot9KRdwFCPSTa60DQlU2UUNyEH5Ff42emowGhPagjmr+OiWOHV5BTyI7hV TzIdYrJrdB4d3lY/5ecI9IXRqgc6D/bxiNNkQDbF7F/DKRPeKLRd6NEj7+8vWKyG Avp9mIGkqjcc6nzja1r7vZFaTaduN+1/uf+aIAU/ezkwV8xSi8kziUVIuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6jHFNKB1g9fSmPbp+npHSb/lN2MB8GA1UdIwQY MBaAFI44dagK0jPpwocVmINx937sP2IMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEt MTljNGZmMTg3N2JiLzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEtMTljNGZmMTg3N2Ji LzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITIl7c73 qc9HR6n9coHCcIjqfHTdBRixgoQ7UiDdNc7VFil/2/gmMxH4wWHGrSl4s93tOb1h flJW/IwET+M5+DL16ngnEAoDmsCJP8th9dIjWcXJFTIoToTX7ezjz+J/KTqO/liU fyfvUxSS8nJwFyvwll+IrbfV2qJEIar/FoKJGIg32wfnxRCBcavQuNsszUJ68Vhu JwGcRzoWitSN79C4x1HlfEC6k/fiBI/oaDsrXcqEQteg0I8jn3Yvq1cYifSJxRE6 lFtHNOXmtOFrRpvyqNVmV2mjybAJPFR/PQQIDDTbiC71uGL1h2vcWDNtY14XwgrB Suu2uYICwDa6OQ== -----END CERTIFICATE-----Generated at Tue Jan 27 04:16:59 2026 by rpki-client