This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json) Hash identifier: FrV33dbuUdyMMDw1gZBlJAiHfe6RiE6w8l40CveBDbg= Subject key identifier: A2:BB:A3:6E:7E:49:79:8F:D9:51:1D:10:1C:4D:57:29:B5:FE:C4:3A Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d Certificate serial: 019BFB4048817D9BE3AFC42E69468053C74B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft Manifest number: 0A2B Signing time: Mon 26 Jan 2026 17:00:52 +0000 Manifest this update: Mon 26 Jan 2026 17:00:52 +0000 Manifest next update: Tue 27 Jan 2026 17:00:52 +0000 Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: VgMce75StIiSGzRb5ZO2xDWXY6yI+yyiPEkpRj08odU=) 2: topvI4u_yc05Ro-Wd1LgO-ILlDM.roa (hash: YcyOx4QELjJwJBph+m+FjlEMDtBjOHDtaRK96fGlHwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:48:81:7d:9b:e3:af:c4:2e:69:46:80:53:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d Validity Not Before: Jan 26 17:00:52 2026 GMT Not After : Jan 27 17:00:52 2026 GMT Subject: CN=a2bba36e7e49798fd9511d101c4d5729b5fec43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:74:89:f8:1f:c5:dd:ee:d2:15:d3:64:e3: 51:05:89:73:71:16:53:d5:3e:f2:a5:03:03:9b:c7: b2:74:dd:90:e5:fe:a7:4b:b4:da:b4:4f:1c:43:31: 94:3c:da:6b:92:21:8a:0b:cb:cf:d3:0b:f6:5c:98: 9c:75:f1:ef:68:2b:b6:b2:85:22:5f:e0:15:f2:ae: 47:30:f7:a7:32:42:ff:91:e7:7b:e2:fe:32:21:57: 0a:7e:8a:e5:0b:5b:95:7b:38:1e:73:32:ad:58:00: e7:7b:a1:13:16:00:da:0e:74:60:7e:a8:af:02:a5: 63:a0:39:02:f4:df:e8:37:4e:7f:11:87:a2:78:b5: 7b:6f:00:1a:1f:9d:fa:cc:61:bd:10:3d:57:30:e9: 1f:f6:34:71:a4:ef:00:98:64:aa:3f:c7:91:da:fa: 5d:90:98:5e:d1:43:52:f7:07:ea:3b:f9:b8:42:10: ce:d5:39:e0:ff:93:ba:e0:d7:53:ad:16:8d:00:15: 73:fa:be:62:7b:2e:fc:0d:89:6f:c1:f8:2d:8e:04: db:6f:5e:4a:b1:bf:18:ce:a8:f6:74:4d:f5:10:3a: e5:b7:57:90:a0:de:55:84:5d:b2:68:3a:8d:a2:8c: 4a:f1:35:79:e8:a0:ad:ef:bf:e0:d7:c1:cb:4f:6a: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:A3:6E:7E:49:79:8F:D9:51:1D:10:1C:4D:57:29:B5:FE:C4:3A X509v3 Authority Key Identifier: keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7f:13:82:5f:db:dc:6b:bd:8e:b1:25:84:f2:81:e2:58:77: 55:d3:43:7b:c7:55:fb:ff:9d:c7:b9:91:4c:c6:4a:32:17:3f: dc:d1:68:9c:30:54:68:e0:85:76:a9:99:3a:a6:6e:2a:06:4f: 58:ac:a9:9b:b1:cc:5e:28:f5:e2:c5:87:b3:60:56:18:53:26: c7:b8:00:11:c1:45:be:82:e8:86:8a:b6:8e:7b:e6:6e:63:45: 15:f4:8f:5a:bb:08:52:8a:31:bf:37:94:26:8b:42:cc:72:50: 78:f7:ac:c6:ad:85:c9:b1:81:c1:4a:c3:48:89:da:f5:cb:53: f8:81:f3:00:84:e4:49:a7:e4:31:5e:08:54:e8:46:3c:7a:99: 9c:e8:4a:3a:21:6a:fb:7e:ec:f4:53:ea:a3:c1:40:50:6d:1e: 5c:ca:81:a4:70:bb:62:5b:55:f8:d9:bf:ca:98:28:15:8f:24: b5:01:8e:f7:bb:28:fb:09:7b:3e:a1:97:f4:45:f0:ba:8f:86: 56:84:06:12:43:34:d3:ff:ac:c7:c7:07:eb:68:74:cd:0d:75: 41:a4:0a:70:67:dd:84:0e:39:95:cc:f9:3f:16:0e:0f:6d:d9: c1:46:36:6c:c6:26:34:1f:f8:32:0b:a0:1a:2c:d8:49:85:a0: 3d:02:f3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QEiBfZvjr8QuaUaAU8dLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTlkNDEwMTA3Njc1ZWVkOGI2MmNjYWQ0MzUzMzZmODE5 ZTBhNmQwHhcNMjYwMTI2MTcwMDUyWhcNMjYwMTI3MTcwMDUyWjAzMTEwLwYDVQQD EyhhMmJiYTM2ZTdlNDk3OThmZDk1MTFkMTAxYzRkNTcyOWI1ZmVjNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzx0ifgfxd3u0hXTZONRBYlzcRZT 1T7ypQMDm8eydN2Q5f6nS7TatE8cQzGUPNprkiGKC8vP0wv2XJicdfHvaCu2soUi X+AV8q5HMPenMkL/ked74v4yIVcKforlC1uVezgeczKtWADne6ETFgDaDnRgfqiv AqVjoDkC9N/oN05/EYeieLV7bwAaH536zGG9ED1XMOkf9jRxpO8AmGSqP8eR2vpd kJhe0UNS9wfqO/m4QhDO1Tng/5O64NdTrRaNABVz+r5iey78DYlvwfgtjgTbb15K sb8Yzqj2dE31EDrlt1eQoN5VhF2yaDqNooxK8TV56KCt77/g18HLT2pSDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK7o25+SXmP2VEdEBxNVym1/sQ6MB8GA1UdIwQY MBaAFCcZ1BAQdnXu2LYsytQ1M2+BngptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEt NzcxODUxMmYwZGVmLzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEtNzcxODUxMmYwZGVm LzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn8Tgl/b 3Gu9jrElhPKB4lh3VdNDe8dV+/+dx7mRTMZKMhc/3NFonDBUaOCFdqmZOqZuKgZP WKypm7HMXij14sWHs2BWGFMmx7gAEcFFvoLohoq2jnvmbmNFFfSPWrsIUooxvzeU JotCzHJQePesxq2FybGBwUrDSIna9ctT+IHzAITkSafkMV4IVOhGPHqZnOhKOiFq +37s9FPqo8FAUG0eXMqBpHC7YltV+Nm/ypgoFY8ktQGO97so+wl7PqGX9EXwuo+G VoQGEkM00/+sx8cH62h0zQ11QaQKcGfdhA45lcz5PxYOD23ZwUY2bMYmNB/4Mgug GizYSYWgPQLzzA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:10:52 2026 by rpki-client