This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json) Hash identifier: gyx7bZ/NnZPLOQM6qJl7k3ac80t9Ln5OHSu0XdicXSQ= Subject key identifier: FF:DB:82:1F:93:13:80:3B:3A:85:1F:0A:11:CC:F4:81:91:85:84:F2 Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Certificate serial: 019BF9C048E932ABB3DA176FE431DD89EB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft Manifest number: 171E Signing time: Mon 26 Jan 2026 10:01:26 +0000 Manifest this update: Mon 26 Jan 2026 10:01:26 +0000 Manifest next update: Tue 27 Jan 2026 10:01:26 +0000 Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=) 2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: 4Q+gDXltUWDgZP0Df98cEr/Dg3iWh3ehsbeRNfKWnGk=) 3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=) 4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:48:e9:32:ab:b3:da:17:6f:e4:31:dd:89:eb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Validity Not Before: Jan 26 10:01:26 2026 GMT Not After : Jan 27 10:01:26 2026 GMT Subject: CN=ffdb821f9313803b3a851f0a11ccf481918584f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:a6:06:4c:cb:87:dd:77:b7:c7:d5:24:11: 1e:c7:70:7b:56:f7:d9:67:d0:1a:48:62:3f:45:96: 92:a9:aa:1f:3c:97:4c:68:7f:e1:91:98:77:b0:fe: 2a:64:71:1b:61:b7:0e:88:02:39:ea:0c:06:37:69: 0f:a0:20:9f:5a:7c:0c:d6:7b:74:f4:c6:71:7c:b6: 95:6b:90:39:b6:51:79:f2:f1:34:10:3e:73:b6:c9: ee:f7:63:bc:aa:a4:23:bd:80:2b:34:a2:32:c6:02: d8:38:68:c6:e9:fa:7b:b1:0d:f8:e3:18:de:df:67: 67:23:bb:b0:46:9b:6f:fe:4d:c4:d6:1f:21:4f:14: 84:b4:30:a9:3e:73:ab:60:59:98:00:af:4a:66:db: c6:f9:06:8e:7c:00:41:3e:6f:a1:25:19:85:aa:8c: cf:3a:38:2e:44:22:de:66:5c:c6:af:6f:78:21:53: b6:19:5f:8c:9e:67:8c:2c:92:3e:a9:d0:42:a3:1f: eb:13:9f:f4:bf:80:3e:75:fc:0c:84:1a:80:58:24: 25:69:34:27:3d:1c:1c:76:7f:c5:ae:9b:6f:29:10: 7a:0b:dd:ce:a1:b8:d3:5a:2e:47:7d:7c:4a:e3:df: 81:a6:7f:1a:d5:30:da:09:34:23:88:dc:da:b7:e5: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:82:1F:93:13:80:3B:3A:85:1F:0A:11:CC:F4:81:91:85:84:F2 X509v3 Authority Key Identifier: keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:44:0c:b7:28:95:21:fb:49:03:1a:7b:0e:03:46:6b:72:fc: 45:0d:79:b5:c3:fe:57:df:1f:cb:b4:68:48:a9:00:20:8c:9f: e3:af:69:f5:43:a1:5e:ad:5c:e6:1e:9f:cb:f2:8e:64:8a:2e: 25:ad:0b:dc:a2:98:08:20:ca:78:68:d0:f5:ca:39:45:bd:b6: 5f:79:1f:52:8c:ee:48:63:fc:4f:32:a1:5e:41:66:71:d5:4c: 9c:a0:40:bb:f6:fd:86:c3:e5:56:cc:a4:02:46:fa:71:9b:e7: c9:34:8d:4b:28:23:ca:75:44:2b:bf:c7:2f:e1:f3:22:8a:b3: b4:09:39:ee:7a:3f:8d:6d:ba:dd:33:bf:be:24:a3:30:a6:f8: 44:5c:a7:11:14:47:55:cd:1d:70:3f:82:22:b5:21:04:de:8a: 50:d2:a6:2e:a3:4d:a3:4c:83:80:d1:6c:98:3f:3e:ce:84:b2: 31:b4:24:4a:ed:b4:12:a6:5a:c8:a2:2e:a0:36:38:c8:b3:4f: a5:2e:a5:c1:55:09:cd:f9:33:c9:c5:5b:3e:9f:fc:ca:23:fa: fc:8d:5e:1d:07:4b:f0:21:81:4c:b3:8a:aa:15:ed:f5:fd:2c: 1f:85:4b:e1:c7:4a:a8:b2:da:b2:c2:a3:28:98:f3:91:eb:57: aa:20:8d:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wEjpMquz2hdv5DHdietRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3 MDg0ZjkwHhcNMjYwMTI2MTAwMTI2WhcNMjYwMTI3MTAwMTI2WjAzMTEwLwYDVQQD EyhmZmRiODIxZjkzMTM4MDNiM2E4NTFmMGExMWNjZjQ4MTkxODU4NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoqmBkzLh913t8fVJBEex3B7VvfZ Z9AaSGI/RZaSqaofPJdMaH/hkZh3sP4qZHEbYbcOiAI56gwGN2kPoCCfWnwM1nt0 9MZxfLaVa5A5tlF58vE0ED5ztsnu92O8qqQjvYArNKIyxgLYOGjG6fp7sQ344xje 32dnI7uwRptv/k3E1h8hTxSEtDCpPnOrYFmYAK9KZtvG+QaOfABBPm+hJRmFqozP OjguRCLeZlzGr294IVO2GV+MnmeMLJI+qdBCox/rE5/0v4A+dfwMhBqAWCQlaTQn PRwcdn/FrptvKRB6C93OobjTWi5HfXxK49+Bpn8a1TDaCTQjiNzat+UVfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/bgh+TE4A7OoUfChHM9IGRhYTyMB8GA1UdIwQY MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt ODhmN2I5MWI2ZTMyLzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEQMtyiV IftJAxp7DgNGa3L8RQ15tcP+V98fy7RoSKkAIIyf469p9UOhXq1c5h6fy/KOZIou Ja0L3KKYCCDKeGjQ9co5Rb22X3kfUozuSGP8TzKhXkFmcdVMnKBAu/b9hsPlVsyk Akb6cZvnyTSNSygjynVEK7/HL+HzIoqztAk57no/jW263TO/viSjMKb4RFynERRH Vc0dcD+CIrUhBN6KUNKmLqNNo0yDgNFsmD8+zoSyMbQkSu20EqZayKIuoDY4yLNP pS6lwVUJzfkzycVbPp/8yiP6/I1eHQdL8CGBTLOKqhXt9f0sH4VL4cdKqLLassKj KJjzketXqiCNYQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:49:50 2026 by rpki-client