This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json) Hash identifier: hYO0hul7VXqs98kYFj4PaC4IkoI5TlJkELIw8H1RACE= Subject key identifier: F7:8B:73:BD:C4:8E:15:EB:6E:FD:A2:5F:FC:5D:1C:7A:77:1E:C8:ED Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Certificate serial: 019C04E80092E663433CFD103862F3E97C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft Manifest number: 028A Signing time: Wed 28 Jan 2026 14:00:39 +0000 Manifest this update: Wed 28 Jan 2026 14:00:39 +0000 Manifest next update: Thu 29 Jan 2026 14:00:39 +0000 Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: ziW52tNCLguJTDNeQD1O5NUNCX0Fa57joRIMxsAV5ss=) 2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:e8:00:92:e6:63:43:3c:fd:10:38:62:f3:e9:7c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8 Validity Not Before: Jan 28 14:00:39 2026 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=f78b73bdc48e15eb6efda25ffc5d1c7a771ec8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:c4:8c:11:ae:70:77:15:02:9e:10:12:02: 9b:66:11:1d:df:f5:fe:4b:9f:32:2f:7d:f1:ce:14: b7:1b:9e:76:cb:7a:1e:0c:ea:2a:b7:f0:5b:77:ca: a7:66:65:90:44:82:30:91:7c:b9:5e:96:95:35:3b: 37:81:78:6b:db:33:66:00:4d:89:67:e9:bd:7d:86: 38:d9:85:25:39:94:c5:2b:f0:7f:df:b9:ad:ff:24: 97:cc:e4:90:1e:0f:ee:df:a4:85:f4:5f:40:e9:d1: 9e:b2:ea:3a:ab:b2:00:3c:6d:84:cb:28:53:fc:a8: a9:d1:a9:35:88:25:65:a9:b0:45:1a:d5:75:de:49: 51:bc:f0:c0:c3:fd:d3:d3:91:23:00:a3:c5:c8:1b: b9:5f:bf:09:45:62:a3:38:ef:52:b3:75:f4:63:97: 61:97:7e:ae:eb:24:f0:6e:36:84:54:a0:ab:87:22: 6a:81:05:54:96:8e:90:b5:08:41:bd:ff:c8:d4:0d: 92:93:56:b5:8a:31:eb:dc:df:e6:96:2e:35:3c:5a: 15:f0:f9:cb:fa:0c:ce:98:0f:08:ae:03:25:5f:c3: a8:87:2e:b1:fd:20:2b:64:25:8f:92:8a:86:f4:46: e1:d3:ca:f0:4f:1f:5a:47:9b:d3:aa:64:db:48:59: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:73:BD:C4:8E:15:EB:6E:FD:A2:5F:FC:5D:1C:7A:77:1E:C8:ED X509v3 Authority Key Identifier: keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4d:f9:92:93:4b:17:5c:15:09:a9:aa:b9:76:64:dd:f0:10: 7d:23:4e:79:5e:e6:ae:81:bb:f0:9c:1f:8b:05:5d:10:b1:de: d4:36:3a:30:69:e0:bd:da:36:85:9e:82:7f:6c:bf:05:71:e4: 7e:da:4a:b3:30:dc:dd:6e:3b:d7:30:74:5f:c1:1c:d3:8e:49: 1d:77:a6:23:00:f3:22:04:39:f2:8b:01:6e:6c:d9:0d:29:1b: 7c:10:f5:0a:d6:34:d4:a8:b1:1f:70:c9:9d:53:20:4e:14:ce: 7a:1a:64:c8:3b:9b:8e:f9:a2:77:15:4c:08:48:23:38:fe:be: f4:18:04:de:62:64:c2:3f:bd:93:97:c5:62:3e:3a:4b:13:0d: 35:a1:c0:c9:ee:43:70:25:ce:9c:08:76:27:ab:ee:bd:55:23: be:46:c2:cc:ab:84:3b:1f:16:10:8d:e2:46:e1:96:7b:dc:12: f5:77:a8:74:79:a1:f7:90:f8:a1:a3:71:d0:6e:bc:8e:09:5d: 39:4d:a0:8a:af:ef:90:dd:3a:15:44:69:31:ec:04:0c:a0:ec: c7:37:84:9c:8e:59:d6:08:ce:3a:20:e1:38:e0:bb:9c:5c:d0: d5:93:54:af:77:cf:b2:65:eb:e0:47:25:a6:a1:80:c7:1d:20: 68:03:90:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwE6ACS5mNDPP0QOGLz6XxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy OTUwZjgwHhcNMjYwMTI4MTQwMDM5WhcNMjYwMTI5MTQwMDM5WjAzMTEwLwYDVQQD EyhmNzhiNzNiZGM0OGUxNWViNmVmZGEyNWZmYzVkMWM3YTc3MWVjOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZfEjBGucHcVAp4QEgKbZhEd3/X+ S58yL33xzhS3G552y3oeDOoqt/Bbd8qnZmWQRIIwkXy5XpaVNTs3gXhr2zNmAE2J Z+m9fYY42YUlOZTFK/B/37mt/ySXzOSQHg/u36SF9F9A6dGesuo6q7IAPG2EyyhT /Kip0ak1iCVlqbBFGtV13klRvPDAw/3T05EjAKPFyBu5X78JRWKjOO9Ss3X0Y5dh l36u6yTwbjaEVKCrhyJqgQVUlo6QtQhBvf/I1A2Sk1a1ijHr3N/mli41PFoV8PnL +gzOmA8IrgMlX8Oohy6x/SArZCWPkoqG9Ebh08rwTx9aR5vTqmTbSFmRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeLc73EjhXrbv2iX/xdHHp3HsjtMB8GA1UdIwQY MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk35kpNL F1wVCamquXZk3fAQfSNOeV7mroG78JwfiwVdELHe1DY6MGngvdo2hZ6Cf2y/BXHk ftpKszDc3W471zB0X8Ec045JHXemIwDzIgQ58osBbmzZDSkbfBD1CtY01KixH3DJ nVMgThTOehpkyDubjvmidxVMCEgjOP6+9BgE3mJkwj+9k5fFYj46SxMNNaHAye5D cCXOnAh2J6vuvVUjvkbCzKuEOx8WEI3iRuGWe9wS9XeodHmh95D4oaNx0G68jgld OU2giq/vkN06FURpMewEDKDsxzeEnI5Z1gjOOiDhOOC7nFzQ1ZNUr3fPsmXr4Ecl pqGAxx0gaAOQHA== -----END CERTIFICATE-----Generated at Wed Jan 28 18:36:03 2026 by rpki-client