This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json) Hash identifier: RpdZHkRzFCGFkCql1l705KTc6LAtqrHbYb9SCspw8xk= Subject key identifier: A8:F8:1A:BE:51:DC:99:8B:9E:4B:50:B2:64:2D:31:29:3A:88:E4:FC Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Certificate serial: 019BFD9D61CCB9104B1AF1106710EC0AF8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft Manifest number: 01D1 Signing time: Tue 27 Jan 2026 04:01:48 +0000 Manifest this update: Tue 27 Jan 2026 04:01:48 +0000 Manifest next update: Wed 28 Jan 2026 04:01:48 +0000 Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: JJe/fBG4NUFUwF08YNKCrAAfHOipwUm9Qp0JV8LhSm0=) 2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:61:cc:b9:10:4b:1a:f1:10:67:10:ec:0a:f8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Validity Not Before: Jan 27 04:01:48 2026 GMT Not After : Jan 28 04:01:48 2026 GMT Subject: CN=a8f81abe51dc998b9e4b50b2642d31293a88e4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:1b:4d:eb:22:2b:a5:fa:ee:a3:9c:5d:44: 77:0a:5d:26:07:5d:de:67:88:47:f6:5a:47:09:7a: ba:c1:d2:b8:1c:9c:4e:85:c2:d2:75:10:31:85:72: b0:12:33:d1:5d:da:51:1e:88:f2:5a:c4:b5:c3:67: 48:f8:58:a2:98:b2:ff:c4:1f:f2:49:7c:0d:60:c5: cf:8c:81:42:03:ac:df:1f:1d:ad:4a:59:ec:ba:d5: 7a:86:47:ea:d6:68:44:3a:43:2a:eb:30:b4:92:e4: 95:f7:85:1f:e9:92:ef:95:97:8a:fa:73:39:7c:cd: be:9b:07:1d:0c:e4:db:8c:94:56:7b:a0:a1:c4:6d: de:21:a5:13:e3:8d:ef:b0:0a:f0:08:95:64:b0:b3: 96:f5:79:d0:0a:61:1b:6f:9e:1f:7a:41:70:02:0b: 60:a2:c3:80:22:4c:b4:f2:59:f4:13:70:70:ed:9a: b5:32:1b:1e:96:d5:5d:dd:33:bc:8d:66:d0:89:d3: b2:3e:3e:e6:4b:92:34:96:7f:e8:ae:a3:f6:a4:6a: 79:c0:0d:48:97:84:7f:ae:c0:09:19:d9:d6:cf:e7: 5f:5c:7f:24:68:df:b4:5c:fa:07:7a:a8:eb:7f:38: f6:ad:9e:31:f7:a6:74:78:dc:d9:c9:d1:6a:56:79: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:1A:BE:51:DC:99:8B:9E:4B:50:B2:64:2D:31:29:3A:88:E4:FC X509v3 Authority Key Identifier: keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:57:04:c9:59:0b:b2:03:dc:65:1e:36:b9:1f:50:55:77:5a: 78:66:46:bb:82:98:b1:a1:32:7f:4b:be:2a:3c:ce:86:62:f3: 06:43:36:71:a3:16:09:f1:b2:0c:09:5d:79:c3:ec:b4:99:bc: ed:96:3a:ca:50:1a:9a:a5:d0:3d:b4:6b:2d:36:92:54:35:0d: ae:eb:c6:63:07:0b:f7:29:43:26:01:a2:1e:57:4d:90:b7:fb: 64:a2:7e:33:e1:83:d1:96:b2:61:40:90:96:2a:ed:8f:87:3c: dd:78:4e:c8:00:a6:a6:34:bb:6e:06:21:7d:04:27:a1:ed:24: b2:e1:07:52:fe:36:63:b1:b8:b7:92:41:23:08:ac:db:d9:aa: 42:1d:82:fd:bb:8e:1e:22:4e:83:f8:0d:e0:f2:af:1a:00:84: 49:21:fc:99:8c:f4:3d:85:b8:d4:59:1a:ed:8b:44:a8:08:d1: f3:66:8f:78:57:16:55:3b:e8:ac:62:47:88:48:0b:52:e7:01: c6:0b:c1:7a:31:74:2f:e2:24:f4:e4:29:6d:06:c6:3e:bf:5a: 66:53:1b:3c:9d:e8:e8:44:8a:fe:1c:98:79:a1:bf:93:a3:76: 89:90:7b:4a:ce:bc:a9:8b:97:bc:21:f2:fc:99:96:10:29:36: 0d:ff:4a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nWHMuRBLGvEQZxDsCvi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi MWQ5MGEwHhcNMjYwMTI3MDQwMTQ4WhcNMjYwMTI4MDQwMTQ4WjAzMTEwLwYDVQQD EyhhOGY4MWFiZTUxZGM5OThiOWU0YjUwYjI2NDJkMzEyOTNhODhlNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohUbTesiK6X67qOcXUR3Cl0mB13e Z4hH9lpHCXq6wdK4HJxOhcLSdRAxhXKwEjPRXdpRHojyWsS1w2dI+FiimLL/xB/y SXwNYMXPjIFCA6zfHx2tSlnsutV6hkfq1mhEOkMq6zC0kuSV94Uf6ZLvlZeK+nM5 fM2+mwcdDOTbjJRWe6ChxG3eIaUT443vsArwCJVksLOW9XnQCmEbb54fekFwAgtg osOAIky08ln0E3Bw7Zq1MhseltVd3TO8jWbQidOyPj7mS5I0ln/orqP2pGp5wA1I l4R/rsAJGdnWz+dfXH8kaN+0XPoHeqjrfzj2rZ4x96Z0eNzZydFqVnma0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj4Gr5R3JmLnktQsmQtMSk6iOT8MB8GA1UdIwQY MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVcEyVkL sgPcZR42uR9QVXdaeGZGu4KYsaEyf0u+KjzOhmLzBkM2caMWCfGyDAldecPstJm8 7ZY6ylAamqXQPbRrLTaSVDUNruvGYwcL9ylDJgGiHldNkLf7ZKJ+M+GD0ZayYUCQ lirtj4c83XhOyACmpjS7bgYhfQQnoe0ksuEHUv42Y7G4t5JBIwis29mqQh2C/buO HiJOg/gN4PKvGgCESSH8mYz0PYW41Fka7YtEqAjR82aPeFcWVTvorGJHiEgLUucB xgvBejF0L+Ik9OQpbQbGPr9aZlMbPJ3o6ESK/hyYeaG/k6N2iZB7Ss68qYuXvCHy /JmWECk2Df9KGw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:24:29 2026 by rpki-client