This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json) Hash identifier: TgBd1UYOLZXdmHAcwB8RqP5WYrqbaHpeq8gzz/S2cOw= Subject key identifier: 5C:6B:37:9C:E0:46:E6:C7:4A:71:13:F7:E4:F8:0C:72:A7:33:AF:6C Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Certificate serial: 019B9E57F23ADDCFD7EEC1844BF381424EAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft Manifest number: 03A3 Signing time: Thu 08 Jan 2026 16:02:02 +0000 Manifest this update: Thu 08 Jan 2026 16:02:02 +0000 Manifest next update: Fri 09 Jan 2026 16:02:02 +0000 Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=) 2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: sx3elWIDrHfhWy1S6ZeOIxsRsrYyQS3PTPjGbNfTFBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:57:f2:3a:dd:cf:d7:ee:c1:84:4b:f3:81:42:4e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Validity Not Before: Jan 8 16:02:02 2026 GMT Not After : Jan 9 16:02:02 2026 GMT Subject: CN=5c6b379ce046e6c74a7113f7e4f80c72a733af6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e2:e1:1b:4c:f1:db:22:69:5b:37:b6:cc:83: 4c:60:00:6c:17:bf:04:f2:ff:2e:06:2c:35:c4:79: 97:3d:bd:b4:24:76:8f:8f:f7:f6:bc:40:6a:c3:40: 70:dc:d1:52:0d:b0:9a:71:d9:79:ac:7a:9b:a8:3b: 4a:f4:7d:c0:b4:bd:5a:49:53:fb:a3:db:58:8c:be: 4c:16:4a:61:1a:3c:21:b8:83:70:1b:12:50:b5:a8: de:2a:ba:60:9b:f1:f5:35:2f:2a:2f:b4:97:37:b2: e8:69:24:43:0a:96:fa:1e:54:7c:d0:81:16:78:7e: f0:7a:50:ae:23:a1:8d:3e:27:8c:a4:02:45:22:56: 30:d8:6d:10:fe:62:16:43:1b:d4:b6:75:40:4b:ce: 16:c5:9f:b3:23:38:fd:15:88:9d:8d:69:8c:3a:1b: 0f:97:57:9b:eb:0e:90:f2:14:41:a0:fd:78:39:42: f8:0b:b8:4c:a6:75:59:96:ad:5a:d1:73:24:35:9b: d3:f8:13:fb:83:ee:06:d2:70:d9:c2:1a:e4:e4:b1: c2:b2:82:67:a1:39:15:58:03:93:ff:c1:ef:d2:28: 4b:98:79:83:e6:0d:f0:59:d5:ec:b2:ff:c5:de:39: f6:9d:7b:36:11:62:bc:9b:b3:21:6e:a4:50:0d:be: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:37:9C:E0:46:E6:C7:4A:71:13:F7:E4:F8:0C:72:A7:33:AF:6C X509v3 Authority Key Identifier: keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:47:73:1b:ec:ec:a3:a0:b4:02:32:e3:01:15:e0:28:b7:40: b2:c0:04:56:bb:72:d6:21:c2:1b:85:a6:86:a0:00:93:bd:89: 3e:6a:10:d7:fc:ea:c1:d5:3b:b8:43:fc:c8:01:12:5e:71:4f: 67:0b:68:7a:75:ee:70:51:5b:0e:2c:fd:4d:7f:f0:1a:1d:47: 62:a3:22:6b:b6:8b:5f:71:aa:b0:60:dc:b6:dd:26:b4:2f:0c: 43:e8:e1:38:ef:8e:12:59:e8:b6:4b:88:14:b0:ee:d1:92:ca: 77:78:f4:ab:b0:2e:01:a0:8c:1b:bd:57:ff:41:db:8a:f7:62: da:f1:da:d8:44:1b:f2:34:af:1f:10:aa:c0:e8:35:d8:11:55: b7:6a:e7:20:2a:ee:f8:a8:28:00:9e:2d:3b:d0:ef:b8:e0:2b: 92:3f:82:8c:fc:86:c2:72:d1:f3:40:98:e0:68:53:8c:df:a5: 70:70:33:35:9e:72:54:76:dd:06:3a:e4:93:bd:4a:07:97:3b: 40:5a:cf:b8:91:f1:b8:0b:f0:e1:96:96:78:ef:67:71:58:00: 75:ca:65:95:7d:e2:76:6b:21:9e:5d:b7:cb:87:04:91:2e:31: 62:64:a4:41:e3:da:cc:ce:40:f2:cd:0f:ec:d4:69:55:b2:d7: 55:fa:be:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZueV/I63c/X7sGES/OBQk6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj Zjc2M2YwHhcNMjYwMTA4MTYwMjAyWhcNMjYwMTA5MTYwMjAyWjAzMTEwLwYDVQQD Eyg1YzZiMzc5Y2UwNDZlNmM3NGE3MTEzZjdlNGY4MGM3MmE3MzNhZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uLhG0zx2yJpWze2zINMYABsF78E 8v8uBiw1xHmXPb20JHaPj/f2vEBqw0Bw3NFSDbCacdl5rHqbqDtK9H3AtL1aSVP7 o9tYjL5MFkphGjwhuINwGxJQtajeKrpgm/H1NS8qL7SXN7LoaSRDCpb6HlR80IEW eH7welCuI6GNPieMpAJFIlYw2G0Q/mIWQxvUtnVAS84WxZ+zIzj9FYidjWmMOhsP l1eb6w6Q8hRBoP14OUL4C7hMpnVZlq1a0XMkNZvT+BP7g+4G0nDZwhrk5LHCsoJn oTkVWAOT/8Hv0ihLmHmD5g3wWdXssv/F3jn2nXs2EWK8m7MhbqRQDb5gLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxrN5zgRubHSnET9+T4DHKnM69sMB8GA1UdIwQY MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkdzG+zs o6C0AjLjARXgKLdAssAEVrty1iHCG4WmhqAAk72JPmoQ1/zqwdU7uEP8yAESXnFP ZwtoenXucFFbDiz9TX/wGh1HYqMia7aLX3GqsGDctt0mtC8MQ+jhOO+OElnotkuI FLDu0ZLKd3j0q7AuAaCMG71X/0Hbivdi2vHa2EQb8jSvHxCqwOg12BFVt2rnICru +KgoAJ4tO9DvuOArkj+CjPyGwnLR80CY4GhTjN+lcHAzNZ5yVHbdBjrkk71KB5c7 QFrPuJHxuAvw4ZaWeO9ncVgAdcpllX3idmshnl23y4cEkS4xYmSkQePazM5A8s0P 7NRpVbLXVfq+2w== -----END CERTIFICATE-----Generated at Thu Jan 8 19:32:46 2026 by rpki-client