This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json) Hash identifier: vq+LvaAN36q3U72qqm5iHBPSX74rX+Jb084BUGJtKB4= Subject key identifier: 53:6D:D1:76:E4:8E:FF:7F:07:21:C2:71:B8:37:AE:69:EF:1C:03:EC Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Certificate serial: 019BFD6547E2021BDA45A70AC6D8A3DF36B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft Manifest number: 17AD Signing time: Tue 27 Jan 2026 03:00:31 +0000 Manifest this update: Tue 27 Jan 2026 03:00:31 +0000 Manifest next update: Wed 28 Jan 2026 03:00:31 +0000 Files and hashes: 1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=) 2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: GQaONIoln/5+nKE11+OsG+F9+qSIuN2VAqIO8Zro6u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:47:e2:02:1b:da:45:a7:0a:c6:d8:a3:df:36:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Validity Not Before: Jan 27 03:00:31 2026 GMT Not After : Jan 28 03:00:31 2026 GMT Subject: CN=536dd176e48eff7f0721c271b837ae69ef1c03ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:5d:2e:ac:af:39:48:6a:fd:b3:58:af:59: 4a:c9:d7:74:e9:bf:18:14:89:30:03:c4:f7:ba:8a: 53:ed:82:a1:5d:af:94:82:0b:e1:f4:d6:68:a2:1e: cb:ca:f2:54:85:ec:2b:3e:da:eb:5b:a8:f3:a0:c3: 45:0e:60:c9:96:89:b8:a7:b9:39:c0:38:c8:ba:22: 2a:a9:72:6a:12:95:b9:d5:20:e3:c8:ca:e3:1a:e8: 05:f8:62:7c:b3:c1:7c:4e:c9:5e:ce:c9:43:6f:66: e1:a7:c6:e3:53:21:c9:56:37:b8:c2:22:43:dd:43: bb:71:2d:c6:5c:6a:a6:a7:b3:d4:82:93:c9:c4:9a: 08:e1:34:40:0d:8e:e1:27:b2:5f:7c:96:5d:2d:8b: ae:e7:41:e5:0d:6c:1d:86:79:b3:2f:86:cf:7a:e6: f0:fe:f6:51:9d:84:62:1e:fc:0e:bc:2f:52:07:a5: 25:d7:0e:4e:03:d8:e7:d3:94:c2:2f:5f:cf:3c:f9: 09:33:59:39:8b:33:75:45:43:e1:8a:da:19:92:e9: fb:f5:e5:f3:7d:ed:b1:df:0d:65:b2:19:13:67:af: f1:cd:bb:1b:1c:5f:40:3b:2a:23:1f:f1:bd:0a:d8: 45:77:1c:49:b5:38:5b:1b:a9:a6:24:6a:7f:1d:e2: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6D:D1:76:E4:8E:FF:7F:07:21:C2:71:B8:37:AE:69:EF:1C:03:EC X509v3 Authority Key Identifier: keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4d:1f:93:d5:9b:de:dd:44:42:67:7f:7c:fe:c8:89:f8:0c: 2f:51:62:96:4d:61:8c:42:d9:21:99:f3:d2:6a:55:08:9d:77: c2:0c:8d:66:07:ce:c2:6a:b1:e7:61:40:21:07:04:61:83:34: 0b:c2:fc:8b:f1:e4:58:99:fd:73:08:68:0b:21:7b:ec:d7:eb: af:6e:88:5c:11:43:63:8f:58:e4:07:e3:59:12:9d:91:95:a5: 82:d0:32:a7:f9:82:8d:3e:fb:ff:bb:22:ba:14:24:79:25:f8: 6b:e2:d1:8b:2f:d2:db:15:41:16:bd:1b:16:40:2e:6e:59:77: c4:c5:64:15:f2:17:3f:15:5c:96:48:51:db:4d:d7:a3:4d:66: 39:ad:dc:2e:a2:a5:21:81:2a:7e:80:4c:d2:53:fb:52:4f:43: 3d:1f:84:01:5f:d4:37:ad:46:89:64:b7:b3:4e:88:bb:4e:fc: 1d:71:65:94:90:43:a6:61:37:36:46:24:d7:5b:92:60:58:57: f6:b2:2d:0d:9b:44:85:94:4f:2b:17:dc:ea:7a:1d:20:f0:c4: 53:c0:77:e7:e7:19:ef:26:8c:a0:9f:52:3e:57:21:30:27:32: 44:63:5a:1b:d9:65:96:ef:ba:7c:8d:cc:eb:3b:f7:52:5d:8e: af:a2:59:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZUfiAhvaRacKxtij3zazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWJlYjAxOTJkMGQzNDZhNWU2ODU4YWE3NDRiMDQzNGZl ZDMxODkwHhcNMjYwMTI3MDMwMDMxWhcNMjYwMTI4MDMwMDMxWjAzMTEwLwYDVQQD Eyg1MzZkZDE3NmU0OGVmZjdmMDcyMWMyNzFiODM3YWU2OWVmMWMwM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59dLqyvOUhq/bNYr1lKydd06b8Y FIkwA8T3uopT7YKhXa+Uggvh9NZooh7LyvJUhewrPtrrW6jzoMNFDmDJlom4p7k5 wDjIuiIqqXJqEpW51SDjyMrjGugF+GJ8s8F8TslezslDb2bhp8bjUyHJVje4wiJD 3UO7cS3GXGqmp7PUgpPJxJoI4TRADY7hJ7JffJZdLYuu50HlDWwdhnmzL4bPeubw /vZRnYRiHvwOvC9SB6Ul1w5OA9jn05TCL1/PPPkJM1k5izN1RUPhitoZkun79eXz fe2x3w1lshkTZ6/xzbsbHF9AOyojH/G9CthFdxxJtThbG6mmJGp/HeKLpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNt0Xbkjv9/ByHCcbg3rmnvHAPsMB8GA1UdIwQY MBaAFPyb6wGS0NNGpeaFiqdEsENP7TGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTIt NmI3MDE2OWNkYTFiLzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTItNmI3MDE2OWNkYTFi LzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE0fk9Wb 3t1EQmd/fP7IifgML1Filk1hjELZIZnz0mpVCJ13wgyNZgfOwmqx52FAIQcEYYM0 C8L8i/HkWJn9cwhoCyF77Nfrr26IXBFDY49Y5AfjWRKdkZWlgtAyp/mCjT77/7si uhQkeSX4a+LRiy/S2xVBFr0bFkAubll3xMVkFfIXPxVclkhR203Xo01mOa3cLqKl IYEqfoBM0lP7Uk9DPR+EAV/UN61GiWS3s06Iu078HXFllJBDpmE3NkYk11uSYFhX 9rItDZtEhZRPKxfc6nodIPDEU8B35+cZ7yaMoJ9SPlchMCcyRGNaG9lllu+6fI3M 6zv3Ul2Or6JZ0g== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:41 2026 by rpki-client