This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json) Hash identifier: F6R0N8CCW8pgc2qvLHP7sd1HOZIcy823D008S5O139g= Subject key identifier: 57:1B:D7:68:95:8F:56:CA:4D:11:2B:FA:47:FE:E6:C9:FA:5D:06:0D Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76 Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76 Certificate serial: 019BD20D1EC50B6C6AF16F0A426F127DCF9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft Manifest number: 0FF3 Signing time: Sun 18 Jan 2026 17:00:33 +0000 Manifest this update: Sun 18 Jan 2026 17:00:33 +0000 Manifest next update: Mon 19 Jan 2026 17:00:33 +0000 Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=) 2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: KNRa3BI4uS+q+DQJRJXeaGp/pQxLU6cZYgCbov+Gu7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:0d:1e:c5:0b:6c:6a:f1:6f:0a:42:6f:12:7d:cf:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76 Validity Not Before: Jan 18 17:00:33 2026 GMT Not After : Jan 19 17:00:33 2026 GMT Subject: CN=571bd768958f56ca4d112bfa47fee6c9fa5d060d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:a0:6d:53:25:b4:ca:16:86:91:3f:60:ff: 32:4a:09:25:60:ed:28:a6:cc:41:a5:4f:d4:37:d4: b5:ed:92:11:f2:df:93:d5:42:c7:1c:e3:02:a3:36: 89:12:bd:52:d1:75:21:46:a4:06:64:2e:bf:93:f6: 19:34:59:91:e4:2e:ef:cc:b3:f3:0a:e4:88:fc:7d: 76:07:65:bc:86:c4:30:ac:c4:b9:29:35:36:4f:84: 77:88:17:2d:ad:dd:c9:6f:70:25:ad:6a:cd:71:b6: cd:67:fb:4e:34:17:1e:6e:07:43:86:de:8d:89:eb: a7:06:74:1a:a0:be:92:50:67:0b:e7:40:48:61:7f: 3a:17:90:41:5a:f2:db:be:69:cf:38:62:6e:d7:45: 36:76:91:0b:9b:a6:65:03:1e:cb:fc:50:eb:35:a1: 17:ca:15:82:38:d4:80:ea:b1:d6:5a:ca:69:dd:d7: fa:6a:da:c8:9a:08:41:0c:55:c0:b6:56:ec:73:8b: a1:0d:d8:ee:7e:b3:71:c7:73:be:63:7d:2f:8b:29: 42:25:0a:71:4f:45:0a:6e:99:52:7d:40:a2:34:1d: cb:50:0f:35:16:a2:47:2c:ab:d8:94:a0:5a:3b:48: e6:49:b3:5f:25:6e:a0:ec:e1:c5:ad:e5:46:44:cf: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1B:D7:68:95:8F:56:CA:4D:11:2B:FA:47:FE:E6:C9:FA:5D:06:0D X509v3 Authority Key Identifier: keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:34:a8:06:e0:81:bf:f1:79:1b:0e:bc:2e:77:1b:b8:25:c0: 79:02:d7:ae:50:41:07:22:55:ba:45:4b:15:da:85:cc:3e:b8: 65:7b:98:5d:bb:ea:0b:a4:80:34:da:90:f3:c8:21:59:ec:7c: 17:e4:d9:9b:7e:40:a4:17:bb:78:22:3d:b0:85:10:66:6f:b0: f2:b6:fb:43:1b:bf:e3:5b:cd:8f:2b:10:c4:a9:4b:9a:f1:c9: 26:2c:30:a5:fc:b8:53:a9:16:36:a8:12:33:18:e0:53:29:aa: f4:4c:15:15:58:25:e0:99:01:f9:2c:9e:ac:3e:0c:b3:9e:31: e2:71:c7:cf:93:4e:31:4a:c0:10:b9:0e:7d:52:3f:fc:0c:e6: 10:fe:9e:ad:6f:be:ef:cf:50:70:c8:29:4d:56:3f:46:72:7d: e2:71:7b:75:84:25:e0:80:0f:2e:88:ea:76:ab:98:08:35:0f: f0:06:c0:91:0d:47:5f:14:da:57:9f:a3:06:18:dd:b2:23:58: 89:bd:49:5e:30:58:62:96:94:d3:d8:ab:aa:8c:7d:41:bf:91: 95:e9:6f:85:b8:7f:65:3f:6a:8c:d0:e0:cf:b9:42:5e:29:2f: 7b:49:f0:01:f6:69:83:3c:84:0f:7e:e8:77:b3:d3:2e:44:42: 2e:0b:48:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvSDR7FC2xq8W8KQm8Sfc+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx ODhiNzYwHhcNMjYwMTE4MTcwMDMzWhcNMjYwMTE5MTcwMDMzWjAzMTEwLwYDVQQD Eyg1NzFiZDc2ODk1OGY1NmNhNGQxMTJiZmE0N2ZlZTZjOWZhNWQwNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIWgbVMltMoWhpE/YP8ySgklYO0o psxBpU/UN9S17ZIR8t+T1ULHHOMCozaJEr1S0XUhRqQGZC6/k/YZNFmR5C7vzLPz CuSI/H12B2W8hsQwrMS5KTU2T4R3iBctrd3Jb3AlrWrNcbbNZ/tONBcebgdDht6N ieunBnQaoL6SUGcL50BIYX86F5BBWvLbvmnPOGJu10U2dpELm6ZlAx7L/FDrNaEX yhWCONSA6rHWWspp3df6atrImghBDFXAtlbsc4uhDdjufrNxx3O+Y30viylCJQpx T0UKbplSfUCiNB3LUA81FqJHLKvYlKBaO0jmSbNfJW6g7OHFreVGRM/ATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcb12iVj1bKTREr+kf+5sn6XQYNMB8GA1UdIwQY MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzSoBuCB v/F5Gw68LncbuCXAeQLXrlBBByJVukVLFdqFzD64ZXuYXbvqC6SANNqQ88ghWex8 F+TZm35ApBe7eCI9sIUQZm+w8rb7Qxu/41vNjysQxKlLmvHJJiwwpfy4U6kWNqgS MxjgUymq9EwVFVgl4JkB+SyerD4Ms54x4nHHz5NOMUrAELkOfVI//AzmEP6erW++ 789QcMgpTVY/RnJ94nF7dYQl4IAPLojqdquYCDUP8AbAkQ1HXxTaV5+jBhjdsiNY ib1JXjBYYpaU09irqox9Qb+Rlelvhbh/ZT9qjNDgz7lCXikve0nwAfZpgzyED37o d7PTLkRCLgtIpg== -----END CERTIFICATE-----Generated at Sun Jan 18 22:26:20 2026 by rpki-client