This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json) Hash identifier: YpYUVTD+zHTV0ZCcUmGk/BlJ4y2WeqDOZ5gAouQ1kZY= Subject key identifier: 0E:65:DE:14:87:A5:2A:28:8F:42:89:38:AA:81:66:0B:E7:ED:A7:89 Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Certificate serial: 019BD9C7C980F4A01881ED90F009E4323ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft Manifest number: 0AD5 Signing time: Tue 20 Jan 2026 05:01:47 +0000 Manifest this update: Tue 20 Jan 2026 05:01:47 +0000 Manifest next update: Wed 21 Jan 2026 05:01:47 +0000 Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=) 2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: GvdjVOjor1BB0URhq7pnZZwl9OZrb7Nd3M2sNMIlEYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:c9:80:f4:a0:18:81:ed:90:f0:09:e4:32:3a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Validity Not Before: Jan 20 05:01:47 2026 GMT Not After : Jan 21 05:01:47 2026 GMT Subject: CN=0e65de1487a52a288f428938aa81660be7eda789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:00:35:34:fd:ea:a6:9b:94:81:89:db:27:b4: 53:2e:c7:cd:16:fc:37:a8:3b:46:49:70:12:08:e2: 3a:25:4d:19:7e:bc:49:4e:cb:93:d5:9f:4d:9b:f3: 70:32:e3:b3:93:db:32:0a:b0:79:4b:2d:16:8c:2f: 7e:cf:5c:d8:df:46:90:f4:e1:4a:4f:7a:a1:1c:28: ef:09:a9:65:40:59:81:7a:b4:82:c7:cb:5e:67:93: 00:ba:d4:ec:4e:a9:a4:ff:7d:17:72:e1:a6:af:d0: d7:92:4f:3f:71:c5:57:59:08:7c:d7:b5:4a:b3:5f: a1:57:5a:3c:cb:91:c6:76:a7:4f:ee:76:1e:7f:7a: 99:34:2c:30:f9:80:14:e7:ba:0f:de:17:77:c0:e2: 01:d1:e0:d7:92:53:3c:8e:11:3a:72:48:0e:ff:80: 81:c3:ff:ba:0a:e1:2c:4e:61:03:cc:20:bc:c0:4b: 83:d4:a4:0e:cb:34:a2:8a:1e:1f:04:ee:5c:1d:a3: 7a:14:12:30:5d:d2:e8:d3:68:d3:42:76:c4:fa:fc: 23:2a:a4:d4:78:cb:49:6b:cb:25:82:c4:ed:05:7a: d3:46:59:6e:49:80:8d:89:2f:2c:41:0a:f7:cf:86: 94:c5:f2:69:39:0f:6f:aa:4d:b7:7f:6e:95:0f:86: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:65:DE:14:87:A5:2A:28:8F:42:89:38:AA:81:66:0B:E7:ED:A7:89 X509v3 Authority Key Identifier: keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:e7:28:01:06:bb:4c:55:73:15:cb:c4:0d:06:4a:c5:cd: a7:f1:9c:2e:b4:62:c1:a3:d0:00:c9:c7:04:40:b2:6f:31:97: 07:47:54:6b:22:f8:d2:c9:1b:57:24:bd:1e:ab:1d:9c:93:e9: ac:9b:3b:5d:2a:2c:08:32:dd:97:aa:cc:89:f9:cc:37:06:ff: 86:d7:04:f8:8f:d9:2f:f7:2e:50:4a:27:ae:cf:c4:69:5a:47: e3:42:74:65:55:c8:43:2e:d4:56:45:a5:51:ba:c1:f7:c2:81: 6c:db:f1:c8:b4:f9:c7:cd:bc:48:bc:1a:31:d0:cd:21:16:99: 0f:f4:03:3b:19:3a:a0:d9:37:78:d2:17:a0:e0:6e:78:b9:62: 3a:f8:d9:41:99:2e:73:5d:24:c9:8d:d7:19:09:b7:e5:31:af: b3:6e:05:5a:0f:69:06:04:7f:60:21:50:9a:da:c9:69:17:96: 08:05:e2:cb:02:db:ce:92:31:9f:a7:9c:18:0a:e6:1b:96:45: c9:de:b2:44:a4:47:04:6f:ce:aa:35:5f:df:cd:5c:1e:b9:43: 73:56:60:26:ef:17:37:39:50:56:7b:aa:12:11:e1:ef:da:5a: 83:26:ce:8e:9c:8e:45:2f:cf:2f:9e:0b:ba:a0:f8:48:86:cb: 78:64:2f:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZx8mA9KAYge2Q8AnkMjrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk YTAwZjAwHhcNMjYwMTIwMDUwMTQ3WhcNMjYwMTIxMDUwMTQ3WjAzMTEwLwYDVQQD EygwZTY1ZGUxNDg3YTUyYTI4OGY0Mjg5MzhhYTgxNjYwYmU3ZWRhNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AA1NP3qppuUgYnbJ7RTLsfNFvw3 qDtGSXASCOI6JU0ZfrxJTsuT1Z9Nm/NwMuOzk9syCrB5Sy0WjC9+z1zY30aQ9OFK T3qhHCjvCallQFmBerSCx8teZ5MAutTsTqmk/30XcuGmr9DXkk8/ccVXWQh817VK s1+hV1o8y5HGdqdP7nYef3qZNCww+YAU57oP3hd3wOIB0eDXklM8jhE6ckgO/4CB w/+6CuEsTmEDzCC8wEuD1KQOyzSiih4fBO5cHaN6FBIwXdLo02jTQnbE+vwjKqTU eMtJa8slgsTtBXrTRlluSYCNiS8sQQr3z4aUxfJpOQ9vqk23f26VD4ZrWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5l3hSHpSooj0KJOKqBZgvn7aeJMB8GA1UdIwQY MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrfnKAEG u0xVcxXLxA0GSsXNp/GcLrRiwaPQAMnHBECybzGXB0dUayL40skbVyS9HqsdnJPp rJs7XSosCDLdl6rMifnMNwb/htcE+I/ZL/cuUEonrs/EaVpH40J0ZVXIQy7UVkWl UbrB98KBbNvxyLT5x828SLwaMdDNIRaZD/QDOxk6oNk3eNIXoOBueLliOvjZQZku c10kyY3XGQm35TGvs24FWg9pBgR/YCFQmtrJaReWCAXiywLbzpIxn6ecGArmG5ZF yd6yRKRHBG/OqjVf381cHrlDc1ZgJu8XNzlQVnuqEhHh79pagybOjpyORS/PL54L uqD4SIbLeGQvBA== -----END CERTIFICATE-----Generated at Tue Jan 20 10:59:51 2026 by rpki-client