This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json) Hash identifier: 5CzZPTmthoYy6rivLSH9/uBZhNHFZljj2K4W2eLlvTU= Subject key identifier: E7:2E:A3:27:6E:67:4D:B3:80:A2:20:BC:40:24:F3:3A:8A:48:10:C6 Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4 Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4 Certificate serial: 019BF7D1838B1F8C79A04929640FFC869751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft Manifest number: 0FA7 Signing time: Mon 26 Jan 2026 01:01:01 +0000 Manifest this update: Mon 26 Jan 2026 01:01:01 +0000 Manifest next update: Tue 27 Jan 2026 01:01:01 +0000 Files and hashes: 1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: gMdaSsnUKqoVKjWTycNAuliOrSFB44MXjvVtLkluoqc=) 2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:83:8b:1f:8c:79:a0:49:29:64:0f:fc:86:97:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4 Validity Not Before: Jan 26 01:01:01 2026 GMT Not After : Jan 27 01:01:01 2026 GMT Subject: CN=e72ea3276e674db380a220bc4024f33a8a4810c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:86:d1:af:15:a2:cf:26:81:73:4f:02:ed: 7c:fd:d4:f8:87:96:93:f8:db:7d:ad:87:65:2a:ee: fa:1a:d0:34:fb:d2:3c:fe:4b:40:0e:1c:13:5d:f8: bb:7f:0d:67:0c:47:36:32:75:ad:15:60:59:8e:02: bb:e9:8d:3c:dd:b5:0b:64:e6:73:d0:70:90:f6:6e: 8a:fc:23:23:aa:c6:9f:ea:6b:c4:3b:98:84:d5:ec: d5:ef:7f:cc:8e:be:ae:da:a5:50:96:3c:15:e4:84: 2c:49:72:01:18:ee:ab:6f:86:d1:e9:62:16:3c:9b: 4d:9e:31:80:06:52:06:92:6f:7d:7c:5f:85:c0:0f: eb:d7:6b:70:47:88:b5:9b:9b:ad:5c:4c:dc:77:cc: 9b:23:fe:de:2d:81:66:6a:a9:58:79:47:b9:cd:75: 03:dc:24:07:8a:b6:3a:3e:85:0f:4f:fd:5c:2b:d2: 95:e6:07:af:b8:d3:8d:8c:85:fd:0c:b9:73:48:6a: b0:46:5f:a2:12:69:52:40:8b:96:db:9d:14:32:9d: c3:a2:49:31:ae:e2:be:6d:20:e8:16:cb:98:87:1a: cf:a8:8c:51:a6:79:d2:b3:43:e5:13:74:af:b9:f0: 62:ce:4d:f9:0e:33:63:bb:9a:34:0f:b8:c7:7f:d0: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:A3:27:6E:67:4D:B3:80:A2:20:BC:40:24:F3:3A:8A:48:10:C6 X509v3 Authority Key Identifier: keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:39:52:4a:04:90:2a:21:54:bb:ed:92:0c:da:bd:8f:93:b8: 98:c0:67:99:1a:59:c7:ff:6c:d3:f5:c1:05:2d:86:0f:a4:0f: 42:cd:ef:69:42:c5:42:80:3f:18:06:56:6c:32:49:bb:85:f5: 5d:fd:ea:e2:5e:4f:41:b5:4a:07:1a:6a:4e:6e:48:3c:63:0d: e2:8e:1a:5b:4e:3e:cd:0a:89:14:b6:e2:c3:39:52:85:bd:dd: 0e:ca:72:20:67:7c:51:aa:28:46:44:17:09:39:62:bf:49:18: b3:0f:c8:0a:05:ac:d5:6d:1c:85:b0:13:38:2b:ef:a8:bd:83: 61:3a:1d:f7:e6:94:c8:54:81:0d:a1:93:ce:18:46:e4:f1:6b: ea:83:71:ad:1a:da:66:61:6a:02:9d:5d:40:63:52:da:d6:db: 90:44:b9:70:c7:4a:4f:e3:24:1d:4f:73:27:ed:dc:22:08:84: a5:09:e6:c6:d6:95:df:c7:e8:98:f2:95:d3:79:f7:11:6e:5b: 5d:66:a9:5a:85:b3:8c:49:44:8a:f2:88:a6:25:5a:d3:86:83: 02:10:43:70:ee:5a:eb:8d:ae:5e:9d:66:df:23:5b:1b:ff:ea: cf:f0:06:ac:06:0c:ae:20:c3:50:53:ca:e1:2b:1b:0f:1b:b1: 87:7a:a2:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30YOLH4x5oEkpZA/8hpdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDhhZjdlNTZjODBkMThkYzk2OGY0ZGJjZWM4MTNmODVl YTMwYTQwHhcNMjYwMTI2MDEwMTAxWhcNMjYwMTI3MDEwMTAxWjAzMTEwLwYDVQQD EyhlNzJlYTMyNzZlNjc0ZGIzODBhMjIwYmM0MDI0ZjMzYThhNDgxMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fCG0a8Vos8mgXNPAu18/dT4h5aT +Nt9rYdlKu76GtA0+9I8/ktADhwTXfi7fw1nDEc2MnWtFWBZjgK76Y083bULZOZz 0HCQ9m6K/CMjqsaf6mvEO5iE1ezV73/Mjr6u2qVQljwV5IQsSXIBGO6rb4bR6WIW PJtNnjGABlIGkm99fF+FwA/r12twR4i1m5utXEzcd8ybI/7eLYFmaqlYeUe5zXUD 3CQHirY6PoUPT/1cK9KV5gevuNONjIX9DLlzSGqwRl+iEmlSQIuW250UMp3Dokkx ruK+bSDoFsuYhxrPqIxRpnnSs0PlE3SvufBizk35DjNju5o0D7jHf9DBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcuoyduZ02zgKIgvEAk8zqKSBDGMB8GA1UdIwQY MBaAFCfYr35WyA0Y3JaPTbzsgT+F6jCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUt MDIxNWFjYTFiOTA5LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUtMDIxNWFjYTFiOTA5 LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDlSSgSQ KiFUu+2SDNq9j5O4mMBnmRpZx/9s0/XBBS2GD6QPQs3vaULFQoA/GAZWbDJJu4X1 Xf3q4l5PQbVKBxpqTm5IPGMN4o4aW04+zQqJFLbiwzlShb3dDspyIGd8UaooRkQX CTliv0kYsw/ICgWs1W0chbATOCvvqL2DYTod9+aUyFSBDaGTzhhG5PFr6oNxrRra ZmFqAp1dQGNS2tbbkES5cMdKT+MkHU9zJ+3cIgiEpQnmxtaV38fomPKV03n3EW5b XWapWoWzjElEivKIpiVa04aDAhBDcO5a642uXp1m3yNbG//qz/AGrAYMriDDUFPK 4SsbDxuxh3qiOA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:46 2026 by rpki-client