This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json) Hash identifier: y3z/s6LyKYFL7CmsnGSKwqBU1pRGJq/sAFfIdOCTrrA= Subject key identifier: 33:6C:A4:6F:14:36:78:F7:3C:82:8C:5C:F0:F1:FF:4A:1B:B7:CC:31 Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd Certificate serial: 019BFB407ADBD0723AAF021BE31B93E65CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft Manifest number: 1745 Signing time: Mon 26 Jan 2026 17:01:05 +0000 Manifest this update: Mon 26 Jan 2026 17:01:05 +0000 Manifest next update: Tue 27 Jan 2026 17:01:05 +0000 Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: yqIEH1ol2MJcRh4OONn1sD4lSW7SY6ymhSYazlSl3pQ=) 2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:7a:db:d0:72:3a:af:02:1b:e3:1b:93:e6:5c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd Validity Not Before: Jan 26 17:01:05 2026 GMT Not After : Jan 27 17:01:05 2026 GMT Subject: CN=336ca46f143678f73c828c5cf0f1ff4a1bb7cc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:4f:71:12:62:1c:40:f3:31:5f:5e:5f:5c: 92:51:7f:fd:ea:f0:71:83:74:4f:f5:13:19:97:6b: 82:fc:c6:d2:c0:60:0f:fd:a1:ae:f8:f0:5a:e0:30: 34:de:b1:b5:7c:00:41:8e:7e:71:3d:41:e3:88:d5: bf:4d:d5:00:3d:48:47:d2:61:0b:86:1e:f1:53:d8: 62:13:be:d9:f3:92:fe:90:d5:d5:04:07:9b:e5:f6: 6d:81:c0:a5:ba:ad:af:5c:f5:ac:1e:8d:68:db:81: d3:87:72:63:1b:16:90:dc:43:8b:c3:f2:8a:6f:5c: 73:96:cb:92:d4:a7:9b:10:80:87:84:8c:75:8e:e8: 5d:4c:2a:f7:97:ff:cb:9f:83:ce:f3:19:97:87:dd: 8c:fe:52:cf:2b:80:5c:7a:c6:79:67:ad:f8:df:78: 69:fc:e7:8c:87:81:15:95:ff:46:6d:bf:54:d4:c4: 47:22:93:77:d8:d4:8b:be:5b:a0:20:3a:89:c3:e5: 68:d4:46:71:b1:88:33:4e:23:31:0c:b4:45:d9:2b: 3e:14:a7:a6:61:04:7d:bb:16:2b:9b:0e:0b:b8:7a: 54:68:05:95:c2:e0:18:2f:8a:5a:47:7b:23:2e:ac: 66:01:be:ac:65:88:87:09:34:9f:86:8e:41:79:a2: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6C:A4:6F:14:36:78:F7:3C:82:8C:5C:F0:F1:FF:4A:1B:B7:CC:31 X509v3 Authority Key Identifier: keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:47:52:5b:6f:ce:c0:11:79:5c:83:ca:07:d5:aa:c3:34:a2: b4:cb:b6:17:6c:ea:41:1d:a8:a2:3f:f4:11:62:b0:3c:bc:7b: c2:ba:03:23:48:6a:1d:63:a4:20:60:51:cc:e7:d4:a8:dc:af: f4:9d:e8:bd:b7:8f:fe:c8:eb:66:3b:1b:3d:c4:f1:54:cc:31: 92:54:43:8c:61:44:ec:9e:23:3b:d5:f0:f0:0f:30:55:31:c2: c4:1a:7d:f3:58:82:73:f7:db:a9:a4:bc:06:7b:d6:b9:1e:f0: 76:1b:d4:b3:61:c2:31:7c:4c:39:4d:2a:2d:8f:5b:a9:99:97: d4:2e:ec:e6:e9:f5:06:d7:af:d8:2f:14:4d:fc:82:fa:41:ec: 9d:6f:70:0a:49:d8:b6:1f:88:d5:44:31:d3:71:2d:7b:f5:79: 27:fd:e7:35:61:a3:64:26:49:6f:ab:75:10:82:ae:a1:22:8e: 66:32:35:d7:09:b5:7d:4c:64:7e:19:24:09:3a:a5:da:7e:ea: 51:51:26:ce:a4:e7:86:c3:03:7b:42:f9:3c:b3:58:ca:05:ca: da:4f:27:18:ac:95:81:09:31:32:ec:43:35:e1:56:78:be:23: 8e:2f:82:9c:b0:fc:ea:19:89:d5:d3:51:24:ce:e4:8c:bd:90: 6b:7a:40:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QHrb0HI6rwIb4xuT5ly3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5 MzAyZmQwHhcNMjYwMTI2MTcwMTA1WhcNMjYwMTI3MTcwMTA1WjAzMTEwLwYDVQQD EygzMzZjYTQ2ZjE0MzY3OGY3M2M4MjhjNWNmMGYxZmY0YTFiYjdjYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzshPcRJiHEDzMV9eX1ySUX/96vBx g3RP9RMZl2uC/MbSwGAP/aGu+PBa4DA03rG1fABBjn5xPUHjiNW/TdUAPUhH0mEL hh7xU9hiE77Z85L+kNXVBAeb5fZtgcCluq2vXPWsHo1o24HTh3JjGxaQ3EOLw/KK b1xzlsuS1KebEICHhIx1juhdTCr3l//Ln4PO8xmXh92M/lLPK4BcesZ5Z63433hp /OeMh4EVlf9Gbb9U1MRHIpN32NSLvlugIDqJw+Vo1EZxsYgzTiMxDLRF2Ss+FKem YQR9uxYrmw4LuHpUaAWVwuAYL4paR3sjLqxmAb6sZYiHCTSfho5BeaJ+9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNspG8UNnj3PIKMXPDx/0obt8wxMB8GA1UdIwQY MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5 LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0dSW2/O wBF5XIPKB9WqwzSitMu2F2zqQR2ooj/0EWKwPLx7wroDI0hqHWOkIGBRzOfUqNyv 9J3ovbeP/sjrZjsbPcTxVMwxklRDjGFE7J4jO9Xw8A8wVTHCxBp981iCc/fbqaS8 BnvWuR7wdhvUs2HCMXxMOU0qLY9bqZmX1C7s5un1Btev2C8UTfyC+kHsnW9wCknY th+I1UQx03Ete/V5J/3nNWGjZCZJb6t1EIKuoSKOZjI11wm1fUxkfhkkCTql2n7q UVEmzqTnhsMDe0L5PLNYygXK2k8nGKyVgQkxMuxDNeFWeL4jji+CnLD86hmJ1dNR JM7kjL2Qa3pAnQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:49:43 2026 by rpki-client