This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json) Hash identifier: dsPFObW8sSypIxWJ7zPX1yK1uV+j4sEUVZ9RiPA9ItQ= Subject key identifier: 7F:B7:93:E0:0C:66:EE:0E:E9:C0:C4:56:DC:30:AB:14:F7:32:5E:E4 Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9 Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9 Certificate serial: 019BFAD28BA7164282AF35A9594505AAE8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft Manifest number: 0ED2 Signing time: Mon 26 Jan 2026 15:01:00 +0000 Manifest this update: Mon 26 Jan 2026 15:01:00 +0000 Manifest next update: Tue 27 Jan 2026 15:01:00 +0000 Files and hashes: 1: 5wC3q6B54eAcdpMGYy8JKiEzECU.roa (hash: YD5/mldtyyZxQxTmZPfE5GxbPet+CghI1yjmDd9E8V0=) 2: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: Wxe77yrlwJ16DgCDHe+PrBIFt8rK2dQ2xZScIS2N+Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:8b:a7:16:42:82:af:35:a9:59:45:05:aa:e8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9 Validity Not Before: Jan 26 15:01:00 2026 GMT Not After : Jan 27 15:01:00 2026 GMT Subject: CN=7fb793e00c66ee0ee9c0c456dc30ab14f7325ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:bb:98:f2:a2:ff:5c:4f:31:b6:48:45:d2: 25:c4:22:bb:12:68:ee:9c:2a:b0:ab:42:b8:3e:d4: 26:ea:7a:87:36:5b:35:97:80:d1:c0:f7:3c:d5:a9: e1:4d:a9:49:44:d5:ad:32:73:69:62:3a:5d:f0:6c: e1:97:f2:d8:1f:37:6c:9f:ad:a8:fa:6a:18:52:26: d8:b5:57:5f:37:cc:60:e5:6d:ca:f5:f6:10:be:b7: de:13:3a:a6:7f:ef:69:87:c5:ef:78:5e:e5:d9:0d: 24:91:06:54:68:27:7f:dc:75:95:d8:cc:7d:4c:c4: 2b:1c:73:5a:62:87:c6:49:6e:b2:c9:4a:7e:57:35: fe:cb:0a:29:d3:f0:d6:52:d1:3a:b2:18:e5:0d:68: 96:23:f8:70:2c:c7:9b:ad:5e:4d:88:2c:44:eb:ce: c3:03:75:04:c6:6f:47:11:34:4f:30:b8:69:69:79: 91:bc:e7:78:79:50:d8:83:41:f2:ef:1b:c7:fc:65: a0:ed:ce:d2:cd:a2:2d:c4:79:3c:68:20:5d:9d:6b: 82:9c:b8:83:8a:35:5c:a7:5b:ae:cb:c0:3e:33:6a: fb:4c:e2:46:fa:f7:ac:d6:f0:96:ec:e5:a2:87:42: 27:86:fe:e7:c7:86:d3:5c:e4:e7:87:14:b6:d3:29: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B7:93:E0:0C:66:EE:0E:E9:C0:C4:56:DC:30:AB:14:F7:32:5E:E4 X509v3 Authority Key Identifier: keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1c:fd:15:16:05:69:76:78:82:46:14:b5:fc:f6:c8:d1:eb: 8a:b0:1b:6f:cd:6f:3a:11:ae:02:86:c0:54:de:5e:1d:90:1e: 2b:3a:bf:f9:b2:61:fa:29:e1:64:1f:f6:09:05:f2:b1:bb:83: 9d:b7:78:a9:6d:49:6e:3c:bf:2b:e9:45:f1:1a:77:f2:f4:a1: 48:44:ab:5d:63:1e:8d:62:89:a2:49:3e:7f:eb:ff:9d:6a:ef: 19:8e:ba:8b:73:88:7e:6b:90:76:61:e8:d9:41:a1:62:58:8d: cd:17:22:e1:4f:66:b5:ec:c3:43:2b:6d:59:52:23:e3:a3:ad: 1c:32:00:c5:ef:c0:b1:65:79:55:75:74:58:e1:26:3d:8e:bc: d2:ed:26:4c:4e:80:fa:d8:28:d5:dc:aa:62:93:83:a9:c5:d7: ec:a5:8a:db:05:a7:ec:1f:9e:e0:54:29:d1:3d:20:35:1b:73: a3:49:ae:84:7f:c5:79:b7:80:91:78:72:e8:b9:55:91:0b:85: 71:17:9d:ff:51:84:83:f4:1b:d1:be:10:98:4c:8f:84:33:91: 8e:d5:85:8b:23:d0:73:b0:13:5f:9d:cd:21:a8:a6:fa:b7:a2: 29:68:b2:26:da:f8:fc:00:16:f8:53:9f:81:f5:c1:ac:2f:5d: 77:d7:e9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60ounFkKCrzWpWUUFquizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk NzNiZDkwHhcNMjYwMTI2MTUwMTAwWhcNMjYwMTI3MTUwMTAwWjAzMTEwLwYDVQQD Eyg3ZmI3OTNlMDBjNjZlZTBlZTljMGM0NTZkYzMwYWIxNGY3MzI1ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswu7mPKi/1xPMbZIRdIlxCK7Emju nCqwq0K4PtQm6nqHNls1l4DRwPc81anhTalJRNWtMnNpYjpd8Gzhl/LYHzdsn62o +moYUibYtVdfN8xg5W3K9fYQvrfeEzqmf+9ph8XveF7l2Q0kkQZUaCd/3HWV2Mx9 TMQrHHNaYofGSW6yyUp+VzX+ywop0/DWUtE6shjlDWiWI/hwLMebrV5NiCxE687D A3UExm9HETRPMLhpaXmRvOd4eVDYg0Hy7xvH/GWg7c7SzaItxHk8aCBdnWuCnLiD ijVcp1uuy8A+M2r7TOJG+ves1vCW7OWih0Inhv7nx4bTXOTnhxS20ylVSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+3k+AMZu4O6cDEVtwwqxT3Ml7kMB8GA1UdIwQY MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt NGIwOWJkOGVkMDRhLzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBz9FRYF aXZ4gkYUtfz2yNHrirAbb81vOhGuAobAVN5eHZAeKzq/+bJh+inhZB/2CQXysbuD nbd4qW1Jbjy/K+lF8Rp38vShSESrXWMejWKJokk+f+v/nWrvGY66i3OIfmuQdmHo 2UGhYliNzRci4U9mtezDQyttWVIj46OtHDIAxe/AsWV5VXV0WOEmPY680u0mTE6A +tgo1dyqYpODqcXX7KWK2wWn7B+e4FQp0T0gNRtzo0muhH/FebeAkXhy6LlVkQuF cRed/1GEg/Qb0b4QmEyPhDORjtWFiyPQc7ATX53NIaim+reiKWiyJtr4/AAW+FOf gfXBrC9dd9fpoA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:27 2026 by rpki-client