This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json) Hash identifier: e7e9vLdJ7OS+lEPZGrCyH+Dp/VUHes9LiZNLMXkIyb4= Subject key identifier: 09:BA:63:97:25:FD:FF:B7:D2:9B:72:07:F3:57:25:03:DE:30:62:3A Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611 Certificate serial: 019BFA2D6F45CB2603B542D1D61B0EE31E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 12:00:40 +0000 Manifest this update: Mon 26 Jan 2026 12:00:40 +0000 Manifest next update: Tue 27 Jan 2026 12:00:40 +0000 Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: ErAb6m4XZT7Ldbk2L29y71eTZHB9OPBEKThSrmqwdRk=) 2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:6f:45:cb:26:03:b5:42:d1:d6:1b:0e:e3:1e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256be176b313e1a8a050f670af576771b655d611 Validity Not Before: Jan 26 12:00:40 2026 GMT Not After : Jan 27 12:00:40 2026 GMT Subject: CN=09ba639725fdffb7d29b7207f3572503de30623a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:48:af:d4:7f:a9:8c:76:3e:94:f7:10:d4:84: b4:b9:a9:64:cf:b7:35:21:b5:f1:12:13:6f:5d:95: da:7b:e3:28:aa:7a:37:06:9a:ff:13:42:e8:53:ee: 87:46:15:00:db:7a:fb:2d:69:07:db:79:6c:83:c0: dc:3c:88:bc:6e:9d:1a:8d:f4:c5:52:e2:13:f6:ab: 3d:b4:a4:c3:76:87:b5:5c:d6:5d:1a:b1:1f:94:89: 7e:e0:9a:6f:30:1e:77:93:32:f5:99:e7:ca:19:48: 32:36:9e:07:ac:a9:62:fd:2b:c3:72:82:51:d0:7e: 91:3a:c7:fd:88:40:0d:35:df:1e:19:86:98:0d:1e: 5c:56:54:3b:ec:c1:d9:51:ed:30:13:ba:1d:8d:bb: fc:9e:cf:78:28:6f:b3:71:9f:32:b8:66:59:5a:35: e4:88:2f:05:3e:b6:af:83:a0:14:e8:af:e1:58:f1: c6:06:b9:88:a1:64:ea:19:08:94:ca:6a:cf:df:ea: d7:ea:27:44:86:0f:e1:41:bc:0c:9b:86:40:2c:15: 96:62:a3:3f:30:af:73:35:f1:5c:81:65:8a:37:3a: 8e:ee:09:6e:41:2d:18:06:9b:60:6c:7d:3f:dd:45: 60:20:cd:ac:3b:28:91:f2:d8:29:05:b1:98:f2:cf: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BA:63:97:25:FD:FF:B7:D2:9B:72:07:F3:57:25:03:DE:30:62:3A X509v3 Authority Key Identifier: keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:32:6f:ff:d0:6a:73:bc:db:cf:1f:21:50:b8:69:e8:ca:5a: b8:34:a3:85:c6:98:b6:a2:27:af:c9:84:80:66:b3:77:14:0b: 21:4a:6d:df:7e:c0:40:4c:9f:1b:c7:c1:13:c1:d0:7a:0f:f0: ed:d6:d9:a1:58:14:d8:7b:ab:fc:35:47:5d:8c:6e:6e:19:c1: c9:cd:76:1b:74:7d:b2:2d:e8:e4:26:13:24:4b:ea:99:1d:f9: 16:69:2c:75:dc:16:a1:3c:0c:c3:1d:87:fe:44:e2:b4:4e:ef: 72:3b:93:a4:c9:14:3b:a0:00:9c:38:ba:6c:be:f8:39:2c:d5: ca:43:23:bb:ab:09:f7:d3:73:96:53:6d:8e:06:2c:69:df:e3: 33:89:fe:91:ff:c7:65:53:c6:98:b9:6c:66:0f:3d:98:e0:9e: 1e:6b:5e:14:af:18:d6:e9:36:ae:80:ff:6a:5c:8e:62:67:db: f8:f7:27:99:82:7b:47:b2:b0:c8:7e:0c:17:e4:f2:df:30:89: 95:5f:85:71:9b:df:85:c1:d9:f1:77:42:13:10:2b:5c:89:7c: 39:e6:4b:87:31:6d:9d:90:87:3b:3d:06:a4:17:9c:78:84:b4: 71:dc:97:a9:1e:42:05:74:44:bc:5f:68:2a:b5:ee:2a:cf:89: c1:7c:22:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LW9FyyYDtULR1hsO4x6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NmJlMTc2YjMxM2UxYThhMDUwZjY3MGFmNTc2NzcxYjY1 NWQ2MTEwHhcNMjYwMTI2MTIwMDQwWhcNMjYwMTI3MTIwMDQwWjAzMTEwLwYDVQQD EygwOWJhNjM5NzI1ZmRmZmI3ZDI5YjcyMDdmMzU3MjUwM2RlMzA2MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Eiv1H+pjHY+lPcQ1IS0ualkz7c1 IbXxEhNvXZXae+Moqno3Bpr/E0LoU+6HRhUA23r7LWkH23lsg8DcPIi8bp0ajfTF UuIT9qs9tKTDdoe1XNZdGrEflIl+4JpvMB53kzL1mefKGUgyNp4HrKli/SvDcoJR 0H6ROsf9iEANNd8eGYaYDR5cVlQ77MHZUe0wE7odjbv8ns94KG+zcZ8yuGZZWjXk iC8FPravg6AU6K/hWPHGBrmIoWTqGQiUymrP3+rX6idEhg/hQbwMm4ZALBWWYqM/ MK9zNfFcgWWKNzqO7gluQS0YBptgbH0/3UVgIM2sOyiR8tgpBbGY8s+jrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm6Y5cl/f+30ptyB/NXJQPeMGI6MB8GA1UdIwQY MBaAFCVr4XazE+GooFD2cK9XZ3G2VdYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMt ZTBiYWM0MTYxOTUzLzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMzUwMzItZWEyNC00YTQ3LThmNWMtZTBiYWM0MTYxOTUz LzEvSld2aGRyTVQ0YWlnVVBad3IxZG5jYlpWMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTJv/9Bq c7zbzx8hULhp6MpauDSjhcaYtqInr8mEgGazdxQLIUpt337AQEyfG8fBE8HQeg/w 7dbZoVgU2Hur/DVHXYxubhnByc12G3R9si3o5CYTJEvqmR35FmksddwWoTwMwx2H /kTitE7vcjuTpMkUO6AAnDi6bL74OSzVykMju6sJ99NzllNtjgYsad/jM4n+kf/H ZVPGmLlsZg89mOCeHmteFK8Y1uk2roD/alyOYmfb+PcnmYJ7R7KwyH4MF+Ty3zCJ lV+FcZvfhcHZ8XdCExArXIl8OeZLhzFtnZCHOz0GpBeceIS0cdyXqR5CBXREvF9o KrXuKs+JwXwiCg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:02 2026 by rpki-client