This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json) Hash identifier: Lr27Jv85lzB4BwROGI2PA043Lw7ndLVlzSIqgZmvCJQ= Subject key identifier: 35:EF:B1:79:69:33:D5:A7:3A:CC:B9:E5:A1:ED:28:EA:07:71:F3:EC Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Certificate serial: 019C1C4BFC4FC7FA76A8135B33403C9AF081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft Manifest number: 17FD Signing time: Mon 02 Feb 2026 03:01:07 +0000 Manifest this update: Mon 02 Feb 2026 03:01:07 +0000 Manifest next update: Tue 03 Feb 2026 03:01:07 +0000 Files and hashes: 1: _xbk6TstsNtf1uEDvwohYt6Gqmg.roa (hash: POljjhEax4aAurVZjBSXk9yYPwBhrXFZZutRKo1D0lI=) 2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: cuwyRJlRYhn2jaFZd61dxj83NxWAEkbs01di8rYiZPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4b:fc:4f:c7:fa:76:a8:13:5b:33:40:3c:9a:f0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Validity Not Before: Feb 2 03:01:07 2026 GMT Not After : Feb 3 03:01:07 2026 GMT Subject: CN=35efb1796933d5a73accb9e5a1ed28ea0771f3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:68:0e:d0:6f:26:36:0a:b9:a1:c7:ed:66: 6f:56:02:fb:4f:26:a3:a1:39:2e:45:fb:83:69:e5: e6:9e:00:d3:f0:d1:7c:a3:6a:db:d9:93:a4:70:35: ec:34:b4:45:42:ad:73:53:28:6a:a6:78:4b:5a:fe: b3:03:72:7f:14:c1:8d:52:76:27:a4:0b:20:39:5c: a4:a2:ac:c8:18:6b:01:10:04:c9:90:70:05:d5:18: 0f:b9:e6:01:b4:1d:94:38:6c:bc:b9:3e:61:3e:67: 34:65:72:c8:38:2d:d2:75:a2:42:66:74:4e:55:86: 1e:5c:62:11:f0:f9:74:f3:9d:92:40:95:59:e7:dd: b5:ce:30:b1:01:cb:35:17:38:0f:cc:2a:9b:35:65: 9c:84:f3:eb:20:11:38:ff:88:f4:e8:9f:6b:f5:91: 83:39:40:94:1c:13:b5:b5:e5:a8:95:88:94:0d:3d: f5:86:b9:ed:05:49:9d:d8:d3:1d:bf:08:3b:70:bc: a8:5b:0c:00:b2:5e:c6:85:3a:39:d4:73:00:59:a9: c4:dd:51:f7:5c:f5:b4:d2:c4:4e:9a:6b:53:e9:b2: de:37:be:0a:e6:d8:95:8b:08:88:40:48:48:11:03: 40:26:11:88:40:59:50:c0:d3:70:eb:c4:f3:ed:5d: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:B1:79:69:33:D5:A7:3A:CC:B9:E5:A1:ED:28:EA:07:71:F3:EC X509v3 Authority Key Identifier: keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d1:03:53:c2:83:cc:72:28:67:6e:eb:4a:29:c6:8d:8f:28: e5:28:a3:5e:54:59:29:49:bb:57:d8:24:1f:fa:b4:0a:f4:c7: dc:f6:49:a1:71:27:60:7b:b6:8d:cb:f4:e8:1c:9c:05:cb:9f: 97:82:7b:2e:6e:d9:b0:78:d8:28:ac:18:96:f0:26:d8:69:42: 32:0e:21:ed:81:d8:b2:a6:7e:9e:03:8b:46:e5:13:c0:dd:1e: 45:b3:86:3a:d6:78:bc:a1:2a:1a:e9:75:65:40:a8:9f:f6:85: ba:00:dd:c5:a7:1f:bf:59:bc:82:6b:bb:d8:38:a1:d8:39:31: 70:7b:6c:7a:2f:b7:c3:f1:14:0e:43:fb:d8:77:66:6a:e7:60: 70:e9:fc:51:14:04:a2:4a:d1:ca:5b:e0:85:44:71:d5:f1:2e: 19:50:7a:84:ac:e8:a6:5e:97:47:ba:07:b5:8b:f4:50:f9:e7: a9:45:76:ab:66:88:4f:f7:3e:fe:49:f6:2c:e7:d6:ed:84:72: b1:70:ef:7b:2e:ed:7d:f8:8a:96:07:da:e3:20:bf:2c:35:9a: 2f:9c:c3:65:db:27:c2:76:a4:39:1a:f2:4b:64:41:7a:58:41: ec:c8:54:89:14:16:41:c9:eb:d2:e5:e5:a7:53:24:f7:9f:b9: f8:c6:8a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcS/xPx/p2qBNbM0A8mvCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3 Nzk3YWYwHhcNMjYwMjAyMDMwMTA3WhcNMjYwMjAzMDMwMTA3WjAzMTEwLwYDVQQD EygzNWVmYjE3OTY5MzNkNWE3M2FjY2I5ZTVhMWVkMjhlYTA3NzFmM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm9oDtBvJjYKuaHH7WZvVgL7Tyaj oTkuRfuDaeXmngDT8NF8o2rb2ZOkcDXsNLRFQq1zUyhqpnhLWv6zA3J/FMGNUnYn pAsgOVykoqzIGGsBEATJkHAF1RgPueYBtB2UOGy8uT5hPmc0ZXLIOC3SdaJCZnRO VYYeXGIR8Pl0852SQJVZ5921zjCxAcs1FzgPzCqbNWWchPPrIBE4/4j06J9r9ZGD OUCUHBO1teWolYiUDT31hrntBUmd2NMdvwg7cLyoWwwAsl7GhTo51HMAWanE3VH3 XPW00sROmmtT6bLeN74K5tiViwiIQEhIEQNAJhGIQFlQwNNw68Tz7V1FSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXvsXlpM9WnOsy55aHtKOoHcfPsMB8GA1UdIwQY MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdEDU8KD zHIoZ27rSinGjY8o5SijXlRZKUm7V9gkH/q0CvTH3PZJoXEnYHu2jcv06BycBcuf l4J7Lm7ZsHjYKKwYlvAm2GlCMg4h7YHYsqZ+ngOLRuUTwN0eRbOGOtZ4vKEqGul1 ZUCon/aFugDdxacfv1m8gmu72Dih2DkxcHtsei+3w/EUDkP72HdmaudgcOn8URQE okrRylvghURx1fEuGVB6hKzopl6XR7oHtYv0UPnnqUV2q2aIT/c+/kn2LOfW7YRy sXDvey7tffiKlgfa4yC/LDWaL5zDZdsnwnakORryS2RBelhB7MhUiRQWQcnr0uXl p1Mk95+5+MaKWg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:24 2026 by rpki-client