This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json) Hash identifier: USpy5LO4l/yI4DGGPYh1Nll2jr57Wrw98VC4p+IANNM= Subject key identifier: BE:D0:C7:0E:BD:FA:49:63:60:C2:EA:AC:A4:F8:71:D2:C3:0A:7E:C5 Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Certificate serial: 019BFC1C0CDFE2AAB3EAE5534FC73E4937E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 21:00:55 +0000 Manifest this update: Mon 26 Jan 2026 21:00:55 +0000 Manifest next update: Tue 27 Jan 2026 21:00:55 +0000 Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: XczpO7V6HKmtS6FNh8PX21pAj3ATvW/T0EBpDTJ37dw=) 2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:0c:df:e2:aa:b3:ea:e5:53:4f:c7:3e:49:37:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Validity Not Before: Jan 26 21:00:55 2026 GMT Not After : Jan 27 21:00:55 2026 GMT Subject: CN=bed0c70ebdfa496360c2eaaca4f871d2c30a7ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:92:03:dd:39:6e:ce:18:c6:53:52:a9:8a: 36:6d:08:3d:ff:3c:7a:56:6e:a8:24:9f:a3:ff:b8: 75:5f:2a:30:14:ce:19:16:96:f3:3c:dc:09:b5:55: 64:b8:af:3f:8f:29:ea:85:4e:ba:4e:97:50:84:91: 67:28:ba:24:12:6d:5a:fc:4f:71:28:b3:1c:0b:eb: 4e:b6:71:be:d1:e2:f5:3b:94:27:2f:ce:70:6a:fd: cc:7a:81:d4:4d:3d:67:de:f2:a5:c2:b6:34:0c:a7: ce:5a:63:b9:69:db:7e:6b:7d:35:ff:2c:8c:d8:49: 4f:83:ba:33:ed:49:06:a2:f8:3d:3b:75:53:a4:94: 3a:a1:fe:b6:dc:c3:2a:89:43:c4:0e:a5:ce:c5:25: 11:2a:15:35:4e:f2:7b:2b:81:00:94:fa:74:72:ae: 76:2a:00:65:42:ab:73:0a:e7:28:85:11:fc:c0:57: 72:be:bb:7e:a3:4c:69:19:9d:b7:fe:61:50:d8:6d: 50:15:52:f4:6b:65:e0:ee:2a:b1:84:40:5b:88:91: 2d:c8:5b:a5:f1:bb:ea:6f:c9:d6:6c:52:d8:61:76: 65:d8:1b:16:cd:03:32:33:f4:ba:9c:d8:ec:c0:3b: 81:25:80:bb:19:79:c0:2a:bd:49:fb:24:c7:36:0d: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D0:C7:0E:BD:FA:49:63:60:C2:EA:AC:A4:F8:71:D2:C3:0A:7E:C5 X509v3 Authority Key Identifier: keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:18:59:27:ed:e8:35:62:45:0e:28:a1:1e:88:80:9c:e1:2f: b9:b3:61:7f:d2:59:4d:0e:b7:89:94:b1:9f:ca:7d:25:1c:f5: 47:e4:90:1c:52:85:0c:cd:c8:1f:33:06:99:a5:e6:25:cf:5b: 24:b8:eb:29:be:35:74:96:59:a6:9f:ec:33:ea:85:f1:1b:56: 46:89:18:d3:50:96:a7:2f:08:a1:95:c4:d9:20:3b:98:37:e4: 55:c1:bb:07:2e:c5:2a:ff:f3:06:16:c8:60:71:b7:62:f0:3a: 1f:66:66:08:1f:46:ae:62:7e:58:dd:5f:81:6b:53:7d:be:51: 38:ab:d0:8b:f9:af:11:e4:1b:b0:fd:59:2d:97:e0:0d:5f:4d: cf:fa:e6:3e:ce:7e:a3:3c:f9:cb:27:83:ae:be:7a:18:8a:2b: 3a:a7:2d:af:11:7e:cf:9d:9a:15:0c:48:40:5e:a0:60:04:0f: 84:80:c6:8c:5b:0b:0a:0f:e4:a3:82:a5:3f:4b:ad:3d:44:c7: dc:7a:b0:2c:14:9e:1b:d8:33:69:fc:6e:0a:9e:fa:2c:46:d5: 1a:d2:a4:9f:20:2d:d5:1b:c9:5b:3f:89:de:10:61:5a:7b:fa: 11:8c:a6:0c:a8:16:41:98:70:2d:35:2b:72:5f:59:94:0e:02: f0:61:ca:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HAzf4qqz6uVTT8c+STfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz MjA4MjkwHhcNMjYwMTI2MjEwMDU1WhcNMjYwMTI3MjEwMDU1WjAzMTEwLwYDVQQD EyhiZWQwYzcwZWJkZmE0OTYzNjBjMmVhYWNhNGY4NzFkMmMzMGE3ZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveGSA905bs4YxlNSqYo2bQg9/zx6 Vm6oJJ+j/7h1XyowFM4ZFpbzPNwJtVVkuK8/jynqhU66TpdQhJFnKLokEm1a/E9x KLMcC+tOtnG+0eL1O5QnL85wav3MeoHUTT1n3vKlwrY0DKfOWmO5adt+a301/yyM 2ElPg7oz7UkGovg9O3VTpJQ6of623MMqiUPEDqXOxSURKhU1TvJ7K4EAlPp0cq52 KgBlQqtzCucohRH8wFdyvrt+o0xpGZ23/mFQ2G1QFVL0a2Xg7iqxhEBbiJEtyFul 8bvqb8nWbFLYYXZl2BsWzQMyM/S6nNjswDuBJYC7GXnAKr1J+yTHNg1ENQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Qxw69+kljYMLqrKT4cdLDCn7FMB8GA1UdIwQY MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0 LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBhZJ+3o NWJFDiihHoiAnOEvubNhf9JZTQ63iZSxn8p9JRz1R+SQHFKFDM3IHzMGmaXmJc9b JLjrKb41dJZZpp/sM+qF8RtWRokY01CWpy8IoZXE2SA7mDfkVcG7By7FKv/zBhbI YHG3YvA6H2ZmCB9GrmJ+WN1fgWtTfb5ROKvQi/mvEeQbsP1ZLZfgDV9Nz/rmPs5+ ozz5yyeDrr56GIorOqctrxF+z52aFQxIQF6gYAQPhIDGjFsLCg/ko4KlP0utPUTH 3HqwLBSeG9gzafxuCp76LEbVGtKknyAt1RvJWz+J3hBhWnv6EYymDKgWQZhwLTUr cl9ZlA4C8GHKlg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:42:38 2026 by rpki-client