This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json) Hash identifier: Dud8N6bbl73D316EVxjVQBJKYjDo5R3XnWzr4RKEczo= Subject key identifier: DB:CE:9B:4C:17:0F:6C:C7:01:88:0F:4B:CA:24:CF:10:10:AC:DB:91 Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd Certificate serial: 019BFBADDA55865B4E4871B056A669F73B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft Manifest number: 0CD0 Signing time: Mon 26 Jan 2026 19:00:33 +0000 Manifest this update: Mon 26 Jan 2026 19:00:33 +0000 Manifest next update: Tue 27 Jan 2026 19:00:33 +0000 Files and hashes: 1: hyIL6HSqJA6DV3TQ_73m49DFfWk.roa (hash: JSYCVb3jUqEMKnAogn+SHjD1TLvMtiN042d+14ciUi8=) 2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: qADGm1ddS218OZEnl5MswIt0gVAtHVWItwixbBHiDGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ad:da:55:86:5b:4e:48:71:b0:56:a6:69:f7:3b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd Validity Not Before: Jan 26 19:00:33 2026 GMT Not After : Jan 27 19:00:33 2026 GMT Subject: CN=dbce9b4c170f6cc701880f4bca24cf1010acdb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:1a:b6:d9:b5:65:77:f7:92:f5:4b:fc:1d: 29:be:5e:0e:58:d1:bb:82:8d:ea:e0:e8:6e:52:7f: c6:dc:ac:c0:cb:ff:86:f1:29:f3:39:74:23:0e:80: 45:2f:ea:2d:6d:db:59:32:5b:a0:da:0a:ad:20:f1: 70:21:f2:68:cd:d2:10:5d:88:f7:16:99:e8:79:62: b7:93:82:3d:81:7e:07:d3:ad:2d:f5:74:3f:d8:7e: 3e:4a:fa:b8:b5:f8:56:e4:ff:7b:14:83:ab:4c:48: 6e:3c:74:a2:85:78:07:c8:01:11:60:91:28:ad:6f: ec:83:9c:a2:15:2c:a6:96:86:04:74:9b:ce:07:d6: c8:b7:8b:e9:35:23:78:b5:2d:a4:19:66:b9:22:c4: 72:df:f2:e2:1d:78:c8:cd:0e:c6:0d:d7:25:0c:fc: 60:83:e2:66:1d:77:49:a9:a1:a4:37:d5:a7:49:29: ae:70:d3:62:8a:0e:7b:bd:7f:c0:9a:98:1b:d7:49: f0:80:79:6a:c7:d4:10:be:00:4a:bc:2f:bc:20:b8: 99:1c:1b:fe:43:1b:d8:c3:3c:8c:b2:0a:e3:b0:a0: 11:b2:09:40:e3:5a:6c:45:68:6e:69:24:cb:c2:ab: 02:e9:3f:c5:26:40:f2:07:f2:8a:6b:c5:a4:40:7c: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CE:9B:4C:17:0F:6C:C7:01:88:0F:4B:CA:24:CF:10:10:AC:DB:91 X509v3 Authority Key Identifier: keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:da:dd:24:23:60:24:46:13:29:9e:88:4c:ce:2c:d7:bc: d3:76:5c:90:7a:4f:77:62:c0:46:47:87:23:27:8e:98:c3:bc: 01:e6:86:64:51:9f:3a:9e:96:c0:35:b5:92:19:e2:b7:08:f7: 6f:03:11:dd:0e:4f:d0:8b:5d:6b:81:89:0b:de:01:e2:a1:54: a1:34:14:bc:b4:4f:dc:e7:ed:0e:63:ec:85:93:a3:1a:05:c8: 64:d3:a1:91:58:f2:7d:04:60:3c:82:5d:12:5e:44:0e:5b:e9: b4:b5:93:cf:20:21:ff:c0:16:3b:49:d0:c9:6f:a5:b0:62:9b: 99:32:2a:75:5c:94:57:07:23:b6:77:f6:ef:ae:83:13:ae:d8: 08:5f:61:4a:f1:cf:17:e3:c0:e6:5c:57:a0:e2:89:33:d5:77: cb:ce:ac:9b:1d:8a:01:b8:c3:42:54:de:45:3d:72:1e:04:c5: aa:cc:85:67:59:a6:ec:99:11:ac:b8:64:fe:87:30:ec:64:17: 27:44:e1:c8:2c:c5:4d:26:25:38:fe:77:58:7a:bf:a9:f5:77: 24:ab:bc:c9:0a:c8:f2:73:89:e0:1f:a4:74:e8:8f:3c:94:59: 30:d5:19:9b:54:b6:80:48:49:be:4c:4a:01:01:c4:87:8b:cb: 97:03:af:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rdpVhltOSHGwVqZp9zt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1 NTYxZGQwHhcNMjYwMTI2MTkwMDMzWhcNMjYwMTI3MTkwMDMzWjAzMTEwLwYDVQQD EyhkYmNlOWI0YzE3MGY2Y2M3MDE4ODBmNGJjYTI0Y2YxMDEwYWNkYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujUattm1ZXf3kvVL/B0pvl4OWNG7 go3q4OhuUn/G3KzAy/+G8SnzOXQjDoBFL+otbdtZMlug2gqtIPFwIfJozdIQXYj3 FpnoeWK3k4I9gX4H060t9XQ/2H4+Svq4tfhW5P97FIOrTEhuPHSihXgHyAERYJEo rW/sg5yiFSymloYEdJvOB9bIt4vpNSN4tS2kGWa5IsRy3/LiHXjIzQ7GDdclDPxg g+JmHXdJqaGkN9WnSSmucNNiig57vX/Ampgb10nwgHlqx9QQvgBKvC+8ILiZHBv+ QxvYwzyMsgrjsKARsglA41psRWhuaSTLwqsC6T/FJkDyB/KKa8WkQHwf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvOm0wXD2zHAYgPS8okzxAQrNuRMB8GA1UdIwQY MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApADa3SQj YCRGEymeiEzOLNe803ZckHpPd2LARkeHIyeOmMO8AeaGZFGfOp6WwDW1khnitwj3 bwMR3Q5P0Itda4GJC94B4qFUoTQUvLRP3OftDmPshZOjGgXIZNOhkVjyfQRgPIJd El5EDlvptLWTzyAh/8AWO0nQyW+lsGKbmTIqdVyUVwcjtnf2766DE67YCF9hSvHP F+PA5lxXoOKJM9V3y86smx2KAbjDQlTeRT1yHgTFqsyFZ1mm7JkRrLhk/ocw7GQX J0ThyCzFTSYlOP53WHq/qfV3JKu8yQrI8nOJ4B+kdOiPPJRZMNUZm1S2gEhJvkxK AQHEh4vLlwOvpA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:49 2026 by rpki-client