This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json) Hash identifier: K5wCjP2Su6bNODd/oc1gryPN7ZU3wW1rZGJtSLTMwU0= Subject key identifier: 8F:AE:9F:3A:DE:74:96:BA:A4:EA:6C:7C:39:06:BB:57:CF:49:78:65 Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Certificate serial: 019B97B02B91034F7111B16C4CE566B50AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft Manifest number: 173A Signing time: Wed 07 Jan 2026 09:01:03 +0000 Manifest this update: Wed 07 Jan 2026 09:01:03 +0000 Manifest next update: Thu 08 Jan 2026 09:01:03 +0000 Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=) 2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: GHWLrYR3qPnzE7gZHfIe2oK3NJrkoi3ya3qtuVmaWY8=) 3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:b0:2b:91:03:4f:71:11:b1:6c:4c:e5:66:b5:0a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7 Validity Not Before: Jan 7 09:01:03 2026 GMT Not After : Jan 8 09:01:03 2026 GMT Subject: CN=8fae9f3ade7496baa4ea6c7c3906bb57cf497865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:72:5a:43:ee:51:51:a8:48:21:8f:3b:33: 36:95:be:fb:1d:2b:da:eb:98:93:34:4e:69:ba:f0: 31:89:62:df:4d:55:81:ed:cf:ab:f6:f8:1b:f8:a1: 13:af:f1:7e:81:d5:bc:95:57:cf:db:c6:8a:54:de: cd:a3:98:c2:ef:87:bb:79:8a:d8:ab:17:14:d2:67: 88:55:f6:c0:98:fa:da:3d:ef:3b:b3:54:5f:ce:03: 04:e7:4d:ab:5f:c6:01:b9:3d:30:ba:29:c7:df:5d: f0:f5:0d:2f:f2:e4:07:f2:16:b3:92:9c:41:4a:1b: a7:bc:bb:6c:7e:50:5e:6d:3c:dd:49:24:83:8d:f3: 7b:8d:40:b7:f4:80:b3:22:54:50:9d:cd:8f:d6:4d: 5a:4c:7e:50:83:d5:d3:c3:ab:7c:38:cd:8a:35:9d: 4e:8d:72:8a:d8:cc:dd:1c:f0:f4:4f:27:46:dc:a1: 53:61:8d:4d:7b:7f:b9:de:3a:f3:3d:8b:e9:b9:0e: fb:8f:d4:60:9a:eb:2f:78:64:1c:3f:33:68:62:78: 95:46:fb:ec:80:ed:77:9e:a5:27:dc:88:89:88:c5: c0:cf:3a:da:19:07:6d:47:6f:74:68:5f:21:fe:de: 9e:57:b6:25:e5:a4:7b:d7:6d:55:f3:31:48:68:70: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AE:9F:3A:DE:74:96:BA:A4:EA:6C:7C:39:06:BB:57:CF:49:78:65 X509v3 Authority Key Identifier: keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5e:83:fb:80:77:b4:1b:1b:96:a1:13:dd:f4:32:c0:5c:fa: 42:49:87:27:25:85:64:7c:aa:85:b8:8c:4d:3e:fe:29:f5:6e: 8b:a5:77:28:70:e4:a3:5f:20:ee:4a:d4:72:99:ad:03:b1:2d: 13:94:1e:49:92:1b:4e:23:29:ca:95:d2:c3:3e:11:f4:32:cb: d9:35:f1:c0:81:c0:27:20:5e:e2:a5:0e:4c:d2:5c:6b:02:21: 55:73:e3:08:02:b8:aa:a1:d9:e7:6a:23:7a:00:bd:83:7a:8e: 13:ae:04:32:7f:18:0d:61:56:b8:c7:60:1d:9b:6f:41:70:95: 78:f2:a9:2c:fa:c8:c8:b6:b3:a9:05:8c:51:0a:3d:4b:56:35: cd:10:65:3e:33:8f:4e:ed:3d:88:08:17:0c:82:21:f1:73:8c: 6f:30:f6:a2:d0:1f:71:97:6a:5d:21:a6:9b:4d:4b:5d:5d:00: 97:94:1e:19:1a:43:25:1d:48:af:c6:0e:3f:b0:31:49:04:d9: 22:cf:33:40:50:db:19:59:ac:c1:35:f6:f0:03:0b:24:c4:16: 29:09:d7:93:cc:70:0c:6c:45:6f:2d:d4:42:dc:32:20:ea:1a: e9:e5:ff:47:65:f3:51:1f:59:a0:e9:cf:94:44:20:ef:1e:b2: 28:60:59:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXsCuRA09xEbFsTOVmtQrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl ZGMwYTcwHhcNMjYwMTA3MDkwMTAzWhcNMjYwMTA4MDkwMTAzWjAzMTEwLwYDVQQD Eyg4ZmFlOWYzYWRlNzQ5NmJhYTRlYTZjN2MzOTA2YmI1N2NmNDk3ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AhyWkPuUVGoSCGPOzM2lb77HSva 65iTNE5puvAxiWLfTVWB7c+r9vgb+KETr/F+gdW8lVfP28aKVN7No5jC74e7eYrY qxcU0meIVfbAmPraPe87s1RfzgME502rX8YBuT0wuinH313w9Q0v8uQH8hazkpxB ShunvLtsflBebTzdSSSDjfN7jUC39ICzIlRQnc2P1k1aTH5Qg9XTw6t8OM2KNZ1O jXKK2MzdHPD0TydG3KFTYY1Ne3+53jrzPYvpuQ77j9RgmusveGQcPzNoYniVRvvs gO13nqUn3IiJiMXAzzraGQdtR290aF8h/t6eV7Yl5aR7121V8zFIaHBKbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+unzredJa6pOpsfDkGu1fPSXhlMB8GA1UdIwQY MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt Y2U2OTU1Njc2MWJkLzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW16D+4B3 tBsblqET3fQywFz6QkmHJyWFZHyqhbiMTT7+KfVui6V3KHDko18g7krUcpmtA7Et E5QeSZIbTiMpypXSwz4R9DLL2TXxwIHAJyBe4qUOTNJcawIhVXPjCAK4qqHZ52oj egC9g3qOE64EMn8YDWFWuMdgHZtvQXCVePKpLPrIyLazqQWMUQo9S1Y1zRBlPjOP Tu09iAgXDIIh8XOMbzD2otAfcZdqXSGmm01LXV0Al5QeGRpDJR1Ir8YOP7AxSQTZ Is8zQFDbGVmswTX28AMLJMQWKQnXk8xwDGxFby3UQtwyIOoa6eX/R2XzUR9ZoOnP lEQg7x6yKGBZ7A== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:43 2026 by rpki-client