This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json) Hash identifier: WiGLsB1rJnv2pPGiB5OWrvKrMY+AWgmwQvOy3RJvZTg= Subject key identifier: B2:7C:B1:17:DC:DA:71:25:13:E3:0D:1B:69:38:54:99:A6:C9:C0:06 Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Certificate serial: 019B9C9FD36EBE6786CCC1C422695A2DDDC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft Manifest number: 072D Signing time: Thu 08 Jan 2026 08:01:18 +0000 Manifest this update: Thu 08 Jan 2026 08:01:18 +0000 Manifest next update: Fri 09 Jan 2026 08:01:18 +0000 Files and hashes: 1: ZdluKAeiGgNMdIKSFBpouvQoMFU.roa (hash: c9wab7GyUrk1eImAM4TBW2aXlrKgz7syJ0UrZ/J8cJ4=) 2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: ty5eQNJvXrHKJJUX0RXrfzgrYlmXiFg5/MYTbyayy8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:9f:d3:6e:be:67:86:cc:c1:c4:22:69:5a:2d:dd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Validity Not Before: Jan 8 08:01:18 2026 GMT Not After : Jan 9 08:01:18 2026 GMT Subject: CN=b27cb117dcda712513e30d1b69385499a6c9c006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:c5:a8:e8:64:ef:46:bf:e4:6d:cd:df:8d: 5a:24:7f:d6:bf:51:c5:f1:8d:14:18:2e:13:13:de: 7b:5e:6d:23:2f:90:cc:71:20:ba:22:44:8e:71:04: 42:09:08:7c:34:b3:72:0f:48:84:be:f6:0d:b4:2d: a1:c7:c1:4f:0a:d0:73:a1:2b:82:ec:cf:81:b4:5f: ed:da:bd:95:8f:45:d5:47:dc:94:bc:c3:2c:b4:40: 0e:94:d1:0d:fc:cd:a3:bc:da:f0:dd:d0:01:e3:4f: 1b:dd:4b:83:85:44:a1:85:0b:05:8e:e3:87:7a:e2: d2:e1:cf:d2:b0:f0:87:55:22:74:4b:e6:91:d5:69: 88:e6:c3:83:dd:a5:fa:34:af:e6:44:fd:96:09:93: e6:a7:cf:08:4b:71:12:72:78:db:ba:27:1d:62:3b: 56:e5:25:63:88:ce:c1:8d:ae:0a:0a:a6:6f:1c:0c: 23:f7:0b:c0:c8:c6:fd:69:a7:eb:2f:12:dd:88:e8: 72:21:35:05:a2:ec:25:b1:f0:a4:fb:61:6e:6d:58: f9:6f:27:c7:c0:69:24:aa:27:a5:91:54:09:12:24: 2d:f8:67:9a:0d:be:63:72:c7:53:46:ef:53:28:27: fa:ad:70:3b:4a:4c:6f:85:3c:3f:4e:3a:44:f2:1a: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7C:B1:17:DC:DA:71:25:13:E3:0D:1B:69:38:54:99:A6:C9:C0:06 X509v3 Authority Key Identifier: keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:33:23:bd:b1:44:3b:b2:40:d7:a8:22:0a:da:29:08:05:ad: 0a:49:50:ef:e2:e3:ef:10:b1:a5:41:4e:0a:b6:ea:7d:68:89: f1:1f:23:1c:f7:07:4d:18:35:1e:60:97:70:b6:1a:aa:5b:a8: c5:3c:ce:cb:b5:45:86:2e:4c:9c:fb:a3:4e:3c:62:eb:ed:b1: 9b:49:28:5e:55:85:c2:cc:f7:c4:f2:35:8b:0a:f4:64:9c:ba: da:70:b2:64:2f:bb:4a:57:a3:77:67:bb:7b:f6:9b:f2:0b:c2: 4b:9a:af:78:51:1c:4e:aa:0c:72:2e:f9:e8:79:92:63:1c:c2: 00:1c:a6:6f:4c:d4:07:d9:93:23:40:e8:56:f6:4f:86:31:77: b0:2a:bc:d6:8c:bd:f9:d4:3d:bf:bb:e1:80:8c:a3:8f:29:26: 24:6d:ed:a3:ec:06:b3:34:a2:35:c9:4a:78:2b:24:b3:f0:9f: 71:b9:ca:be:f2:f7:55:e4:56:eb:41:21:ad:36:2c:7d:1a:f5: ff:73:de:cf:d4:87:bd:f2:05:6a:90:03:4c:6c:0f:f2:16:04: cf:89:a0:22:26:2e:ff:04:e2:41:4e:ab:b2:a4:ac:ca:cc:ea: e4:98:bc:b4:3d:16:6b:fb:f2:48:6c:89:8e:22:57:49:4a:79: ed:f1:fd:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucn9NuvmeGzMHEImlaLd3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTI4MmE1NzZmZDYyYTBhMjQxNjZiNWVjMWYxMjRlNDI1 OGRiNDkwHhcNMjYwMTA4MDgwMTE4WhcNMjYwMTA5MDgwMTE4WjAzMTEwLwYDVQQD EyhiMjdjYjExN2RjZGE3MTI1MTNlMzBkMWI2OTM4NTQ5OWE2YzljMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOfFqOhk70a/5G3N341aJH/Wv1HF 8Y0UGC4TE957Xm0jL5DMcSC6IkSOcQRCCQh8NLNyD0iEvvYNtC2hx8FPCtBzoSuC 7M+BtF/t2r2Vj0XVR9yUvMMstEAOlNEN/M2jvNrw3dAB408b3UuDhUShhQsFjuOH euLS4c/SsPCHVSJ0S+aR1WmI5sOD3aX6NK/mRP2WCZPmp88IS3EScnjbuicdYjtW 5SVjiM7Bja4KCqZvHAwj9wvAyMb9aafrLxLdiOhyITUFouwlsfCk+2FubVj5byfH wGkkqielkVQJEiQt+GeaDb5jcsdTRu9TKCf6rXA7SkxvhTw/TjpE8hpeIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ8sRfc2nElE+MNG2k4VJmmycAGMB8GA1UdIwQY MBaAFPySgqV2/WKgokFmtewfEk5CWNtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjIt NWNlOTgzMmU3NDk1LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjItNWNlOTgzMmU3NDk1 LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljMjvbFE O7JA16giCtopCAWtCklQ7+Lj7xCxpUFOCrbqfWiJ8R8jHPcHTRg1HmCXcLYaqluo xTzOy7VFhi5MnPujTjxi6+2xm0koXlWFwsz3xPI1iwr0ZJy62nCyZC+7Slejd2e7 e/ab8gvCS5qveFEcTqoMci756HmSYxzCABymb0zUB9mTI0DoVvZPhjF3sCq81oy9 +dQ9v7vhgIyjjykmJG3to+wGszSiNclKeCsks/CfcbnKvvL3VeRW60EhrTYsfRr1 /3Pez9SHvfIFapADTGwP8hYEz4mgIiYu/wTiQU6rsqSsyszq5Ji8tD0Wa/vySGyJ jiJXSUp57fH9ow== -----END CERTIFICATE-----Generated at Thu Jan 8 13:46:41 2026 by rpki-client