This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json) Hash identifier: kkPIGRGqr933mGtlSZHpH2on2zGlFI6VH9h9Wg2e1tM= Subject key identifier: DB:46:E6:70:2A:7C:22:92:05:B8:0B:7D:4D:7D:6A:E4:08:A7:00:91 Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70 Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70 Certificate serial: 019B79007D309C48B2B0B4EEFD8383959D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft Manifest number: 0FFA Signing time: Thu 01 Jan 2026 10:00:33 +0000 Manifest this update: Thu 01 Jan 2026 10:00:33 +0000 Manifest next update: Fri 02 Jan 2026 10:00:33 +0000 Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: 5x40QSKU5MXap+PnO4Oi5Z8PJ/1FL0xTl3wCF49Z/8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:7d:30:9c:48:b2:b0:b4:ee:fd:83:83:95:9d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70 Validity Not Before: Jan 1 10:00:33 2026 GMT Not After : Jan 2 10:00:33 2026 GMT Subject: CN=db46e6702a7c229205b80b7d4d7d6ae408a70091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:40:4f:1c:dd:95:79:01:7f:44:d1:f3:d7: 7c:a3:4a:4a:0b:e1:76:96:9c:5e:6b:bb:e2:d5:06: 74:51:20:1b:33:1d:b0:39:15:12:94:9d:17:6a:5c: ec:e2:ed:44:ca:5a:78:74:82:bd:b9:cc:63:5b:8a: 4b:61:c9:61:2c:2c:60:10:e2:98:e4:09:85:15:7c: 64:a9:36:46:45:43:95:f3:e6:87:71:2b:71:05:d4: c9:76:ef:8b:db:0b:ad:94:92:45:1b:18:9f:cd:1b: 04:91:0c:a5:04:58:8d:ca:21:d8:d2:e8:d5:1d:6e: c9:8f:9e:b5:f3:ae:06:e4:0c:ad:df:e0:37:88:d3: f9:0f:f6:d1:99:da:ac:9e:f2:30:7b:a6:b3:a8:b7: c1:af:eb:52:81:0c:7a:bc:63:d1:13:bb:ac:53:37: 62:2b:89:06:80:ab:16:f6:0a:31:a5:85:9c:ac:42: 75:36:02:02:7b:8a:89:4c:1d:a0:ff:1e:9c:83:5a: 6e:52:9c:7d:10:7f:f6:5a:e7:e5:02:52:ec:d4:ee: c8:82:84:b1:82:42:85:49:a1:c4:e4:df:2d:b0:79: ca:9c:59:02:12:3c:f9:04:e5:cc:c6:a2:0a:7e:6b: ee:d9:d4:c6:25:e1:9a:30:12:9d:39:32:af:f0:09: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:46:E6:70:2A:7C:22:92:05:B8:0B:7D:4D:7D:6A:E4:08:A7:00:91 X509v3 Authority Key Identifier: keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4e:f8:e2:de:d3:5d:ee:f5:17:01:bc:df:7c:bf:89:2d:dd: 57:b3:41:93:b4:cf:b3:64:0a:3a:7e:7a:61:7c:1d:8a:2b:31: 09:97:7f:b3:92:a0:45:5a:d3:5b:9e:87:cf:20:ae:89:31:56: 99:6a:29:2f:93:88:6f:cf:84:17:d7:b3:19:ed:68:5f:eb:b3: fb:34:30:81:5d:99:73:b7:63:25:2d:98:63:c8:37:bf:4d:d1: e1:82:bf:6e:87:dd:5b:9e:7c:42:cb:11:b5:9e:ab:36:d7:50: f4:99:59:61:40:b0:a7:7e:90:f3:ff:dc:e0:e8:cb:41:4b:84: dc:61:a2:1c:02:67:ec:79:00:c7:2c:eb:e0:19:03:f3:1a:a8: dc:c2:8b:ae:a9:aa:ec:ee:88:99:fe:b2:1d:37:19:74:af:f8: da:5c:21:16:27:d0:8b:ba:82:41:2b:b6:a9:6b:23:6a:18:6a: 6a:09:08:24:75:d7:f1:40:16:42:c3:f3:5d:53:55:cc:95:6a: c6:94:44:55:07:44:42:12:44:60:8b:7d:fd:81:ed:11:ff:1a: 63:93:5f:6f:5d:27:69:c3:8b:7b:28:77:bf:7b:86:8b:42:3c: 71:71:2a:2c:69:a6:44:21:37:48:e9:d5:4c:61:11:ed:20:f9: 90:5e:d0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5AH0wnEiysLTu/YODlZ1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2E2MTczOWVmNjdlYzQ3YTVmZDEwZTU2ZmM3YTM0ZGNi NzNjNzAwHhcNMjYwMTAxMTAwMDMzWhcNMjYwMTAyMTAwMDMzWjAzMTEwLwYDVQQD EyhkYjQ2ZTY3MDJhN2MyMjkyMDViODBiN2Q0ZDdkNmFlNDA4YTcwMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PhATxzdlXkBf0TR89d8o0pKC+F2 lpxea7vi1QZ0USAbMx2wORUSlJ0Xalzs4u1Eylp4dIK9ucxjW4pLYclhLCxgEOKY 5AmFFXxkqTZGRUOV8+aHcStxBdTJdu+L2wutlJJFGxifzRsEkQylBFiNyiHY0ujV HW7Jj561864G5Ayt3+A3iNP5D/bRmdqsnvIwe6azqLfBr+tSgQx6vGPRE7usUzdi K4kGgKsW9goxpYWcrEJ1NgICe4qJTB2g/x6cg1puUpx9EH/2WuflAlLs1O7IgoSx gkKFSaHE5N8tsHnKnFkCEjz5BOXMxqIKfmvu2dTGJeGaMBKdOTKv8Ak4dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtG5nAqfCKSBbgLfU19auQIpwCRMB8GA1UdIwQY MBaAFI96YXOe9n7Eel/RDlb8ejTctzxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mN2MxNGItNDExNS00YTkyLTgxYjUt NzM4OTQwODEwYWRmLzEvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mN2MxNGItNDExNS00YTkyLTgxYjUtNzM4OTQwODEwYWRm LzEvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlU744t7T Xe71FwG833y/iS3dV7NBk7TPs2QKOn56YXwdiisxCZd/s5KgRVrTW56HzyCuiTFW mWopL5OIb8+EF9ezGe1oX+uz+zQwgV2Zc7djJS2YY8g3v03R4YK/bofdW558QssR tZ6rNtdQ9JlZYUCwp36Q8//c4OjLQUuE3GGiHAJn7HkAxyzr4BkD8xqo3MKLrqmq 7O6Imf6yHTcZdK/42lwhFifQi7qCQSu2qWsjahhqagkIJHXX8UAWQsPzXVNVzJVq xpREVQdEQhJEYIt9/YHtEf8aY5Nfb10nacOLeyh3v3uGi0I8cXEqLGmmRCE3SOnV TGER7SD5kF7QCA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:05 2026 by rpki-client